@loompad/cli 0.1.0 → 1.1.1

package/dist/core/mcp.js

@@ -0,0 +1,181 @@
+/**
+ * MCP servers — turning the project's configured list into something the agents
+ * actually receive.
+ *
+ * Until this existed, `config.mcps` was a list you could edit and nothing else:
+ * it was written by the composer, read back by GET /mcps, and never once handed
+ * to an agent. A row said "connected" because it had a URL typed into it, which
+ * is not the same claim at all. Both halves of that are fixed here.
+ *
+ *   1. `writeMcpSession` renders the enabled servers into the standard
+ *      `{"mcpServers": {…}}` document, in a temp file the adapter passes to its
+ *      CLI for one turn and which is deleted afterwards. Nothing is left behind
+ *      in the project, and nothing survives a turn it wasn't meant for.
+ *
+ *   2. `probeMcpServer` asks the server whether it is there. A bounded HTTP
+ *      round-trip is a weak signal — it proves an endpoint answered, not that it
+ *      speaks MCP — but it is a *measurement*, and the alternative on offer was
+ *      `!!url`. A server that refuses the connection is reported as unreachable,
+ *      which is the honest reading.
+ *
+ * Two adapters consume this, each through its harness's own API: the Claude
+ * adapter passes the servers as the Agent SDK's `mcpServers` option, and the
+ * Codex adapter as `mcp_servers.<key>` config on app-server `thread/start`.
+ * The config file itself is what `claude -p` callers (Insights) read.
+ */
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+/**
+ * MCP config keys land in a TOML dotted path (`mcp_servers.<key>` for codex),
+ * so a display name like "My Server / prod" can't be used raw. Lower-cased and
+ * reduced to word characters, which is stable across turns and collision-free
+ * for any two names that differ by more than punctuation.
+ */
+export function mcpKey(name) {
+    const k = String(name ?? "").trim().toLowerCase().replace(/[^a-z0-9_-]+/g, "_").replace(/^_+|_+$/g, "");
+    return k || "server";
+}
+/**
+ * Which configured servers are real enough to hand to an agent.
+ *
+ * A server counts when it has somewhere to connect to — a URL, or a command to
+ * run — and hasn't been switched off for the session. The built-in suggestion
+ * rows (GitHub, Slack, … with an empty url) are exactly the rows that fail this,
+ * which is the point: they're placeholders, and shipping a placeholder to a CLI
+ * as if it were a server is how you get an agent that reports a tool it doesn't
+ * have.
+ */
+export function resolveMcpServers(mcps) {
+    const out = [];
+    const seen = new Set();
+    for (const m of mcps ?? []) {
+        if (m?.enabledForSession === false)
+            continue;
+        const url = String(m?.url ?? "").trim();
+        const command = String(m?.command ?? "").trim();
+        if (!url && !command)
+            continue;
+        const key = mcpKey(m.name);
+        if (seen.has(key))
+            continue; // first wins; a duplicate key would overwrite it
+        seen.add(key);
+        const entry = url
+            ? {
+                type: transportOf(m, url),
+                url,
+                // `headers` is the documented field of the mcp.json remote entry, and
+                // it is how a hosted server that wants an `Authorization: Bearer …`
+                // gets one. Only emitted when there is something to say, so a config
+                // for a server that needs no auth reads exactly as it did before.
+                ...(m.headers && Object.keys(m.headers).length ? { headers: stringValues(m.headers) } : {}),
+            }
+            : {
+                type: "stdio",
+                command,
+                ...(m.args?.length ? { args: m.args.map((a) => String(a)) } : {}),
+                ...(m.env && Object.keys(m.env).length ? { env: stringValues(m.env) } : {}),
+            };
+        out.push({ key, name: m.name, entry });
+    }
+    return out;
+}
+/**
+ * http unless told otherwise. An explicit `transport` wins; failing that a URL
+ * whose path ends in /sse is the long-standing convention for an SSE endpoint,
+ * and guessing it right saves a server that would otherwise fail to handshake.
+ */
+function transportOf(m, url) {
+    if (m.transport === "sse" || m.transport === "http")
+        return m.transport;
+    return /\/sse\/?$/i.test(url) ? "sse" : "http";
+}
+function stringValues(env) {
+    const out = {};
+    for (const [k, v] of Object.entries(env))
+        out[k] = String(v);
+    return out;
+}
+/** The config document itself — the shape every MCP client reads. */
+export function mcpConfigDocument(servers) {
+    const mcpServers = {};
+    for (const s of servers)
+        mcpServers[s.key] = s.entry;
+    return { mcpServers };
+}
+/**
+ * Write the enabled servers to a temp config file for one turn.
+ *
+ * Returns null when there is nothing to write — callers use that to decide
+ * whether the CLI gets the flag at all, because passing an empty config is not
+ * the same as passing none (with `--strict-mcp-config` it would *suppress* the
+ * user's own servers).
+ */
+export function writeMcpSession(mcps) {
+    const servers = resolveMcpServers(mcps);
+    if (!servers.length)
+        return null;
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "loom-mcp-"));
+    const configPath = path.join(dir, "mcp.json");
+    fs.writeFileSync(configPath, JSON.stringify(mcpConfigDocument(servers), null, 2));
+    return {
+        configPath,
+        servers,
+        cleanup: () => {
+            try {
+                fs.rmSync(dir, { recursive: true, force: true });
+            }
+            catch {
+                // A leftover file in the OS temp dir is not worth failing a turn over.
+            }
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// Reachability
+// ---------------------------------------------------------------------------
+/**
+ * Is the server actually there?
+ *
+ * HEAD first (cheapest thing that proves a listener answered), then GET for the
+ * servers that only implement the methods MCP uses. ANY HTTP status counts as
+ * reachable — a 405 or a 401 is a server saying "not like that", which is still
+ * a server. A connection refused, a DNS failure or a timeout is not.
+ *
+ * Bounded hard: this sits behind an HTTP handler that renders a list, and a
+ * hanging endpoint must cost that request two seconds, not forever. The body is
+ * cancelled immediately because an MCP endpoint may answer GET with an open SSE
+ * stream that never ends.
+ */
+export async function probeMcpServer(url, timeoutMs = 2_000) {
+    const target = String(url ?? "").trim();
+    if (!/^https?:\/\//i.test(target))
+        return false;
+    if (typeof globalThis.fetch !== "function")
+        return false;
+    for (const method of ["HEAD", "GET"]) {
+        try {
+            const res = await fetch(target, { method, signal: AbortSignal.timeout(timeoutMs), redirect: "manual" });
+            await res.body?.cancel().catch(() => { });
+            return true;
+        }
+        catch {
+            // try the next method; a network-level failure ends the loop below
+        }
+    }
+    return false;
+}
+/**
+ * Probe every configured server that has a URL, in parallel, and report which
+ * ones answered. Servers with no URL aren't probed and aren't reachable —
+ * including the command-based ones, whose liveness is "does the process start",
+ * a question this can't answer without spawning it.
+ */
+export async function probeMcpServers(mcps, timeoutMs = 2_000) {
+    const withUrl = mcps.filter((m) => String(m?.url ?? "").trim());
+    const results = await Promise.all(withUrl.map((m) => probeMcpServer(m.url, timeoutMs)));
+    const out = {};
+    withUrl.forEach((m, i) => (out[m.name] = results[i] ?? false));
+    return out;
+}
+//# sourceMappingURL=mcp.js.map

