@kenkaiiii/ggcoder 5.67.0 → 5.68.0

package/dist/core/ask-user.d.ts

@@ -1,10 +1,21 @@
-import { type ParkedRequests } from "./parked-requests.js";
 /**
- * How long an `ask_user` call waits before giving up on the user. The whole
- * turn is blocked meanwhile, so this is bounded — but generously, since the
- * user may be reading the reply the question belongs to.
+ * Soft deadline for an `ask_user` call when someone is likely watching (a
+ * plain interactive run). Past it the tool stops blocking: the agent proceeds
+ * on its best guess while the question stays answerable in the app.
+ */
+export declare const ASK_USER_INTERACTIVE_DEADLINE_MS: number;
+/**
+ * Soft deadline when nobody is watching — autopilot (Ken), task run-all
+ * sweeps and scheduled prompts. Short, so an unattended run does not stall.
+ */
+export declare const ASK_USER_UNATTENDED_DEADLINE_MS: number;
+/**
+ * The longest an `ask_user` call can block (the largest soft deadline). The
+ * tool's own execution timeout is derived from this.
  */
 export declare const ASK_USER_TIMEOUT_MS: number;
+/** Pick the soft deadline for a run, by whether a human is likely watching. */
+export declare function askSoftDeadlineMs(unattended: boolean): number;
 /** One selectable answer. `value` is what the agent gets back; `label` is UI. */
 export interface AskOption {
     label: string;
@@ -45,13 +56,62 @@ export type AskUserResult = {
  | {
     action: "cancel";
     superseded?: boolean;
+}
+/**
+ * The soft deadline passed with no answer. The question stays open; a later
+ * answer is delivered to the agent as a message (see `onLateAnswer`).
+ */
+ | {
+    action: "deferred";
 };
-export type AskUserBridge = ParkedRequests<AskUserRequest, AskUserResult>;
-export declare function createAskUserBridge(opts: {
+/** An answer that arrived after the tool call had already moved on. */
+export interface LateAskAnswer {
+    prompt: AskUserPrompt;
+    answers: Record<string, string | string[]>;
+}
+/**
+ * Questions parked on the user. A question is either *pending* (the tool call
+ * is blocked on it) or *deferred* (its soft deadline passed, the agent moved
+ * on, but the user can still answer it).
+ */
+export interface AskUserBridge {
+    /** Park a question: broadcasts it, resolves on answer, cancel or soft deadline. */
+    park: (request: AskUserRequest) => Promise<AskUserResult>;
+    /**
+     * Answer or dismiss an open question. A deferred question's answer goes to
+     * `onLateAnswer`. False when the id is not open (settled, superseded, closed).
+     */
+    settle: (id: string, result: AskUserResult) => boolean;
+    /**
+     * Release every pending question with `result` (default: cancel) and close
+     * every deferred one — for run abort, a superseding user message, teardown.
+     */
+    cancelAll: (result?: AskUserResult) => void;
+    /** Close deferred questions without touching a pending one (session reset). */
+    closeDeferred: () => void;
+    /** Questions the turn is currently blocked on. */
+    readonly pendingCount: number;
+    /** Questions past their soft deadline that can still be answered. */
+    readonly deferredCount: number;
+}
+export interface AskUserBridgeOptions {
     broadcast: (prompt: AskUserPrompt) => void;
+    /** Soft deadline in ms, read when each question is parked. */
+    timeoutMs?: number | (() => number);
+    /** The soft deadline passed: the agent proceeds, the question stays open. */
     onTimeout?: (prompt: AskUserPrompt) => void;
-    timeoutMs?: number;
-}): AskUserBridge;
+    /** A deferred question was answered. Called at most once per question. */
+    onLateAnswer?: (late: LateAskAnswer) => void;
+    /** Deferred questions closed without an answer (superseded, cancelled, reset). */
+    onClosed?: (ids: string[]) => void;
+}
+export declare function createAskUserBridge(opts: AskUserBridgeOptions): AskUserBridge;
+/**
+ * What the model reads when the soft deadline passes. Short on purpose; the
+ * safety line is the part that matters — a guessed answer must never license
+ * an action the user cannot take back.
+ */
+export declare const ASK_DEFERRED_RESULT: string;
 /**
  * Render the user's answers as the tool result the model reads.
  *
@@ -60,3 +120,25 @@ export declare function createAskUserBridge(opts: {
  * rather than silently missing.
  */
 export declare function formatAskResult(questions: AskQuestion[], result: AskUserResult): string;
+/**
+ * Frame a late answer as a message to the agent. It names the question it
+ * answers, because by now the agent has moved on and may have asked others.
+ */
+export declare function formatLateAnswer(late: LateAskAnswer): string;
+/** Where a late answer goes: the host's existing user-message queue. */
+export interface LateAnswerSink {
+    /** Queue a user message; drained as mid-run steering by a live run. */
+    queueMessage: (text: string) => number;
+    /** True while a run (or a run-owning cycle) can still drain the queue. */
+    isBusy: () => boolean;
+    /** The queue changed (so clients can refresh their queued strip). */
+    onQueued?: () => void;
+    /** No run is live: start one from the queue (the host's stranded-queue drain). */
+    startIdleRun: () => void;
+}
+/**
+ * Deliver a late answer through the existing queue rather than a new channel:
+ * a live run drains it at its next steering boundary; an idle session runs it
+ * as the next user turn.
+ */
+export declare function deliverLateAnswer(late: LateAskAnswer, sink: LateAnswerSink): void;

