@monoes/monomindcli 2.8.4 → 2.9.1

package/dist/src/orgrt/tool-fence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-fence.d.ts","sourceRoot":"","sources":["../../../src/orgrt/tool-fence.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,0EAA0E;AAC1E,eAAO,MAAM,YAAY,QAAoC,CAAC;AAE9D;+DAC+D;AAC/D,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,CA6B7D;AAkBD;;4EAE4E;AAC5E,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAmB7D;AAED;;wDAEwD;AACxD,wBAAsB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAa1F;AAED,uEAAuE;AACvE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAI9E"}
+{"version":3,"file":"tool-fence.d.ts","sourceRoot":"","sources":["../../../src/orgrt/tool-fence.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,0EAA0E;AAC1E,eAAO,MAAM,YAAY,QAAoC,CAAC;AAuB9D;+DAC+D;AAC/D,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,CA6B7D;AAkBD;;;;;yEAKyE;AACzE,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAAE,EAClB,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,GACjD,QAAQ,EAAE,CAwBZ;AAED;;wDAEwD;AACxD,wBAAsB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAa1F;AAED,uEAAuE;AACvE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAI9E"}

package/dist/src/orgrt/tool-fence.js

@@ -16,6 +16,39 @@
 import { z } from 'zod';
 /** Fenced block the model uses to call a tool (see buildToolProtocol). */
 export const TOOL_CALL_RE = /```tool_call\s*\n([\s\S]*?)```/g;
+/** Return the prefix of `s` ending at the first balanced JSON object/array,
+ *  respecting string literals. Falls back to `s` unchanged when no balanced
+ *  prefix exists (JSON.parse then reports the original error). */
+function firstBalancedJson(s) {
+    let depth = 0, inStr = false, esc = false;
+    for (let i = 0; i < s.length; i++) {
+        const c = s[i];
+        if (esc) {
+            esc = false;
+            continue;
+        }
+        if (c === '\\' && inStr) {
+            esc = true;
+            continue;
+        }
+        if (c === '"') {
+            inStr = !inStr;
+            continue;
+        }
+        if (inStr)
+            continue;
+        if (c === '{' || c === '[')
+            depth++;
+        else if (c === '}' || c === ']') {
+            depth--;
+            if (depth === 0)
+                return s.slice(0, i + 1);
+            if (depth < 0)
+                return s;
+        }
+    }
+    return s;
+}
 /** Max tool_call → tool_result round-trips within a single mailbox prompt.
  *  Guards against a model that keeps calling tools forever. */
 export const MAX_TOOL_ROUNDS = 10;
@@ -91,17 +124,23 @@ function describeZod(schema) {
         return `optional ${describeZod(schema._def.innerType)}`;
     return desc ? `${kind} — ${desc}` : kind;
 }
-/** Extract tool_call fences from raw assistant texts. Invalid JSON or a
- *  missing name is skipped (reported back as an error result is impossible
- *  without a name — so it's silently ignored, matching lenient parsing). */
-export function parseToolCalls(rawTexts) {
+/** Extract tool_call fences from raw assistant texts. A fence whose JSON
+ *  cannot be parsed at all is skipped — but NOT silently: `onMalformed` (when
+ *  given) is invoked with the raw fence body and the parse error so callers
+ *  can surface it (runners emit it as an assistant note, which session.ts
+ *  routes to the org bus and scrollback). A parsed object without a string
+ *  `name` is skipped quietly — there is nothing actionable to report. */
+export function parseToolCalls(rawTexts, onMalformed) {
     const calls = [];
     for (const text of rawTexts) {
         TOOL_CALL_RE.lastIndex = 0;
         let m;
         while ((m = TOOL_CALL_RE.exec(text)) !== null) {
             try {
-                const parsed = JSON.parse(m[1].trim());
+                // Models sometimes append extra closing braces after the JSON object
+                // (observed with kimi k3: `...}}}`); parse only the first balanced
+                // object instead of rejecting the whole fence.
+                const parsed = JSON.parse(firstBalancedJson(m[1].trim()));
                 if (typeof parsed.name !== 'string' || !parsed.name)
                     continue;
                 calls.push({
@@ -111,7 +150,9 @@ export function parseToolCalls(rawTexts) {
                         : {},
                 });
             }
-            catch { /* malformed fence — ignore */ }
+            catch (err) {
+                onMalformed?.(m[1].trim(), err instanceof Error ? err.message : String(err));
+            }
         }
     }
     return calls;