package/dist/core/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/core/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAc7B;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACxG,OAAO,CAAC,IAAI,QAAQ,CAAC;AACvB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAmC;IACnE,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,EAAE,iBAAiB,KAAK,KAAK;YAAE,SAAS;QAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO;YAAE,SAAS;QAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,iDAAiD;QAC9E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,KAAK,GAAmB,GAAG;YAC/B,CAAC,CAAC;gBACE,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC;gBACzB,GAAG;gBACH,sEAAsE;gBACtE,oEAAoE;gBACpE,qEAAqE;gBACrE,kEAAkE;gBAClE,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5F;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,OAAO;gBACb,OAAO;gBACP,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5E,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,CAAkB,EAAE,GAAW;IAClD,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO,CAAC,CAAC,SAAS,CAAC;IACxE,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,GAA2B;IAC/C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,iBAAiB,CAAC,OAA4B;IAC5D,MAAM,UAAU,GAAmC,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IACrD,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAAmC;IACjE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9C,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,OAAO;QACL,UAAU;QACV,OAAO;QACP,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,uEAAuE;YACzE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,SAAS,GAAG,KAAK;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IACzD,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,KAAK,CAAU,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACxG,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAuB,EACvB,SAAS,GAAG,KAAK;IAEjB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/memory.d.ts

