@k-leumas/queque-cli 0.3.9 → 0.4.0

package/dist/cli/main.js

@@ -28,6 +28,165 @@ import { promisify as promisify2 } from "util";
 
 // src/shared/debug-log.ts
 import * as fsp from "fs/promises";
+
+// src/shared/qq-config.ts
+import { readFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+import { z } from "zod";
+var DEFAULT_SENSITIVE_PATH_PATTERNS = [
+  "\\.env",
+  "credentials",
+  "\\.pem$",
+  "id_rsa",
+  "\\.ssh/",
+  "\\.aws/",
+  "secret"
+];
+var DEFAULT_REDACT_LOG_KEYS = ["lbuffer", "rbuffer", "queryText", "request"];
+var DEFAULT_DESTRUCTIVE_COMMAND_PATTERNS = [
+  "\\brm\\s+(-?-?\\w+)?\\b",
+  "\\bsudo\\b",
+  "\\bchmod\\s+-R\\b",
+  ">\\s*/dev/",
+  "\\bcurl\\b[^\\n|]*\\|\\s*sh\\b",
+  "\\bwget\\b[^\\n|]*\\|\\s*sh\\b"
+];
+var privacyConfigSchema = z.object({
+  sensitivePathPatterns: z.array(z.string()).optional(),
+  redactLogKeys: z.array(z.string()).optional(),
+  allowFileRead: z.boolean().optional(),
+  useGitignore: z.boolean().optional().describe(
+    "Not yet implemented \u2014 this config option will enable gitignore-based filtering in the future. Placeholder only."
+  )
+}).optional();
+var safetyConfigSchema = z.object({
+  destructiveCommandPatterns: z.array(z.string()).optional()
+}).optional();
+var qqConfigFileSchema = z.object({
+  privacy: privacyConfigSchema,
+  safety: safetyConfigSchema
+});
+var cachedConfig = null;
+function defaultConfigPath() {
+  return process.env.QQ_CONFIG_FILE ?? join(homedir(), ".config", "qq", "config.json");
+}
+var MAX_PATTERN_LENGTH = 256;
+function compilePatterns(patterns) {
+  const compiled = [];
+  for (const source of patterns) {
+    if (source.length > MAX_PATTERN_LENGTH) {
+      continue;
+    }
+    try {
+      compiled.push(new RegExp(source, "i"));
+    } catch {
+    }
+  }
+  return compiled;
+}
+function envFlagEnabled(name) {
+  const value = process.env[name];
+  return value === "1" || value === "true";
+}
+function readConfigFile() {
+  const configPath = defaultConfigPath();
+  let raw;
+  try {
+    raw = readFileSync(configPath, "utf8");
+  } catch (error) {
+    const code = error.code;
+    if (code === "ENOENT") {
+      return {};
+    }
+    return {};
+  }
+  try {
+    return qqConfigFileSchema.parse(JSON.parse(raw));
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    console.warn(`queque: ignoring invalid config at ${configPath}: ${message}`);
+    return {};
+  }
+}
+function loadQqConfig() {
+  if (cachedConfig) {
+    return cachedConfig;
+  }
+  const file = readConfigFile();
+  const sensitivePatterns = [
+    ...DEFAULT_SENSITIVE_PATH_PATTERNS,
+    ...file.privacy?.sensitivePathPatterns ?? []
+  ];
+  const redactKeys = [...DEFAULT_REDACT_LOG_KEYS, ...file.privacy?.redactLogKeys ?? []];
+  const destructivePatterns = [
+    ...DEFAULT_DESTRUCTIVE_COMMAND_PATTERNS,
+    ...file.safety?.destructiveCommandPatterns ?? []
+  ];
+  const allowFileRead = envFlagEnabled("QQ_ALLOW_FILE_READ") || (file.privacy?.allowFileRead ?? false);
+  cachedConfig = {
+    sensitivePathRegexes: compilePatterns(sensitivePatterns),
+    redactLogKeys: new Set(redactKeys),
+    allowFileRead,
+    destructiveCommandRegexes: compilePatterns(destructivePatterns)
+  };
+  return cachedConfig;
+}
+
+// src/shared/privacy-filter.ts
+function isSensitivePath(path2) {
+  const { sensitivePathRegexes } = loadQqConfig();
+  return sensitivePathRegexes.some((pattern) => pattern.test(path2));
+}
+function filterContextEnvelope(envelope) {
+  return {
+    ...envelope,
+    extras: envelope.extras.map((chunk) => {
+      if (chunk.kind !== "git") {
+        return chunk;
+      }
+      return {
+        ...chunk,
+        payload: {
+          ...chunk.payload,
+          changedFiles: chunk.payload.changedFiles.filter((filePath) => !isSensitivePath(filePath))
+        }
+      };
+    })
+  };
+}
+function redactForLog(details) {
+  if (process.env.QQ_DEBUG_VERBOSE === "1" || details === void 0) {
+    return details;
+  }
+  if (details === null || typeof details !== "object") {
+    return details;
+  }
+  if (Array.isArray(details)) {
+    return details.map((item) => redactForLog(item));
+  }
+  const { redactLogKeys } = loadQqConfig();
+  const input = details;
+  const output = {};
+  for (const [key, value] of Object.entries(input)) {
+    if (redactLogKeys.has(key)) {
+      if (typeof value === "string") {
+        output[key] = `[redacted:${value.length}chars]`;
+      } else {
+        output[key] = redactForLog(value);
+      }
+      continue;
+    }
+    output[key] = redactForLog(value);
+  }
+  return output;
+}
+function isDestructiveCommand(command) {
+  const { destructiveCommandRegexes } = loadQqConfig();
+  return destructiveCommandRegexes.some((pattern) => pattern.test(command));
+}
+
+// src/shared/debug-log.ts
 var debugLogPath = process.env.QQ_DEBUG_LOG_FILE ?? `/tmp/qq-${process.getuid?.() ?? "unknown"}-debug.log`;
 function formatDetails(details) {
   if (details === void 0) return "";
@@ -38,7 +197,7 @@ function formatDetails(details) {
   }
 }
 async function appendDebugLog(scope, message, details) {
-  const line = `${(/* @__PURE__ */ new Date()).toISOString()} [${scope}] ${message}${formatDetails(details)}
+  const line = `${(/* @__PURE__ */ new Date()).toISOString()} [${scope}] ${message}${formatDetails(redactForLog(details))}
 `;
   try {
     await fsp.appendFile(debugLogPath, line, { encoding: "utf-8", mode: 384 });
@@ -159,6 +318,188 @@ var gitContextProvider = {
   }
 };
 