package/dist/core/ask-user.js

@@ -1,19 +1,101 @@
-import { createParkedRequests } from "./parked-requests.js";
 /**
- * How long an `ask_user` call waits before giving up on the user. The whole
- * turn is blocked meanwhile, so this is bounded — but generously, since the
- * user may be reading the reply the question belongs to.
+ * Soft deadline for an `ask_user` call when someone is likely watching (a
+ * plain interactive run). Past it the tool stops blocking: the agent proceeds
+ * on its best guess while the question stays answerable in the app.
  */
-export const ASK_USER_TIMEOUT_MS = 10 * 60_000;
+export const ASK_USER_INTERACTIVE_DEADLINE_MS = 10 * 60_000;
+/**
+ * Soft deadline when nobody is watching — autopilot (Ken), task run-all
+ * sweeps and scheduled prompts. Short, so an unattended run does not stall.
+ */
+export const ASK_USER_UNATTENDED_DEADLINE_MS = 2 * 60_000;
+/**
+ * The longest an `ask_user` call can block (the largest soft deadline). The
+ * tool's own execution timeout is derived from this.
+ */
+export const ASK_USER_TIMEOUT_MS = Math.max(ASK_USER_INTERACTIVE_DEADLINE_MS, ASK_USER_UNATTENDED_DEADLINE_MS);
+/** Pick the soft deadline for a run, by whether a human is likely watching. */
+export function askSoftDeadlineMs(unattended) {
+    return unattended ? ASK_USER_UNATTENDED_DEADLINE_MS : ASK_USER_INTERACTIVE_DEADLINE_MS;
+}
 export function createAskUserBridge(opts) {
-    return createParkedRequests({
-        idPrefix: "ask",
-        broadcast: opts.broadcast,
-        cancelValue: () => ({ action: "cancel" }),
-        timeoutMs: opts.timeoutMs ?? ASK_USER_TIMEOUT_MS,
-        ...(opts.onTimeout ? { onTimeout: opts.onTimeout } : {}),
-    });
+    const pending = new Map();
+    const deferred = new Map();
+    let seq = 0;
+    const deadline = () => {
+        const t = opts.timeoutMs;
+        if (typeof t === "function")
+            return t();
+        return t ?? ASK_USER_INTERACTIVE_DEADLINE_MS;
+    };
+    const release = (id, result) => {
+        const entry = pending.get(id);
+        if (!entry)
+            return false;
+        pending.delete(id);
+        clearTimeout(entry.timer);
+        entry.resolve(result);
+        return true;
+    };
+    const closeDeferred = () => {
+        if (deferred.size === 0)
+            return;
+        const ids = [...deferred.keys()];
+        deferred.clear();
+        opts.onClosed?.(ids);
+    };
+    return {
+        park: (request) => new Promise((resolve) => {
+            // A newer question supersedes any older one still waiting past its
+            // deadline: the agent has moved on to a new decision point.
+            closeDeferred();
+            const prompt = { ...request, id: `ask-${++seq}` };
+            const timer = setTimeout(() => {
+                if (!pending.has(prompt.id))
+                    return;
+                deferred.set(prompt.id, prompt);
+                opts.onTimeout?.(prompt);
+                release(prompt.id, { action: "deferred" });
+            }, deadline());
+            timer.unref?.();
+            pending.set(prompt.id, { resolve, timer });
+            opts.broadcast(prompt);
+        }),
+        settle: (id, result) => {
+            if (release(id, result))
+                return true;
+            const prompt = deferred.get(id);
+            if (!prompt)
+                return false;
+            deferred.delete(id);