@@ -12,6 +12,7 @@
  * isolation-first tool (separate worktrees) structurally can't own.
  */
 import type { AgentConfig, LoomEvent, ProjectConfig, UnifiedMemory } from "../types.js";
+export declare const RECENT_DECISIONS = 40;
 export declare function nativeMemoryFiles(agent: AgentConfig): string[];
 export interface ImportedBlock {
     agentId: string;

package/dist/core/memory.js

@@ -13,9 +13,10 @@
  */
 import crypto from "node:crypto";
 import fs from "node:fs";
+import { withoutCanon } from "./team-canon.js";
 import path from "node:path";
 const MAX_IMPORT_CHARS = 8_000; // per source, keeps the brain bounded
-const RECENT_DECISIONS = 40;
+export const RECENT_DECISIONS = 40;
 /**
  * Where each ADE keeps its native, project-local memory. Project-scoped only
  * by default — global files (e.g. ~/.claude/CLAUDE.md) are intentionally NOT
@@ -57,7 +58,9 @@ export function readNativeMemory(projectDir, config) {
             if (!fs.existsSync(abs))
                 continue;
             try {
-                const raw = fs.readFileSync(abs, "utf8").trim();
+                // Loom's own canon section (AGENTS.md) is canon, parsed as such by the
+                // team brain — never pasted back in as raw text (no feedback loop, D44).
+                const raw = withoutCanon(fs.readFileSync(abs, "utf8")).trim();
                 if (!raw)
                     continue;
                 seenFiles.add(norm);

package/dist/core/memory.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/core/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAS7B,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,sCAAsC;AACtE,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,aAAa,GAA6B;IAC9C,aAAa,EAAE,CAAC,WAAW,EAAE,mBAAmB,EAAE,WAAW,CAAC;IAC9D,6EAA6E;IAC7E,8EAA8E;IAC9E,KAAK,EAAE,CAAC,WAAW,EAAE,kBAAkB,EAAE,UAAU,CAAC;IACpD,QAAQ,EAAE,CAAC,WAAW,EAAE,qBAAqB,EAAE,aAAa,CAAC;IAC7D,WAAW,EAAE,CAAC,WAAW,EAAE,iBAAiB,EAAE,SAAS,CAAC;IACxD,WAAW,EAAE,CAAC,wBAAwB,EAAE,WAAW,EAAE,gBAAgB,CAAC;IACtE,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,EAAE,CAAC,2BAA2B,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,WAAW,CAAC;IACzG,IAAI,EAAE,EAAE;CACT,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,KAAkB;IAClD,IAAI,KAAK,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC,WAAW,CAAC;IAChD,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACpD,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,MAAqB;IACxE,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBAChD,IAAI,CAAC,GAAG;oBAAE,SAAS;gBACnB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,GAAG,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG;iBAClG,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAmB,EACnB,MAAmB,EACnB,QAAyB;IAEzB,MAAM,SAAS,GAAG,MAAM;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;SACxC,MAAM,CAAC,OAAO,CAAC;SACf,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAE5B,MAAM,OAAO,GAAmB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM;KACxB,CAAC,CAAC,CAAC;IAEJ,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,2BAA2B,WAAW,EAAE,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,iFAAiF,EACjF,0EAA0E,CAC3E,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACzE,CAAC"}
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/core/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,IAAI,MAAM,WAAW,CAAC;AAS7B,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,sCAAsC;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,aAAa,GAA6B;IAC9C,aAAa,EAAE,CAAC,WAAW,EAAE,mBAAmB,EAAE,WAAW,CAAC;IAC9D,6EAA6E;IAC7E,8EAA8E;IAC9E,KAAK,EAAE,CAAC,WAAW,EAAE,kBAAkB,EAAE,UAAU,CAAC;IACpD,QAAQ,EAAE,CAAC,WAAW,EAAE,qBAAqB,EAAE,aAAa,CAAC;IAC7D,WAAW,EAAE,CAAC,WAAW,EAAE,iBAAiB,EAAE,SAAS,CAAC;IACxD,WAAW,EAAE,CAAC,wBAAwB,EAAE,WAAW,EAAE,gBAAgB,CAAC;IACtE,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,EAAE,CAAC,2BAA2B,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,WAAW,CAAC;IACzG,IAAI,EAAE,EAAE;CACT,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,KAAkB;IAClD,IAAI,KAAK,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC,WAAW,CAAC;IAChD,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACpD,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,MAAqB;IACxE,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,IAAI,CAAC;gBACH,uEAAuE;gBACvE,yEAAyE;gBACzE,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC9D,IAAI,CAAC,GAAG;oBAAE,SAAS;gBACnB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,GAAG,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG;iBAClG,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAmB,EACnB,MAAmB,EACnB,QAAyB;IAEzB,MAAM,SAAS,GAAG,MAAM;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;SACxC,MAAM,CAAC,OAAO,CAAC;SACf,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAE5B,MAAM,OAAO,GAAmB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM;KACxB,CAAC,CAAC,CAAC;IAEJ,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,2BAA2B,WAAW,EAAE,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,iFAAiF,EACjF,0EAA0E,CAC3E,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACzE,CAAC"}