+// src/providers/claude.ts
+import Anthropic from "@anthropic-ai/sdk";
+
+// src/contracts/candidates.ts
+import { z as z2 } from "zod";
+var commandCandidateSchema = z2.object({
+  command: z2.string().trim().min(1),
+  explanation: z2.string()
+});
+var candidateListSchema = z2.array(commandCandidateSchema).min(1).max(5);
+
+// src/shared/env-file.ts
+import { existsSync, readFileSync as readFileSync2 } from "fs";
+import { dirname, join as join2 } from "path";
+function findUp(startDir, filename) {
+  let current = startDir;
+  while (true) {
+    const candidate = join2(current, filename);
+    if (existsSync(candidate)) {
+      return candidate;
+    }
+    const parent = dirname(current);
+    if (parent === current) {
+      return null;
+    }
+    current = parent;
+  }
+}
+function parseEnvFile(content) {
+  const values = /* @__PURE__ */ new Map();
+  for (const rawLine of content.split(/\r?\n/)) {
+    const line = rawLine.trim();
+    if (!line || line.startsWith("#")) {
+      continue;
+    }
+    const match = line.match(/^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)=(.*)$/);
+    if (!match) {
+      continue;
+    }
+    const [, key, rawValue] = match;
+    let value = rawValue.trim();
+    if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
+      value = value.slice(1, -1);
+    }
+    values.set(key, value);
+  }
+  return values;
+}
+var envCache = /* @__PURE__ */ new Map();
+function readEnvValueFromDotEnvLocal(key, startDir = process.cwd()) {
+  const cacheKey = `${key}\0${startDir}`;
+  if (envCache.has(cacheKey)) {
+    return envCache.get(cacheKey) ?? null;
+  }
+  const envPath = findUp(startDir, ".env.local");
+  if (!envPath) {
+    envCache.set(cacheKey, null);
+    return null;
+  }
+  const values = parseEnvFile(readFileSync2(envPath, "utf8"));
+  const result = values.get(key) ?? null;
+  envCache.set(cacheKey, result);
+  return result;
+}
+
+// src/providers/claude.ts
+var DEFAULT_MODEL = "claude-haiku-4-5-20251001";
+function resolveModel() {
+  return process.env.QQ_MODEL ?? readEnvValueFromDotEnvLocal("QQ_MODEL") ?? DEFAULT_MODEL;
+}
+function extractText(content) {
+  return content.filter((block) => block.type === "text" && typeof block.text === "string").map((block) => block.text ?? "").join("").trim();
+}
+function stripCodeFence(raw) {
+  const m = raw.trim().match(/^```(?:json)?\s*\n?([\s\S]*?)\n?```\s*$/);
+  return m ? m[1].trim() : raw.trim();
+}
+function parseCandidates(text) {
+  let parsed;
+  try {
+    parsed = JSON.parse(stripCodeFence(text));
+  } catch {
+    const trimmed = text.trim();
+    return [{ command: trimmed || 'echo ""', explanation: "" }];
+  }
+  try {
+    return candidateListSchema.parse(parsed);
+  } catch {
+    return [{ command: 'echo ""', explanation: "QueQue: unexpected response format" }];
+  }
+}
+function shouldForceSelector() {
+  const configured = process.env.QQ_FORCE_SELECTOR ?? readEnvValueFromDotEnvLocal("QQ_FORCE_SELECTOR");
+  return configured === "1" || configured === "true";
+}
+function ensureSelectableCandidates(candidates) {
+  if (!shouldForceSelector() || candidates.length >= 2) {
+    return candidates;
+  }
+  const [first] = candidates;
+  return [
+    first,
+    {
+      command: first.command,
+      explanation: first.explanation.length > 0 ? `${first.explanation} (forced duplicate for selector testing)` : "Forced duplicate for selector testing."
+    }
+  ];
+}
+function buildPrompt(envelope) {
+  const filtered = filterContextEnvelope(envelope);
+  const gitChunk = filtered.extras.find((chunk) => chunk.kind === "git");
+  const filesystemChunk = filtered.extras.find((chunk) => chunk.kind === "filesystem");
+  return [
+    "Return ONLY a JSON array of 1-3 shell command candidates, most likely first.",
+    'Each item must have exactly these keys: "command" and "explanation".',
+    "No markdown, no prose, no code fences. Raw JSON array only.",
+    "",
+    "The command should be safe to place back into a shell buffer.",
+    "",
+    "Shell context:",
+    JSON.stringify(
+      {
+        cwd: filtered.base.cwd,
+        queryText: filtered.base.queryText,
+        platform: filtered.base.platform,
+        shellName: filtered.base.shellName,
+        ...gitChunk ? { versionControl: gitChunk.payload } : {},
+        ...filesystemChunk ? { filesystem: filesystemChunk.payload } : {}
+      },
+      null,
+      2
+    )
+  ].join("\n");
+}
+async function fetchCandidates(envelope, rbuffer = "") {
+  const apiKey = process.env.ANTHROPIC_API_KEY ?? readEnvValueFromDotEnvLocal("ANTHROPIC_API_KEY");
+  if (!apiKey) {
+    throw new Error("ANTHROPIC_API_KEY is required in the environment or .env.local");
+  }
+  const client = new Anthropic({ apiKey });
+  const prompt = buildPrompt(envelope);
+  const model = resolveModel();
+  void appendDebugLog("provider", "request start", {
+    model,
+    cwd: envelope.base.cwd,
+    rbufferLength: rbuffer.length,
+    extras: envelope.extras.map((chunk) => chunk.kind)
+  });
+  try {
+    const response = await client.messages.create(
+      {
+        model,
+        max_tokens: 1024,
+        temperature: 0,
+        system: "You are QueQue, a terminal shell assistant. Return ONLY a JSON array of command candidates, ranked with the most correct/direct command first. No prose, no markdown, no code fences. When a command requires a value the user must supply (hostname, filename, branch name, etc.), wrap it in angle brackets: <placeholder>. Use descriptive names like <user@host>, <filename>, <branch-name>. Do not use angle brackets for optional flags or known values.",
+        messages: [{ role: "user", content: prompt }]
+      },
+      {
+        timeout: 25e3
+        // 25s — slightly under the zsh 30s FIFO timeout
+      }
+    );
+    const text = extractText(response.content);
+    const candidates = ensureSelectableCandidates(parseCandidates(text));
+    void appendDebugLog("provider", "response parsed", {
+      model,
+      candidateCount: candidates.length,
+      forceSelector: shouldForceSelector()
+    });
+    return candidates;
+  } catch (error) {
+    void appendDebugLog("provider", "request failed", {
+      model,
+      message: error instanceof Error ? error.message : String(error)
+    });
+    throw error;
+  }
+}
+var claudeAdapter = {
+  fetchCandidates
+};
+
 // src/registry/context-providers.ts
 var registry = /* @__PURE__ */ new Map();
 function registerContextProvider(descriptor) {
@@ -173,11 +514,14 @@ function listContextProviders() {
 