+            if (result.action === "answer")
+                opts.onLateAnswer?.({ prompt, answers: result.answers });
+            return true;
+        },
+        cancelAll: (result) => {
+            for (const id of [...pending.keys()])
+                release(id, result ?? { action: "cancel" });
+            closeDeferred();
+        },
+        closeDeferred,
+        get pendingCount() {
+            return pending.size;
+        },
+        get deferredCount() {
+            return deferred.size;
+        },
+    };
 }
+/**
+ * What the model reads when the soft deadline passes. Short on purpose; the
+ * safety line is the part that matters — a guessed answer must never license
+ * an action the user cannot take back.
+ */
+export const ASK_DEFERRED_RESULT = "No answer yet — the user has not responded. Do not wait and do not ask again: proceed " +
+    "on your best judgment and state the assumption you made. The question stays open; a " +
+    'later reply arrives as a message starting "Late answer to:". On a guessed answer do only ' +
+    "safe, reversible work. Do NOT delete data, push, publish, deploy, pay, send messages or " +
+    "take any other destructive, costly or externally visible action — leave those for the user.";
 /**
  * Render the user's answers as the tool result the model reads.
  *
@@ -22,12 +104,14 @@ export function createAskUserBridge(opts) {
  * rather than silently missing.
  */
 export function formatAskResult(questions, result) {
+    if (result.action === "deferred")
+        return ASK_DEFERRED_RESULT;
     if (result.action === "cancel") {
         if (result.superseded) {
             return ("The user ignored the question and sent their own message instead. " +
                 "It arrives next — treat it as their answer and continue. Do not ask this again.");
         }
-        return ("The user did not answer (dismissed or timed out). Do not ask again — " +
+        return ("The user did not answer (they dismissed the question). Do not ask again — " +
             "state the assumption you are proceeding with, or stop and wait for them.");
     }
     const lines = questions.map((q) => {
@@ -37,4 +121,31 @@ export function formatAskResult(questions, result) {
     });
     return `The user answered:\n\n${lines.join("\n\n")}`;
 }
+/**
+ * Frame a late answer as a message to the agent. It names the question it
+ * answers, because by now the agent has moved on and may have asked others.
+ */
+export function formatLateAnswer(late) {
+    const body = late.prompt.questions
+        .map((q) => {
+        const answer = late.answers[q.id];
+        const text = Array.isArray(answer) ? answer.join(", ") : answer;
+        return `Late answer to: ${q.question}\n→ ${text?.trim() ? text.trim() : "(no answer)"}`;
+    })
+        .join("\n\n");
+    return (`${body}\n\n` +
+        "(You asked this earlier and continued on an assumption. If this answer differs, " +
+        "adjust the affected work; if it matches, carry on.)");
+}
+/**
+ * Deliver a late answer through the existing queue rather than a new channel:
+ * a live run drains it at its next steering boundary; an idle session runs it
+ * as the next user turn.
+ */
+export function deliverLateAnswer(late, sink) {
+    sink.queueMessage(formatLateAnswer(late));
+    sink.onQueued?.();
+    if (!sink.isBusy())
+        sink.startIdleRun();
+}
 //# sourceMappingURL=ask-user.js.map