package/dist/core/model-tools.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Hands for a model agent.
+ *
+ * A CLI agent arrives with hands: `claude` can open a file, write a patch, run
+ * a test. A bare chat-completions endpoint cannot, so the first model agent
+ * was a thinker asked to review code it could not read.
+ *
+ * Three tools read — `read_file`, `list_files`, `search` — and they are always
+ * available once a project turns tools on, because reading inside the project
+ * is not a thing worth interrupting someone about. Two tools change something
+ * — `write_file` and `run` — and they live at the bottom of this file behind
+ * an approval, offered only when the project asked for them.
+ *
+ * ## The boundary
+ *
+ * Every path is resolved and proven to be inside the project before anything
+ * opens it, because these paths come from a model, which is to say from
+ * whatever the model read last. `.git` and `.loom` are excluded: one holds the
+ * repository's internals and the other holds Loom's own bookkeeping, and
+ * neither is what "read the code" means. Output is bounded, because a model
+ * that asks for a 40MB file should get an answer rather than an incident.
+ */
+/** What the wire calls a tool the model may use. */
+export interface ToolSpec {
+    type: "function";
+    function: {
+        name: string;
+        description: string;
+        parameters: Record<string, unknown>;
+    };
+}
+export interface ToolCall {
+    id: string;
+    name: string;
+    args: Record<string, unknown>;
+}
+export interface ToolResult {
+    id: string;
+    name: string;
+    /** What goes back to the model. Bounded, and truthful when it was cut. */
+    content: string;
+    /** For the thread: a one-line summary of what happened. */
+    summary: string;
+    ok: boolean;
+}
+/** As much of a file as is worth sending back. */
+export declare const MAX_FILE_CHARS = 60000;
+/** How many paths a listing or a search may return. */
+export declare const MAX_ENTRIES = 300;
+/** How many tool hops one turn may take before it has to say something. */
+export declare const MAX_HOPS = 8;
+export declare const READ_TOOLS: ToolSpec[];
+/**
+ * Resolve a model-supplied path inside the project, or refuse.
+ *
+ * The paths here come from a model, which means they come from whatever the
+ * model last read — a file in the repo could ask it to read `../../.ssh/id_rsa`
+ * and it might. So this is not a formality: resolve, then prove containment,
+ * then check it isn't one of the hidden directories.
+ */
+export declare function insideProject(root: string, rel: string): string;
+/** Run one tool call against the project. Never throws: a refusal is a result. */
+export declare function runReadTool(root: string, call: ToolCall): ToolResult;
+/** How long one allowed command may run before it's killed. */
+export declare const RUN_TIMEOUT_MS = 120000;
+/** How much of its output goes back to the model. */
+export declare const MAX_OUTPUT_CHARS = 20000;
+export declare const WRITE_TOOL: ToolSpec;
+export declare function runTool(allowed: string[]): ToolSpec;
+/** Which tools this agent may be offered, given what the project allowed. */
+export declare function toolsFor(opts: {
+    write?: boolean;
+    run?: string[];
+}): ToolSpec[];
+/** Is this one of the tools that changes something? */
+export declare function isWriteTool(name: string): boolean;
+/**
+ * What a person is shown when asked about a write.
+ *
+ * The path and the reason, plus how much of the file changes — "writes 900
+ * lines to src/app.ts, which currently has 12" is the sentence that stops a
+ * bad edit, and a raw JSON dump of the whole new file is not.
+ */
+export declare function describeWrite(root: string, call: ToolCall): string;
+/** Write a file, having been allowed to. Refuses outside the project. */
+export declare function applyWrite(root: string, call: ToolCall): ToolResult;
+/**
+ * Does the allow-list permit this command?
+ *
+ * A prefix match on whole words, so "npm test" allows `npm test --watch` and
+ * not `npm testify`, and anything a shell would treat specially is refused
+ * outright — these arguments come from a model, and `npm test; rm -rf ~` is
+ * the obvious thing to guard against.
+ */
+export declare function allowsCommand(allowed: string[], command: string): boolean;
+/** Run an allowed command. No shell: the words are the words. */
+export declare function applyRun(root: string, call: ToolCall, allowed: string[]): Promise<ToolResult>;