 // src/registry/provider-backends.ts
 var registry2 = /* @__PURE__ */ new Map();
-function registerProviderBackend(descriptor) {
-  if (registry2.has(descriptor.id)) {
-    throw new Error(`Provider backend already registered: "${descriptor.id}"`);
+function registerProviderBackend(registration) {
+  if (registry2.has(registration.id)) {
+    throw new Error(`Provider backend already registered: "${registration.id}"`);
   }
-  registry2.set(descriptor.id, descriptor);
+  registry2.set(registration.id, registration);
+}
+function getProviderAdapter(id) {
+  return registry2.get(id)?.adapter;
 }
 
 // src/registry/shell-adapters.ts
@@ -188,6 +532,9 @@ function registerShellAdapter(descriptor) {
   }
   registry3.set(descriptor.id, descriptor);
 }
+function listShellAdapters() {
+  return Array.from(registry3.values());
+}
 
 // src/registry/storage-hooks.ts
 var registry4 = /* @__PURE__ */ new Map();
@@ -223,7 +570,8 @@ function bootstrapBuiltins() {
   registerProviderBackend({
     id: "claude",
     name: "Claude (Anthropic)",
-    description: "Anthropic Claude adapter \u2014 default LLM backend"
+    description: "Anthropic Claude adapter \u2014 default LLM backend",
+    adapter: claudeAdapter
   });
 }
 
@@ -234,36 +582,36 @@ import { render } from "ink";
 import React from "react";
 
 // src/contracts/request.ts
-import { z as z2 } from "zod";
+import { z as z4 } from "zod";
 
 // src/contracts/shell.ts
-import { z } from "zod";
-var shellRequestSchema = z.object({
-  version: z.literal(1),
-  ttyPath: z.string(),
-  cwd: z.string().regex(/^\/[^\0]*$/, "cwd must be an absolute POSIX path"),
-  shellPid: z.number().int().positive(),
-  lbuffer: z.string(),
-  rbuffer: z.string()
+import { z as z3 } from "zod";
+var shellRequestSchema = z3.object({
+  version: z3.literal(1),
+  ttyPath: z3.string(),
+  cwd: z3.string().regex(/^\/[^\0]*$/, "cwd must be an absolute POSIX path"),
+  shellPid: z3.number().int().positive(),
+  lbuffer: z3.string(),
+  rbuffer: z3.string()
 });
-var shellResultSchema = z.discriminatedUnion("kind", [
-  z.object({
-    kind: z.literal("cancel")
+var shellResultSchema = z3.discriminatedUnion("kind", [
+  z3.object({
+    kind: z3.literal("cancel")
   }).strict(),
-  z.object({
-    kind: z.literal("replace-buffer"),
-    lbuffer: z.string(),
-    rbuffer: z.string(),
-    query: z.string().optional()
+  z3.object({
+    kind: z3.literal("replace-buffer"),
+    lbuffer: z3.string(),
+    rbuffer: z3.string(),
+    query: z3.string().optional()
   }),
-  z.object({
-    kind: z.literal("error"),
-    message: z.string()
+  z3.object({
+    kind: z3.literal("error"),
+    message: z3.string()
   })
 ]);
 
 // src/contracts/request.ts
-var requestIntentSchema = z2.enum([
+var requestIntentSchema = z4.enum([
   "shell-command",
   "codebase",
   "filesystem",
@@ -272,47 +620,47 @@ var requestIntentSchema = z2.enum([
 ]);
 var normalizedRequestSchema = shellRequestSchema.extend({
   intent: requestIntentSchema,
-  confidence: z2.number().min(0).max(1)
+  confidence: z4.number().min(0).max(1)
 });
-var baseContextSchema = z2.object({
-  queryText: z2.string(),
-  cwd: z2.string(),
-  ttyPath: z2.string(),
-  shellPid: z2.number().int().positive(),
+var baseContextSchema = z4.object({
+  queryText: z4.string(),
+  cwd: z4.string(),
+  ttyPath: z4.string(),
+  shellPid: z4.number().int().positive(),
   /** Hardcoded 'zsh' for Phase 2 — cross-shell support is v2 scope. */
-  shellName: z2.literal("zsh"),
-  platform: z2.string(),
-  timestamp: z2.string()
+  shellName: z4.literal("zsh"),
+  platform: z4.string(),
+  timestamp: z4.string()
 });
-var intentDecisionSchema = z2.object({
+var intentDecisionSchema = z4.object({
   intent: requestIntentSchema,
-  confidence: z2.number().min(0).max(1),
-  signals: z2.array(z2.string())
+  confidence: z4.number().min(0).max(1),
+  signals: z4.array(z4.string())
 });
-var contextChunkSchema = z2.discriminatedUnion("kind", [
-  z2.object({
-    kind: z2.literal("git"),
-    payload: z2.object({
-      cwd: z2.string(),
-      root: z2.string(),
-      branch: z2.string().nullable(),
-      dirty: z2.boolean(),
+var contextChunkSchema = z4.discriminatedUnion("kind", [
+  z4.object({
+    kind: z4.literal("git"),
+    payload: z4.object({
+      cwd: z4.string(),
+      root: z4.string(),
+      branch: z4.string().nullable(),
+      dirty: z4.boolean(),
       /** File paths only (from git status --porcelain). No diff content, no file bytes. */
-      changedFiles: z2.array(z2.string())
+      changedFiles: z4.array(z4.string())
     })
   }),
-  z2.object({
-    kind: z2.literal("filesystem"),
-    payload: z2.object({
-      cwd: z2.string(),
+  z4.object({
+    kind: z4.literal("filesystem"),
+    payload: z4.object({
+      cwd: z4.string(),
       /** Apparent filename extracted from query text. No file bytes read. */
-      apparentFilename: z2.string().nullable()
+      apparentFilename: z4.string().nullable()
     })
   })
 ]);
-var contextEnvelopeSchema = z2.object({
+var contextEnvelopeSchema = z4.object({
   base: baseContextSchema,
-  extras: z2.array(contextChunkSchema)
+  extras: z4.array(contextChunkSchema)
 });
 