package/dist/core/ask-user.js.map

@@ -1 +1 @@
-{"version":3,"file":"ask-user.js","sourceRoot":"","sources":["../../src/core/ask-user.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAuB,MAAM,sBAAsB,CAAC;AAEjF;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,MAAM,CAAC;AA8C/C,MAAM,UAAU,mBAAmB,CAAC,IAInC;IACC,OAAO,oBAAoB,CAAgC;QACzD,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACzC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,mBAAmB;QAChD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,SAAwB,EAAE,MAAqB;IAC7E,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO,CACL,oEAAoE;gBACpE,iFAAiF,CAClF,CAAC;QACJ,CAAC;QACD,OAAO,CACL,uEAAuE;YACvE,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAChE,OAAO,GAAG,CAAC,CAAC,QAAQ,OAAO,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC;IACH,OAAO,yBAAyB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;AACvD,CAAC"}
+{"version":3,"file":"ask-user.js","sourceRoot":"","sources":["../../src/core/ask-user.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,GAAG,MAAM,CAAC;AAE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,GAAG,MAAM,CAAC;AAE1D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CACzC,gCAAgC,EAChC,+BAA+B,CAChC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,UAAmB;IACnD,OAAO,UAAU,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,gCAAgC,CAAC;AACzF,CAAC;AA6FD,MAAM,UAAU,mBAAmB,CAAC,IAA0B;IAC5D,MAAM,OAAO,GAAG,IAAI,GAAG,EAGpB,CAAC;IACJ,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAClD,IAAI,GAAG,GAAG,CAAC,CAAC;IAEZ,MAAM,QAAQ,GAAG,GAAW,EAAE;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QACzB,IAAI,OAAO,CAAC,KAAK,UAAU;YAAE,OAAO,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,gCAAgC,CAAC;IAC/C,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,MAAqB,EAAW,EAAE;QAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnB,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,GAAS,EAAE;QAC/B,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAChC,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAChB,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;YACrC,mEAAmE;YACnE,4DAA4D;YAC5D,aAAa,EAAE,CAAC;YAChB,MAAM,MAAM,GAAkB,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAAE,OAAO;gBACpC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAChC,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC;gBACzB,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YAC7C,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC;QACJ,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE;YACrB,IAAI,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpB,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;gBAAE,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACzF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;YACpB,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;gBAAE,OAAO,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClF,aAAa,EAAE,CAAC;QAClB,CAAC;QACD,aAAa;QACb,IAAI,YAAY;YACd,OAAO,OAAO,CAAC,IAAI,CAAC;QACtB,CAAC;QACD,IAAI,aAAa;YACf,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAC9B,wFAAwF;IACxF,sFAAsF;IACtF,2FAA2F;IAC3F,0FAA0F;IAC1F,6FAA6F,CAAC;AAEhG;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,SAAwB,EAAE,MAAqB;IAC7E,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,mBAAmB,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO,CACL,oEAAoE;gBACpE,iFAAiF,CAClF,CAAC;QACJ,CAAC;QACD,OAAO,CACL,4EAA4E;YAC5E,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAChE,OAAO,GAAG,CAAC,CAAC,QAAQ,OAAO,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC;IACH,OAAO,yBAAyB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAmB;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS;SAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAChE,OAAO,mBAAmB,CAAC,CAAC,QAAQ,OAAO,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC1F,CAAC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,CAAC;IAChB,OAAO,CACL,GAAG,IAAI,MAAM;QACb,kFAAkF;QAClF,qDAAqD,CACtD,CAAC;AACJ,CAAC;AAcD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAmB,EAAE,IAAoB;IACzE,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;IAClB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,YAAY,EAAE,CAAC;AAC1C,CAAC"}

package/dist/core/autopilot-verdict.d.ts

@@ -6,10 +6,14 @@
  * first non-empty line carries the keyword; anything after is the payload.
  *
  *   PROMPT
- *   <runnable GG Coder prompt body, 1-3 lines>
+ *   <runnable GG Coder prompt body: a few lines, or a short bullet list>
  *
  *   ALL_CLEAR
  *
+ *   ALL_CLEAR CORPUS_UNVERIFIED
+ *   (approval whose real-world cross-check was impossible; the flag rides on
+ *   the verdict line so it can't be lost the way a separate JSON reply was)
+ *
  *   IGNORE
  *
  *   HUMAN