 // src/intent/router.ts
@@ -388,7 +736,7 @@ function buildBaseContext(request) {
 // src/context/pipeline.ts
 async function gatherContext(request) {
   void appendDebugLog("context", "pipeline start", {
-    lbuffer: request.lbuffer,
+    queryLength: request.lbuffer.length,
     intent: request.intent
   });
   const base = buildBaseContext(request);
@@ -421,7 +769,7 @@ async function gatherContext(request) {
       });
     }
   }
-  const envelope = { base, extras };
+  const envelope = filterContextEnvelope({ base, extras });
   void appendDebugLog("context", "envelope assembled", { extraCount: extras.length });
   return envelope;
 }
@@ -499,182 +847,6 @@ async function ensureDaemon(socketPath2) {
   void appendDebugLog("daemon", "daemon ready", { socketPath: socketPath2 });
 }
 
-// src/providers/claude.ts
-import Anthropic from "@anthropic-ai/sdk";
-
-// src/contracts/candidates.ts
-import { z as z3 } from "zod";
-var commandCandidateSchema = z3.object({
-  command: z3.string().min(1),
-  explanation: z3.string()
-});
-var candidateListSchema = z3.array(commandCandidateSchema).min(1).max(5);
-
-// src/shared/env-file.ts
-import { existsSync as existsSync2, readFileSync } from "fs";
-import { dirname as dirname2, join } from "path";
-function findUp(startDir, filename) {
-  let current = startDir;
-  while (true) {
-    const candidate = join(current, filename);
-    if (existsSync2(candidate)) {
-      return candidate;
-    }
-    const parent = dirname2(current);
-    if (parent === current) {
-      return null;
-    }
-    current = parent;
-  }
-}
-function parseEnvFile(content) {
-  const values = /* @__PURE__ */ new Map();
-  for (const rawLine of content.split(/\r?\n/)) {
-    const line = rawLine.trim();
-    if (!line || line.startsWith("#")) {
-      continue;
-    }
-    const match = line.match(/^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)=(.*)$/);
-    if (!match) {
-      continue;
-    }
-    const [, key, rawValue] = match;
-    let value = rawValue.trim();
-    if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
-      value = value.slice(1, -1);
-    }
-    values.set(key, value);
-  }
-  return values;
-}
-var envCache = /* @__PURE__ */ new Map();
-function readEnvValueFromDotEnvLocal(key, startDir = process.cwd()) {
-  const cacheKey = `${key}\0${startDir}`;
-  if (envCache.has(cacheKey)) {
-    return envCache.get(cacheKey) ?? null;
-  }
-  const envPath = findUp(startDir, ".env.local");
-  if (!envPath) {
-    envCache.set(cacheKey, null);
-    return null;
-  }
-  const values = parseEnvFile(readFileSync(envPath, "utf8"));
-  const result = values.get(key) ?? null;
-  envCache.set(cacheKey, result);
-  return result;
-}
-
-// src/providers/claude.ts
-var DEFAULT_MODEL = "claude-haiku-4-5-20251001";
-function resolveModel() {
-  return process.env.QQ_MODEL ?? readEnvValueFromDotEnvLocal("QQ_MODEL") ?? DEFAULT_MODEL;
-}
-function extractText(content) {
-  return content.filter((block) => block.type === "text" && typeof block.text === "string").map((block) => block.text ?? "").join("").trim();
-}
-function stripCodeFence(raw) {
-  const m = raw.trim().match(/^```(?:json)?\s*\n?([\s\S]*?)\n?```\s*$/);
-  return m ? m[1].trim() : raw.trim();
-}
-function parseCandidates(text) {
-  let parsed;
-  try {
-    parsed = JSON.parse(stripCodeFence(text));
-  } catch {
-    const trimmed = text.trim();
-    return [{ command: trimmed || 'echo ""', explanation: "" }];
-  }
-  try {
-    return candidateListSchema.parse(parsed);
-  } catch {
-    return [{ command: 'echo ""', explanation: "QueQue: unexpected response format" }];
-  }
-}
-function shouldForceSelector() {
-  const configured = process.env.QQ_FORCE_SELECTOR ?? readEnvValueFromDotEnvLocal("QQ_FORCE_SELECTOR");
-  return configured === "1" || configured === "true";
-}
-function ensureSelectableCandidates(candidates) {
-  if (!shouldForceSelector() || candidates.length >= 2) {
-    return candidates;
-  }
-  const [first] = candidates;
-  return [
-    first,
-    {
-      command: first.command,
-      explanation: first.explanation.length > 0 ? `${first.explanation} (forced duplicate for selector testing)` : "Forced duplicate for selector testing."
-    }
-  ];
-}
-function buildPrompt(envelope) {
-  const gitChunk = envelope.extras.find((chunk) => chunk.kind === "git");
-  return [
-    "Return ONLY a JSON array of 1-3 shell command candidates, most likely first.",
-    'Each item must have exactly these keys: "command" and "explanation".',
-    "No markdown, no prose, no code fences. Raw JSON array only.",
-    "",
-    "The command should be safe to place back into a shell buffer.",
-    "",
-    "Shell context:",
-    JSON.stringify(
-      {
-        cwd: envelope.base.cwd,
-        queryText: envelope.base.queryText,
-        platform: envelope.base.platform,
-        shellName: envelope.base.shellName,
-        ...gitChunk ? { versionControl: gitChunk.payload } : {}
-      },
-      null,
-      2
-    )
-  ].join("\n");
-}
-async function fetchCandidates(envelope, rbuffer = "") {
-  const apiKey = process.env.ANTHROPIC_API_KEY ?? readEnvValueFromDotEnvLocal("ANTHROPIC_API_KEY");
-  if (!apiKey) {
-    throw new Error("ANTHROPIC_API_KEY is required in the environment or .env.local");
-  }
-  const client = new Anthropic({ apiKey });
-  const prompt = buildPrompt(envelope);
-  const model = resolveModel();
-  void appendDebugLog("provider", "request start", {
-    model,
-    cwd: envelope.base.cwd,
-    rbufferLength: rbuffer.length,
-    extras: envelope.extras.map((chunk) => chunk.kind)
-  });
-  try {
-    const response = await client.messages.create(
-      {
-        model,
-        max_tokens: 1024,
-        temperature: 0,
-        system: "You are QueQue, a terminal shell assistant. Return ONLY a JSON array of command candidates, ranked with the most correct/direct command first. No prose, no markdown, no code fences. When a command requires a value the user must supply (hostname, filename, branch name, etc.), wrap it in angle brackets: <placeholder>. Use descriptive names like <user@host>, <filename>, <branch-name>. Do not use angle brackets for optional flags or known values.",
-        messages: [{ role: "user", content: prompt }]
-      },
-      {
-        timeout: 25e3
-        // 25s — slightly under the zsh 30s FIFO timeout
-      }
-    );
-    const text = extractText(response.content);
-    const candidates = ensureSelectableCandidates(parseCandidates(text));
-    void appendDebugLog("provider", "response parsed", {
-      model,
-      candidateCount: candidates.length,
-      forceSelector: shouldForceSelector()
-    });
-    return candidates;
-  } catch (error) {
-    void appendDebugLog("provider", "request failed", {
-      model,
-      message: error instanceof Error ? error.message : String(error)
-    });
-    throw error;
-  }
-}
-
 // src/providers/detect.ts
 import { execSync } from "child_process";
 import * as fsp2 from "fs/promises";
@@ -728,6 +900,35 @@ async function detectProvider() {
   };
 }
 