package/dist/core/autopilot-verdict.js

@@ -6,10 +6,14 @@
  * first non-empty line carries the keyword; anything after is the payload.
  *
  *   PROMPT
- *   <runnable GG Coder prompt body, 1-3 lines>
+ *   <runnable GG Coder prompt body: a few lines, or a short bullet list>
  *
  *   ALL_CLEAR
  *
+ *   ALL_CLEAR CORPUS_UNVERIFIED
+ *   (approval whose real-world cross-check was impossible; the flag rides on
+ *   the verdict line so it can't be lost the way a separate JSON reply was)
+ *
  *   IGNORE
  *
  *   HUMAN
@@ -64,24 +68,37 @@ function normalizeKeywordLine(line) {
         .trim()
         .replace(/\s+/g, "_");
 }
+/** The flagged approval, e.g. `ALL_CLEAR CORPUS_UNVERIFIED` or
+ *  `all clear: corpus_unverified`, after {@link normalizeKeywordLine}. */
+const FLAGGED_ALL_CLEAR_RE = /^ALL_CLEAR[_:,-]*CORPUS_UNVERIFIED$/;
+/** The flag anywhere in an approval reply: on the verdict line, or drifted
+ *  below it (the benchmarked failure). Keeping a warning is always safe. */
+const CORPUS_FLAG_RE = /corpus_unverified/i;
+function allClear(flagged) {
+    return flagged
+        ? { kind: "all_clear", evidenceLimitation: "corpus_unverified" }
+        : { kind: "all_clear" };
+}
 /**
  * Fallback for when Ken ignores the "keyword-first, nothing before it"
  * instruction and buries a bare ALL_CLEAR/IGNORE/SKIP line after a recap or
  * explanation (a real drift pattern models fall into despite the system
- * prompt). Only matches a line that is EXACTLY one of these bare keywords.
- * PROMPT/HUMAN carry payloads and get their own dedicated recovery passes in
- * parseAutopilotVerdict. Returns the LAST such line (the verdict
- * conventionally lands at the end of the drift), or null if none/ambiguous
- * multiple different keywords are present.
+ * prompt). Only matches a line that is EXACTLY one of these bare keywords (or
+ * the flagged approval). PROMPT/HUMAN carry payloads and get their own
+ * dedicated recovery passes in parseAutopilotVerdict. Returns the LAST such
+ * line (the verdict conventionally lands at the end of the drift), or null if
+ * none is present.
  */
 function findTrailingBareVerdict(lines) {
     let found = null;
     for (const line of lines) {
         const normalized = normalizeKeywordLine(line);
         if (normalized === "ALL_CLEAR")
-            found = "all_clear";
+            found = allClear(false);
+        else if (FLAGGED_ALL_CLEAR_RE.test(normalized))
+            found = allClear(true);
         else if (normalized === "IGNORE" || normalized === "SKIP")
-            found = "ignore";
+            found = { kind: "ignore" };
     }
     return found;
 }
@@ -136,7 +153,9 @@ export function parseAutopilotVerdict(reply) {
         .join("\n")
         .trim();
     if (collapsed === "ALL_CLEAR" || collapsed.startsWith("ALL_CLEAR")) {
-        return { kind: "all_clear" };
+        // Lines before the keyword line are blank, so `raw` is the keyword line plus
+        // the rest: catches the flag on the verdict line and any later drift.
+        return allClear(CORPUS_FLAG_RE.test(raw));
     }
     // IGNORE / SKIP: the turn wasn't real work — nothing to say, nothing to show.
     if (collapsed === "IGNORE" ||
@@ -171,10 +190,8 @@ export function parseAutopilotVerdict(reply) {
     // shape that used to leak raw commentary + "ALL_CLEAR" into a HUMAN bubble
     // instead of rendering the normal all-clear/ignore marker.
     const trailing = findTrailingBareVerdict(lines);
-    if (trailing === "all_clear")
-        return { kind: "all_clear" };
-    if (trailing === "ignore")
-        return { kind: "ignore" };
+    if (trailing)
+        return trailing;
     // A buried bare HUMAN line (Ken wrote his reasoning first, THEN the verdict).
     // Take the lines after the LAST exact-"HUMAN" line as the reason and drop the
     // leading prose. Safe to recover unlike a buried PROMPT: HUMAN stops the cycle