+// src/providers/resolver.ts
+function resolveAdapter(detected) {
+  switch (detected.kind) {
+    case "anthropic-key": {
+      const adapter = getProviderAdapter("claude");
+      if (!adapter) {
+        throw new Error(
+          "QueQue: Claude provider is not registered \u2014 was bootstrapBuiltins() called?"
+        );
+      }
+      return adapter;
+    }
+    case "claude-cli":
+      throw new Error(
+        "QueQue: Claude CLI detected but subprocess adapter is not wired yet (Phase 8). Set ANTHROPIC_API_KEY or use .env.local."
+      );
+    case "ollama":
+      throw new Error(
+        "QueQue: Ollama detected but local adapter is not wired yet (Phase 8). Set ANTHROPIC_API_KEY or use .env.local."
+      );
+    case "openai-key":
+      throw new Error(
+        "QueQue: OPENAI_API_KEY detected but OpenAI adapter is not wired yet (Phase 8). Set ANTHROPIC_API_KEY for Claude."
+      );
+    case "none":
+      throw new Error(detected.message);
+  }
+}
+
 // src/shared/socket-path.ts
 function socketPathForUid(uid) {
   return `/tmp/qq-${uid}.sock`;
@@ -737,7 +938,7 @@ function socketPath() {
 }
 
 // src/ui/CandidateSelect.tsx
-import { Box as Box4, Text as Text4, useInput, useStdin } from "ink";
+import { Box as Box4, Text as Text4, useInput, useStdin, useStdout as useStdout2 } from "ink";
 import { useEffect as useEffect2, useState as useState2 } from "react";
 
 // src/ui/ControlsLine.tsx
@@ -781,6 +982,88 @@ function Modal({ children }) {
   return /* @__PURE__ */ jsx3(Box2, { flexDirection: "column", paddingX: 1, width, children });
 }
 
+// src/ui/modal-layout.ts
+function wrapText(text, maxWidth) {
+  if (maxWidth < 1) {
+    return [text];
+  }
+  const words = text.split(/\s+/).filter((word) => word.length > 0);
+  if (words.length === 0) {
+    return [""];
+  }
+  const lines = [];
+  let line = "";
+  for (const word of words) {
+    let remaining = word;
+    while (remaining.length > 0) {
+      const candidate = line ? `${line} ${remaining}` : remaining;
+      if (candidate.length <= maxWidth) {
+        line = candidate;
+        remaining = "";
+        break;
+      }
+      if (line) {
+        lines.push(line);
+        line = "";
+        continue;
+      }
+      lines.push(remaining.slice(0, maxWidth));
+      remaining = remaining.slice(maxWidth);
+    }
+  }
+  if (line) {
+    lines.push(line);
+  }
+  return lines;
+}
+function normalizeCommand(command) {
+  return command.trim();
+}
+function filterCandidates(candidates, query) {
+  if (!query) return candidates;
+  const lower = query.toLowerCase();
+  return candidates.filter((c) => normalizeCommand(c.command).toLowerCase().includes(lower));
+}
+function estimateCandidateSelectLines(input) {
+  let lines = 0;
+  if (input.initialQuery && input.initialQuery.length > 0) {
+    lines += 1;
+  }
+  lines += 1;
+  lines += 1;
+  if (input.error === true) {
+    lines += 1;
+  } else if (input.candidates === null) {
+    lines += 1;
+  } else {
+    const visible2 = filterCandidates(input.candidates, input.query);
+    if (visible2.length === 0) {
+      lines += 1;
+    } else {
+      for (const candidate of visible2) {
+        const command = normalizeCommand(candidate.command);
+        const commandLines = wrapText(command, input.contentWidth);
+        const explanationLines = candidate.explanation.length > 0 ? wrapText(candidate.explanation, input.contentWidth) : [];
+        lines += commandLines.length + explanationLines.length;
+        lines += 1;
+      }
+    }
+  }
+  const visible = input.candidates !== null && input.error !== true ? filterCandidates(input.candidates, input.query) : [];
+  const selectedCommand = visible[input.selectedIndex]?.command ? normalizeCommand(visible[input.selectedIndex].command) : void 0;
+  const showDestructiveWarning = selectedCommand !== void 0 && isDestructiveCommand(selectedCommand);
+  if (showDestructiveWarning) {
+    lines += 1;
+    lines += 1;
+  }
+  lines += 1;
+  lines += 1;
+  if (input.includeDevFooter) {
+    lines += 1;
+  }
+  return lines;
+}
+
 // src/ui/SearchInput.tsx
 import { Box as Box3, Text as Text3 } from "ink";
 import { jsx as jsx4, jsxs as jsxs2 } from "react/jsx-runtime";
@@ -793,19 +1076,34 @@ function SearchInput({ query }) {
 