package/dist/core/autopilot-verdict.js.map

@@ -1 +1 @@
-{"version":3,"file":"autopilot-verdict.js","sourceRoot":"","sources":["../../src/core/autopilot-verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAQH;iFACiF;AACjF,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,CAAC,MAAM,wBAAwB,GAAG,uDAAuD,CAAC;AAEhG,MAAM,oBAAoB,GAAG,kDAAkD,CAAC;AAEhF;4CAC4C;AAC5C,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,eAAe,CAAC;IAClC,MAAM,UAAU,GAAG,SAAS,CAAC;IAC7B,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wDAAwD;AACxD,SAAS,GAAG,CAAC,IAAY,EAAE,GAAG,GAAG,cAAc;IAC7C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,GAAG,GAAG,cAAc,CAAC;AACpE,CAAC;AAED;iEACiE;AACjE,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,IAAI;SACR,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;SACxB,IAAI,EAAE;SACN,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,uBAAuB,CAAC,KAAe;IAC9C,IAAI,KAAK,GAAkC,IAAI,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,UAAU,KAAK,WAAW;YAAE,KAAK,GAAG,WAAW,CAAC;aAC/C,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,MAAM;YAAE,KAAK,GAAG,QAAQ,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACzD,CAAC;IAED,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9F,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,MAAM,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACnE,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC9C,IACE,KAAK,KAAK,IAAI;gBACd,OAAO,KAAK,KAAK,QAAQ;gBACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;gBAC/B,SAAS,IAAI,KAAK;gBAClB,KAAK,CAAC,OAAO,KAAK,WAAW;gBAC7B,oBAAoB,IAAI,KAAK;gBAC7B,KAAK,CAAC,kBAAkB,KAAK,mBAAmB,EAChD,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,CAAC;YACxE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,2DAA2D,EAAE,CAAC;IAChG,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,0CAA0C;IAC1C,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,OAAO,cAAc,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5E,cAAc,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,8EAA8E;IAC9E,iEAAiE;IACjE,MAAM,UAAU,GAAG,WAAW;SAC3B,WAAW,EAAE;SACb,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;SACxB,IAAI,EAAE,CAAC;IACV,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAElD,MAAM,IAAI,GAAG,KAAK;SACf,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC;SACzB,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAC;IAEV,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC/B,CAAC;IAED,8EAA8E;IAC9E,IACE,SAAS,KAAK,QAAQ;QACtB,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC9B,SAAS,KAAK,MAAM;QACpB,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAC5B,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7D,6EAA6E;QAC7E,kDAAkD;QAClD,IAAI,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAChE,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;QAC/E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/D,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,oBAAoB,EAAE,CAAC;IACxE,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC3D,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAErD,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,4EAA4E;IAC5E,2EAA2E;IAC3E,yEAAyE;IACzE,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,KAAK;iBACjB,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;iBACZ,IAAI,CAAC,IAAI,CAAC;iBACV,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,oBAAoB,EAAE,CAAC;QACxE,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,iDAAiD;IACjD,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;IAChD,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3C,OAAO,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"autopilot-verdict.js","sourceRoot":"","sources":["../../src/core/autopilot-verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAQH;iFACiF;AACjF,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,CAAC,MAAM,wBAAwB,GAAG,uDAAuD,CAAC;AAEhG,MAAM,oBAAoB,GAAG,kDAAkD,CAAC;AAEhF;4CAC4C;AAC5C,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,eAAe,CAAC;IAClC,MAAM,UAAU,GAAG,SAAS,CAAC;IAC7B,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wDAAwD;AACxD,SAAS,GAAG,CAAC,IAAY,EAAE,GAAG,GAAG,cAAc;IAC7C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,GAAG,GAAG,cAAc,CAAC;AACpE,CAAC;AAED;iEACiE;AACjE,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,IAAI;SACR,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;SACxB,IAAI,EAAE;SACN,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;0EAC0E;AAC1E,MAAM,oBAAoB,GAAG,qCAAqC,CAAC;AAEnE;4EAC4E;AAC5E,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAE5C,SAAS,QAAQ,CAAC,OAAgB;IAChC,OAAO,OAAO;QACZ,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE,mBAAmB,EAAE;QAChE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,uBAAuB,CAAC,KAAe;IAC9C,IAAI,KAAK,GAA4B,IAAI,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,UAAU,KAAK,WAAW;YAAE,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;aACnD,IAAI,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;aAClE,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,MAAM;YAAE,KAAK,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACzD,CAAC;IAED,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9F,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,MAAM,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACnE,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC9C,IACE,KAAK,KAAK,IAAI;gBACd,OAAO,KAAK,KAAK,QAAQ;gBACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;gBAC/B,SAAS,IAAI,KAAK;gBAClB,KAAK,CAAC,OAAO,KAAK,WAAW;gBAC7B,oBAAoB,IAAI,KAAK;gBAC7B,KAAK,CAAC,kBAAkB,KAAK,mBAAmB,EAChD,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,CAAC;YACxE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,2DAA2D,EAAE,CAAC;IAChG,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,0CAA0C;IAC1C,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,OAAO,cAAc,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5E,cAAc,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,8EAA8E;IAC9E,iEAAiE;IACjE,MAAM,UAAU,GAAG,WAAW;SAC3B,WAAW,EAAE;SACb,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;SACxB,IAAI,EAAE,CAAC;IACV,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAElD,MAAM,IAAI,GAAG,KAAK;SACf,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC;SACzB,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAC;IAEV,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACnE,6EAA6E;QAC7E,sEAAsE;QACtE,OAAO,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,8EAA8E;IAC9E,IACE,SAAS,KAAK,QAAQ;QACtB,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC9B,SAAS,KAAK,MAAM;QACpB,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAC5B,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7D,6EAA6E;QAC7E,kDAAkD;QAClD,IAAI,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAChE,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;QAC/E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/D,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,oBAAoB,EAAE,CAAC;IACxE,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,4EAA4E;IAC5E,2EAA2E;IAC3E,yEAAyE;IACzE,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,KAAK;iBACjB,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;iBACZ,IAAI,CAAC,IAAI,CAAC;iBACV,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,oBAAoB,EAAE,CAAC;QACxE,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,iDAAiD;IACjD,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;IAChD,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3C,OAAO,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;AAC7C,CAAC"}