 // src/ui/CandidateSelect.tsx
 import { jsx as jsx5, jsxs as jsxs3 } from "react/jsx-runtime";
-function filterCandidates(candidates, query) {
-  if (!query) return candidates;
-  const lower = query.toLowerCase();
-  return candidates.filter((c) => c.command.toLowerCase().includes(lower));
+var ROW_GUTTER = "   ";
+var ACTIVE_HEAD = "\u250C> ";
+var ACTIVE_TAIL = "\u2502  ";
+var DESTRUCTIVE_WARNING_MARK = "\u26A0";
+var DESTRUCTIVE_WARNING_TEXT = `${DESTRUCTIVE_WARNING_MARK} review carefully \u2014 this command may be destructive`;
+var MODAL_MAX_WIDTH = 80;
+var MODAL_PADDING_X = 2;
+function linePrefix(active, lineIndex) {
+  if (!active) {
+    return ROW_GUTTER;
+  }
+  return lineIndex === 0 ? ACTIVE_HEAD : ACTIVE_TAIL;
+}
+function normalizeCommand2(command) {
+  return command.trim();
 }
 function CandidateSelect({
   candidates,
   initialQuery,
   onSelect,
   onCancel,
-  error
+  error,
+  onLayoutLinesChange
 }) {
   const { isRawModeSupported } = useStdin();
+  const { stdout } = useStdout2();
+  const modalWidth = Math.min(MODAL_MAX_WIDTH, stdout.columns || MODAL_MAX_WIDTH);
+  const contentWidth = modalWidth - MODAL_PADDING_X - ROW_GUTTER.length;
   const [selectedIndex, setSelectedIndex] = useState2(0);
   const [query, setQuery] = useState2(initialQuery ?? "");
   useEffect2(() => {
@@ -822,6 +1120,35 @@ function CandidateSelect({
   useEffect2(() => {
     setSelectedIndex(0);
   }, [query]);
+  const includeDevFooter = process.env.QQ_DEV_ROOT != null;
+  useEffect2(() => {
+    if (!onLayoutLinesChange) {
+      return;
+    }
+    if (candidates === null && error !== true) {
+      return;
+    }
+    onLayoutLinesChange(
+      estimateCandidateSelectLines({
+        candidates,
+        initialQuery,
+        query,
+        selectedIndex,
+        error,
+        contentWidth,
+        includeDevFooter
+      })
+    );
+  }, [
+    candidates,
+    initialQuery,
+    query,
+    selectedIndex,
+    error,
+    contentWidth,
+    includeDevFooter,
+    onLayoutLinesChange
+  ]);
   useInput(
     (input, key) => {
       if (key.escape) {
@@ -836,8 +1163,9 @@ function CandidateSelect({
         const visible = filterCandidates(candidates, query);
         if (visible.length === 0) return;
         const selected = visible[selectedIndex] ?? visible[0];
-        const explanation = selected.explanation || `see man ${selected.command.split(" ")[0]}`;
-        onSelect(selected.command, explanation);
+        const command = normalizeCommand2(selected.command);
+        const explanation = selected.explanation || `see man ${command.split(" ")[0]}`;
+        onSelect(command, explanation);
         return;
       }
       if (input && !key.ctrl && !key.meta) {
@@ -858,27 +1186,51 @@ function CandidateSelect({
     { isActive: isRawModeSupported }
   );
   let content;
+  let showDestructiveWarning = false;
   if (error === true) {
     content = /* @__PURE__ */ jsx5(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx5(Text4, { dimColor: true, children: "provider error \u2014 press esc to return" }) });
   } else if (candidates === null) {
     content = /* @__PURE__ */ jsx5(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx5(LoadingSpinner, {}) });
   } else {
     const visible = filterCandidates(candidates, query);
+    const selectedCommand = visible[selectedIndex]?.command ? normalizeCommand2(visible[selectedIndex].command) : void 0;
+    showDestructiveWarning = selectedCommand !== void 0 && isDestructiveCommand(selectedCommand);
     if (visible.length === 0) {
       content = /* @__PURE__ */ jsx5(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx5(Text4, { dimColor: true, children: "no matches \u2014 try a different query" }) });
     } else {
       content = /* @__PURE__ */ jsx5(Box4, { flexDirection: "column", marginTop: 1, children: visible.map((candidate, index) => {
         const active = index === selectedIndex;
-        return /* @__PURE__ */ jsxs3(Box4, { flexDirection: "column", marginBottom: 1, children: [
-          /* @__PURE__ */ jsxs3(Box4, { children: [
-            active ? /* @__PURE__ */ jsx5(Text4, { color: "ansi256(166)", children: "\u250C> " }) : /* @__PURE__ */ jsx5(Text4, { children: "   " }),
-            /* @__PURE__ */ jsx5(Text4, { bold: active, color: active ? "white" : void 0, dimColor: !active, children: candidate.command })
-          ] }),
-          candidate.explanation.length > 0 && /* @__PURE__ */ jsxs3(Box4, { children: [
-            /* @__PURE__ */ jsx5(Text4, { children: "   " }),
-            /* @__PURE__ */ jsx5(Text4, { dimColor: true, children: candidate.explanation })
-          ] })
-        ] }, candidate.command);
+        const command = normalizeCommand2(candidate.command);
+        const destructive = isDestructiveCommand(command);
+        const commandLines = wrapText(command, contentWidth);
+        const explanationLines = candidate.explanation.length > 0 ? wrapText(candidate.explanation, contentWidth) : [];
+        const blockLines = [...commandLines, ...explanationLines];
+        return /* @__PURE__ */ jsx5(
+          Box4,
+          {
+            flexDirection: "column",
+            marginBottom: 1,
+            children: blockLines.map((line, lineIndex) => {
+              const isCommandLine = lineIndex < commandLines.length;
+              const isLastCommandLine = isCommandLine && lineIndex === commandLines.length - 1;
+              const prefix = linePrefix(active, lineIndex);
+              return /* @__PURE__ */ jsxs3(Box4, { children: [
+                /* @__PURE__ */ jsx5(Text4, { color: active ? "ansi256(166)" : void 0, children: prefix }),
+                /* @__PURE__ */ jsx5(
+                  Text4,
+                  {
+                    bold: active && isCommandLine,
+                    color: active && isCommandLine ? "white" : void 0,
+                    dimColor: !active || !isCommandLine,
+                    children: line
+                  }
+                ),
+                isLastCommandLine && destructive && /* @__PURE__ */ jsx5(Text4, { color: "yellow", children: ` ${DESTRUCTIVE_WARNING_MARK}` })
+              ] }, `${prefix}${line}`);
+            })
+          },
+          `${command}::${candidate.explanation}`
+        );
       }) });
     }
   }
@@ -886,8 +1238,9 @@ function CandidateSelect({
     initialQuery && initialQuery.length > 0 && /* @__PURE__ */ jsx5(Box4, { flexGrow: 0, height: 1, children: /* @__PURE__ */ jsx5(Text4, { dimColor: true, wrap: "truncate", children: `queque \u203A ${initialQuery}` }) }),
     /* @__PURE__ */ jsx5(SearchInput, { query }),
     content,
+    showDestructiveWarning && /* @__PURE__ */ jsx5(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx5(Text4, { color: "yellow", children: DESTRUCTIVE_WARNING_TEXT }) }),
     /* @__PURE__ */ jsx5(ControlsLine, {}),
-    process.env.QQ_DEV_ROOT != null && /* @__PURE__ */ jsx5(Box4, { justifyContent: "flex-end", children: /* @__PURE__ */ jsx5(Text4, { color: "yellow", children: `dev v${"0.3.9"} ${"c770054"}` }) })
+    process.env.QQ_DEV_ROOT != null && /* @__PURE__ */ jsx5(Box4, { justifyContent: "flex-end", children: /* @__PURE__ */ jsx5(Text4, { color: "yellow", children: `dev v${"0.4.0"} ${"1f82d23"}` }) })
   ] });
 }
 
@@ -912,6 +1265,51 @@ async function writeShellResult(resultFile, result) {
   }
 }
 
+// src/client/zellij-pane-resize.ts
+import { spawn as spawn2 } from "child_process";
+var DEFAULT_MAX_PANE_HEIGHT = 24;
+var MIN_PANE_HEIGHT = 6;
+var ZELLIJ_FLOATING_FRAME_LINES = 2;
+var lastSyncedHeight;
+function readMaxZellijPaneHeight() {
+  const parsed = Number.parseInt(process.env.QQ_PANE_HEIGHT ?? "", 10);
+  if (Number.isFinite(parsed) && parsed >= MIN_PANE_HEIGHT) {
+    return parsed;
+  }
+  return DEFAULT_MAX_PANE_HEIGHT;
+}
+function resolveZellijPaneHeight(contentLines, maxHeight = readMaxZellijPaneHeight()) {
+  const withFrame = contentLines + ZELLIJ_FLOATING_FRAME_LINES;
+  return Math.min(Math.max(withFrame, MIN_PANE_HEIGHT), maxHeight);
+}
+function formatZellijPaneId(rawPaneId) {
+  if (rawPaneId.startsWith("terminal_") || rawPaneId.startsWith("plugin_")) {
+    return rawPaneId;
+  }
+  return `terminal_${rawPaneId}`;
+}
+function syncZellijFloatingPaneHeight(contentLines) {
+  if (process.env.ZELLIJ === void 0) {
+    return;
+  }
+  const rawPaneId = process.env.ZELLIJ_PANE_ID;
+  if (rawPaneId === void 0 || rawPaneId.length === 0) {
+    return;
+  }
+  const height = resolveZellijPaneHeight(contentLines);
+  if (height === lastSyncedHeight) {
+    return;
+  }
+  lastSyncedHeight = height;
+  const paneId = formatZellijPaneId(rawPaneId);
+  const child = spawn2(
+    "zellij",
+    ["action", "change-floating-pane-coordinates", "--pane-id", paneId, "--height", String(height)],
+    { stdio: "ignore" }
+  );
+  child.unref();
+}
+
 // src/client/run-foreground.ts
 function buildShellBuffers(command, explanation) {
   const comment = `  # ${explanation}`;
@@ -941,7 +1339,12 @@ async function runForegroundClient(args) {
   try {
     const raw = await fsp4.readFile(requestFile, "utf-8");
     const request = shellRequestSchema.parse(JSON.parse(raw.trim()));
-    void appendDebugLog("client", "request parsed", request);
+    void appendDebugLog("client", "request parsed", {
+      lbufferLength: request.lbuffer.length,
+      rbufferLength: request.rbuffer.length,
+      cwd: request.cwd,
+      shellPid: request.shellPid
+    });
     const detectedProvider = await detectProvider();
     void appendDebugLog("client", "provider detected", { kind: detectedProvider.kind });
     if (detectedProvider.kind === "none") {
@@ -967,8 +1370,8 @@ ${detectedProvider.message}\r
       });
       void appendDebugLog("client", "wrote replace-buffer result", {
         resultFile,
-        lbuffer: fixtureLbuffer,
-        rbuffer: request.rbuffer
+        lbufferLength: fixtureLbuffer.length,
+        rbufferLength: request.rbuffer.length
       });
     } else if (resultMode === "llm") {
       let ttyReadStream;
@@ -988,6 +1391,8 @@ ${detectedProvider.message}\r
         void appendDebugLog("client", "context gathered", {
           extraCount: envelope.extras.length
         });
+        const adapter = resolveAdapter(detectedProvider);
+        void appendDebugLog("client", "provider adapter resolved", { kind: detectedProvider.kind });
         if (ttyHandle) {
           try {
             ttyReadStream = new tty.ReadStream(ttyHandle.fd);
@@ -1048,7 +1453,8 @@ ${detectedProvider.message}\r
               resolved = true;
               await writeShellResult(resultFile, { kind: "cancel" });
               unmount?.();
-            }
+            },
+            onLayoutLinesChange: inZellij ? syncZellijFloatingPaneHeight : void 0
           });
           const renderOptions = ttyReadStream && ttyWriteStream ? { stdin: ttyReadStream, stdout: ttyWriteStream, interactive: true } : { interactive: true };
           const app = render(buildCandidateElement(null), renderOptions);
@@ -1074,7 +1480,7 @@ ${detectedProvider.message}\r
             if (!skipClear) clearScrollReserve();
             resolve3();
           };
-          fetchCandidates(envelope, request.rbuffer).then((candidates) => {
+          adapter.fetchCandidates(envelope).then((candidates) => {
             void appendDebugLog("client", "candidates received", { count: candidates.length });
             app.rerender(buildCandidateElement(candidates));
           }).catch(async (err) => {
@@ -1129,32 +1535,32 @@ async function clientCommand(options) {
 import * as net2 from "net";
 