package/dist/core/compaction/plan-step-policy.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Plan-step compaction policy (port of NVlabs/SoL-Pi commit 4101906, as
+ * re-implemented in bench/baseline/32-plan-step-compaction.mjs arm B).
+ *
+ * Checked at turn end after a plan step is newly completed. Compacting turns a
+ * big cached prefix into a small summary: every later request re-reads less
+ * (saving), but the new prefix must be re-written to cache once at r× the read
+ * price. Compact iff that write cost is repaid within the expected number of
+ * remaining requests (horizon). Pure — the session owns the bookkeeping.
+ */
+/** SoL-Pi default cache write/read price ratio. GPT-6.1 Sol's real ratio is 25. */
+export declare const DEFAULT_CACHE_WRITE_READ_RATIO = 12.5;
+/** Recent tail kept verbatim by compaction (SoL-Pi keep budget). */
+export declare const PLAN_STEP_KEEP_TOKENS = 20000;
+/** Approximate size of the summary that replaces the archive. */
+export declare const PLAN_STEP_SUMMARY_TOKENS = 1000;
+/** Within this many tokens of the window, leave it to the size trigger. */
+export declare const PLAN_STEP_WINDOW_GUARD = 16384;
+export interface PlanStepCompactionInput {
+    /** Current context size in tokens. */
+    contextTokens: number;
+    /** Tokens of the recent tail compaction keeps verbatim. */
+    keptTailTokens: number;
+    contextWindow: number;
+    /** Cache write price / cache read price. */
+    cacheWriteReadRatio: number;
+    stepsCompleted: number;
+    stepsRemaining: number;
+    /** Requests spent inside completed steps (for mean requests-per-step). */
+    requestsInCompletedSteps: number;
+    /** All requests so far (for mean context growth per request). */
+    requests: number;
+    /** Context tokens grown across `requests`. */
+    grownTokens: number;
+    /** Successful compactions so far this session. */
+    priorCompactions: number;
+    /** Unpaid cache-write cost (cache-read token units) from earlier compactions. */
+    writeCostBalance: number;
+    /** Requests since the last compaction (undefined when none yet). */
+    requestsSinceLastCompaction?: number;
+}
+export interface PlanStepCompactionDecision {
+    compact: boolean;
+    reason: string;
+}
+export declare function decidePlanStepCompaction(input: PlanStepCompactionInput): PlanStepCompactionDecision;

package/dist/core/compaction/plan-step-policy.js

@@ -0,0 +1,57 @@
+/**
+ * Plan-step compaction policy (port of NVlabs/SoL-Pi commit 4101906, as
+ * re-implemented in bench/baseline/32-plan-step-compaction.mjs arm B).
+ *
+ * Checked at turn end after a plan step is newly completed. Compacting turns a
+ * big cached prefix into a small summary: every later request re-reads less
+ * (saving), but the new prefix must be re-written to cache once at r× the read
+ * price. Compact iff that write cost is repaid within the expected number of
+ * remaining requests (horizon). Pure — the session owns the bookkeeping.
+ */
+/** SoL-Pi default cache write/read price ratio. GPT-6.1 Sol's real ratio is 25. */
+export const DEFAULT_CACHE_WRITE_READ_RATIO = 12.5;
+/** Recent tail kept verbatim by compaction (SoL-Pi keep budget). */
+export const PLAN_STEP_KEEP_TOKENS = 20_000;
+/** Approximate size of the summary that replaces the archive. */
+export const PLAN_STEP_SUMMARY_TOKENS = 1_000;
+/** Within this many tokens of the window, leave it to the size trigger. */
+export const PLAN_STEP_WINDOW_GUARD = 16_384;
+export function decidePlanStepCompaction(input) {
+    const ctx = input.contextTokens;
+    if (input.stepsRemaining <= 0)
+        return { compact: false, reason: "plan-finished" };
+    if (ctx >= input.contextWindow - PLAN_STEP_WINDOW_GUARD) {
+        return { compact: false, reason: "near-window: defer to size trigger" };
+    }
+    if (input.priorCompactions > 0 && (input.requestsSinceLastCompaction ?? 1) < 1) {
+        return { compact: false, reason: "back-to-back" };
+    }
+    const r = Math.max(1, input.cacheWriteReadRatio);
+    const archive = Math.max(0, ctx - input.keptTailTokens);
+    const saving = archive - PLAN_STEP_SUMMARY_TOKENS;
+    if (saving <= 0)
+        return { compact: false, reason: "no-saving" };
+    const post = ctx - saving;
+    const breakeven = (post * (r - 1)) / saving;
+    const done = input.stepsCompleted;
+    const meanReq = done > 0 ? input.requestsInCompletedSteps / done : 0;
+    let horizon = 1 + Math.floor(meanReq * input.stepsRemaining);
+    const growth = input.requests > 0 ? input.grownTokens / input.requests : 0;
+    if (growth > 0) {
+        horizon = Math.min(horizon, Math.floor((input.contextWindow - ctx) / growth));
+    }
+    if (input.priorCompactions === 0) {
+        horizon *= 2;
+        return {
+            compact: breakeven <= horizon,
+            reason: `first be=${breakeven.toFixed(1)} h=${horizon}`,
+        };
+    }
+    // Later compactions: stricter margin, and earlier write cost must be repaid.
+    const debtCovered = input.writeCostBalance <= 0;
+    return {
+        compact: breakeven * 1.5 <= horizon && debtCovered,
+        reason: `be=${breakeven.toFixed(1)} h=${horizon} debt=${Math.round(input.writeCostBalance)}`,
+    };
+}
+//# sourceMappingURL=plan-step-policy.js.map

package/dist/core/compaction/plan-step-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-step-policy.js","sourceRoot":"","sources":["../../../src/core/compaction/plan-step-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,mFAAmF;AACnF,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;AACnD,oEAAoE;AACpE,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,iEAAiE;AACjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAC9C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AA+B7C,MAAM,UAAU,wBAAwB,CACtC,KAA8B;IAE9B,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,CAAC;IAChC,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAClF,IAAI,GAAG,IAAI,KAAK,CAAC,aAAa,GAAG,sBAAsB,EAAE,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,2BAA2B,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,OAAO,GAAG,wBAAwB,CAAC;IAClD,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG,GAAG,GAAG,MAAM,CAAC;IAC1B,MAAM,SAAS,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,cAAc,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,CAAC;QACb,OAAO;YACL,OAAO,EAAE,SAAS,IAAI,OAAO;YAC7B,MAAM,EAAE,YAAY,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE;SACxD,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,MAAM,WAAW,GAAG,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAChD,OAAO;QACL,OAAO,EAAE,SAAS,GAAG,GAAG,IAAI,OAAO,IAAI,WAAW;QAClD,MAAM,EAAE,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE;KAC7F,CAAC;AACJ,CAAC"}

package/dist/core/destructive-git-guard.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Destructive-git guard: refuses model-issued shell commands that would throw
+ * away the user's uncommitted work.
+ *
+ * Checkpoints only capture edits made through write/edit, so one
+ * `git reset --hard` from the shell would otherwise lose work with no undo.
+ *
+ * Two phases:
+ * 1. {@link findDestructiveGitCommands} — pure parse. A small quote-aware shell
+ *    scanner splits the command into simple commands (through `&&`/`;`/`||`/
+ *    pipes, subshells, `$(…)`/backticks, `if`/`for`/`while` bodies), unwraps
+ *    `bash -c`/`sh -c`/`eval` scripts and exec wrappers (`sudo`, `env`,
+ *    `timeout`, `nohup`, `xargs`, …), follows `cd` and `git -C`, and classifies
+ *    each git invocation.
+ * 2. {@link checkDestructiveGit} — context. Discarding commands are blocked
+ *    only when `git status` in the target directory shows something they would
+ *    destroy; a clean tree passes. Plain force-push is always blocked.
+ *
+ * Fails OPEN on guard errors (git missing, timeout): the guard is a seatbelt
+ * against an agent mistake, not a sandbox, and must never wedge the bash tool.
+ */
+type DestructiveGitKind = "reset-hard" | "checkout-paths" | "restore-worktree" | "clean" | "stash-drop" | "stash-clear" | "branch-force-delete" | "force-push";
+export interface DestructiveGitMatch {
+    kind: DestructiveGitKind;
+    /** The git invocation as parsed, for the block message. */
+    display: string;
+    /** Directory git would run in (after `cd` and `git -C`). */
+    dir: string;
+    /** `--git-dir=`/`--work-tree=` globals to forward to inspection commands. */
+    gitArgs: string[];
+    /** Pathspecs limiting what is discarded; empty means the whole tree. */
+    pathspecs: string[];
+    /** checkout with one operand that may be a branch rather than a path. */
+    maybeRef?: string;
+    /** clean: also/only removes ignored files (`-x` / `-X`). */
+    ignored?: "also" | "only";
+    /** clean: `-d` also removes untracked directories. */
+    directories?: boolean;
+    /** branch -D targets; stash drop target. */
+    refs: string[];
+}
+/**
+ * Parse `command` and return every git invocation in it that can destroy
+ * work, with the directory each would run in. Pure apart from `existsSync`
+ * for ambiguous `git checkout <name>`.
+ */
+export declare function findDestructiveGitCommands(command: string, cwd: string): DestructiveGitMatch[];
+export interface DestructiveGitCheckOptions {
+    /** The tool's working directory. */
+    cwd: string;
+    /**
+     * The shell's real current directory when it can differ from `cwd`
+     * (persistent session shell after a `cd`). Only called when the command
+     * contains a destructive git invocation.
+     */
+    resolveCwd?: () => Promise<string | null>;
+}
+/**
+ * Returns a block message for the model when `command` would destroy
+ * uncommitted work (or force-push), or null to let it run.
+ */
+export declare function checkDestructiveGit(command: string, options: DestructiveGitCheckOptions): Promise<string | null>;
+export {};