 // src/contracts/ipc.ts
-import { z as z4 } from "zod";
-var ipcRequestSchema = z4.discriminatedUnion("kind", [
-  z4.object({
-    kind: z4.literal("ping")
+import { z as z5 } from "zod";
+var ipcRequestSchema = z5.discriminatedUnion("kind", [
+  z5.object({
+    kind: z5.literal("ping")
   }),
-  z4.object({
-    kind: z4.literal("ensure-session"),
-    shellPid: z4.number().int().positive(),
-    ttyPath: z4.string()
+  z5.object({
+    kind: z5.literal("ensure-session"),
+    shellPid: z5.number().int().positive(),
+    ttyPath: z5.string()
   }),
-  z4.object({
-    kind: z4.literal("run-query"),
+  z5.object({
+    kind: z5.literal("run-query"),
     request: shellRequestSchema
   })
 ]);
-var ipcResponseSchema = z4.discriminatedUnion("kind", [
-  z4.object({
-    kind: z4.literal("pong")
+var ipcResponseSchema = z5.discriminatedUnion("kind", [
+  z5.object({
+    kind: z5.literal("pong")
   }),
-  z4.object({
-    kind: z4.literal("session-ready"),
-    socketPath: z4.string()
+  z5.object({
+    kind: z5.literal("session-ready"),
+    socketPath: z5.string()
   }),
-  z4.object({
-    kind: z4.literal("query-accepted"),
-    requestId: z4.string()
+  z5.object({
+    kind: z5.literal("query-accepted"),
+    requestId: z5.string()
   })
 ]);
 
@@ -1248,12 +1654,11 @@ async function daemonCommand(options) {
 }
 
 // src/cli/commands/init.ts
-import { appendFileSync, existsSync as existsSync3, readFileSync as readFileSync2 } from "fs";
-import { homedir as homedir2 } from "os";
-import { dirname as dirname3, join as join2, resolve as resolve2 } from "path";
+import { appendFileSync, existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
+import { homedir as homedir3 } from "os";
+import { dirname as dirname3, join as join3, resolve as resolve2 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var __dirname = dirname3(fileURLToPath2(import.meta.url));
-var SUPPORTED_SHELLS = ["zsh"];
 var HOMEBREW_PREFIXES = ["/opt/homebrew", "/usr/local", "/home/linuxbrew/.linuxbrew"];
 function _resolveScriptPath(shell) {
   for (const prefix of HOMEBREW_PREFIXES) {
@@ -1262,17 +1667,25 @@ function _resolveScriptPath(shell) {
   }
   return resolve2(__dirname, "../../shell", shell, `queque.${shell}`);
 }
+function hasShellIntegration(existing, shell) {
+  if (/# queque shell integration/.test(existing)) {
+    return true;
+  }
+  const scriptPattern = new RegExp(`source\\s+["'][^"']*queque\\.${shell.replace(".", "\\.")}["']`);
+  return scriptPattern.test(existing);
+}
 function initCommand(shell) {
-  if (!SUPPORTED_SHELLS.includes(shell)) {
-    console.error(`Unsupported shell: '${shell}'. Supported: ${SUPPORTED_SHELLS.join(", ")}`);
+  bootstrapBuiltins();
+  const supportedShells = listShellAdapters().map((adapter) => adapter.shell);
+  if (!supportedShells.includes(shell)) {
+    console.error(`Unsupported shell: '${shell}'. Supported: ${supportedShells.join(", ")}`);
     process.exit(1);
   }
-  const zshrc = join2(homedir2(), ".zshrc");
-  const marker = /\bqueque\b/;
+  const zshrc = join3(homedir3(), ".zshrc");
   const scriptPath = _resolveScriptPath(shell);
   const snippet = `source "${scriptPath}"`;
-  const existing = existsSync3(zshrc) ? readFileSync2(zshrc, "utf8") : "";
-  if (existing.search(marker)) {
+  const existing = existsSync3(zshrc) ? readFileSync3(zshrc, "utf8") : "";
+  if (hasShellIntegration(existing, shell)) {
     console.error("queque: shell integration already present in ~/.zshrc");
     process.exit(0);
   }