package/dist/src/orgrt/tool-fence.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-fence.js","sourceRoot":"","sources":["../../../src/orgrt/tool-fence.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,0EAA0E;AAC1E,MAAM,CAAC,MAAM,YAAY,GAAG,iCAAiC,CAAC;AAE9D;+DAC+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAOlC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAmB;IACnD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,EAAE;QACF,iCAAiC;QACjC,EAAE;QACF,oEAAoE;QACpE,iEAAiE;QACjE,EAAE;QACF,cAAc;QACd,+CAA+C;QAC/C,KAAK;QACL,EAAE;QACF,2EAA2E;QAC3E,0EAA0E;QAC1E,0DAA0D;QAC1D,EAAE;QACF,oCAAoC;QACpC,EAAE;KACH,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,MAAM,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,8DAA8D;AAC9D,SAAS,WAAW,CAAC,MAAsB;IACzC,MAAM,IAAI,GAAI,MAAmC,CAAC,WAAW,CAAC;IAC9D,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS;QAAE,IAAI,GAAG,QAAQ,CAAC;SAC9C,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS;QAAE,IAAI,GAAG,QAAQ,CAAC;SACnD,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU;QAAE,IAAI,GAAG,SAAS,CAAC;SACrD,IAAI,MAAM,YAAY,CAAC,CAAC,QAAQ;QAAE,IAAI,GAAG,OAAO,CAAC;SACjD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS;QAAE,IAAI,GAAG,QAAQ,CAAC;SACnD,IAAI,MAAM,YAAY,CAAC,CAAC,OAAO;QAAE,IAAI,GAAI,MAAM,CAAC,OAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SAC/E,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW;QAAE,OAAO,YAAY,WAAW,CAAC,MAAM,CAAC,MAAM,EAAoB,CAAC,EAAE,CAAC;SACzG,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW;QAAE,OAAO,YAAY,WAAW,CAAC,MAAM,CAAC,MAAM,EAAoB,CAAC,EAAE,CAAC;SACzG,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU;QAAE,OAAO,YAAY,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,SAA2B,CAAC,EAAE,CAAC;IACnH,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED;;4EAE4E;AAC5E,MAAM,UAAU,cAAc,CAAC,QAAkB;IAC/C,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAA4C,CAAC;gBAClF,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI;oBAAE,SAAS;gBAC9D,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,SAAS,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC;wBACnE,CAAC,CAAC,MAAM,CAAC,SAAoC;wBAC7C,CAAC,CAAC,EAAE;iBACP,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;wDAEwD;AACxD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAmB,EAAE,IAAc;IACvE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI;QAAE,OAAO,wBAAwB,IAAI,CAAC,IAAI,iBAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1G,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,gCAAgC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACvI,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAA+B,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC,IAAI,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAU,IAAI,CAAC,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,iBAAiB,CAAC,KAAiB,EAAE,OAAiB;IACpE,OAAO,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC9C,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,OAAO,CAClF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"tool-fence.js","sourceRoot":"","sources":["../../../src/orgrt/tool-fence.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,0EAA0E;AAC1E,MAAM,CAAC,MAAM,YAAY,GAAG,iCAAiC,CAAC;AAE9D;;kEAEkE;AAClE,SAAS,iBAAiB,CAAC,CAAS;IAClC,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,GAAG,GAAG,KAAK,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,GAAG,EAAE,CAAC;YAAC,GAAG,GAAG,KAAK,CAAC;YAAC,SAAS;QAAC,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,EAAE,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,CAAC,KAAK,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5C,IAAI,KAAK;YAAE,SAAS;QACpB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAChC,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1C,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;+DAC+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAOlC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAmB;IACnD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,EAAE;QACF,iCAAiC;QACjC,EAAE;QACF,oEAAoE;QACpE,iEAAiE;QACjE,EAAE;QACF,cAAc;QACd,+CAA+C;QAC/C,KAAK;QACL,EAAE;QACF,2EAA2E;QAC3E,0EAA0E;QAC1E,0DAA0D;QAC1D,EAAE;QACF,oCAAoC;QACpC,EAAE;KACH,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,MAAM,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,8DAA8D;AAC9D,SAAS,WAAW,CAAC,MAAsB;IACzC,MAAM,IAAI,GAAI,MAAmC,CAAC,WAAW,CAAC;IAC9D,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS;QAAE,IAAI,GAAG,QAAQ,CAAC;SAC9C,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS;QAAE,IAAI,GAAG,QAAQ,CAAC;SACnD,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU;QAAE,IAAI,GAAG,SAAS,CAAC;SACrD,IAAI,MAAM,YAAY,CAAC,CAAC,QAAQ;QAAE,IAAI,GAAG,OAAO,CAAC;SACjD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS;QAAE,IAAI,GAAG,QAAQ,CAAC;SACnD,IAAI,MAAM,YAAY,CAAC,CAAC,OAAO;QAAE,IAAI,GAAI,MAAM,CAAC,OAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SAC/E,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW;QAAE,OAAO,YAAY,WAAW,CAAC,MAAM,CAAC,MAAM,EAAoB,CAAC,EAAE,CAAC;SACzG,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW;QAAE,OAAO,YAAY,WAAW,CAAC,MAAM,CAAC,MAAM,EAAoB,CAAC,EAAE,CAAC;SACzG,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU;QAAE,OAAO,YAAY,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,SAA2B,CAAC,EAAE,CAAC;IACnH,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED;;;;;yEAKyE;AACzE,MAAM,UAAU,cAAc,CAC5B,QAAkB,EAClB,WAAkD;IAElD,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,qEAAqE;gBACrE,mEAAmE;gBACnE,+CAA+C;gBAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAA4C,CAAC;gBACrG,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI;oBAAE,SAAS;gBAC9D,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,SAAS,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC;wBACnE,CAAC,CAAC,MAAM,CAAC,SAAoC;wBAC7C,CAAC,CAAC,EAAE;iBACP,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;wDAEwD;AACxD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAmB,EAAE,IAAc;IACvE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI;QAAE,OAAO,wBAAwB,IAAI,CAAC,IAAI,iBAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1G,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,gCAAgC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACvI,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAA+B,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC,IAAI,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAU,IAAI,CAAC,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,iBAAiB,CAAC,KAAiB,EAAE,OAAiB;IACpE,OAAO,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC9C,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,OAAO,CAClF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/src/orgrt/types.d.ts

@@ -67,7 +67,13 @@ export declare const RoleSchema: z.ZodObject<{
             read: "read";
         }>>>;
     }, z.core.$loose>>;
+    runtime: z.ZodOptional<z.ZodEnum<{
+        claude: "claude";
+        kimicode: "kimicode";
+        opencode: "opencode";
+    }>>;
     max_turns_per_message: z.ZodOptional<z.ZodNumber>;
+    budget_tokens: z.ZodOptional<z.ZodNumber>;
 }, z.core.$loose>;
 export declare const OrgDefSchema: z.ZodObject<{
     name: z.ZodString;
@@ -80,14 +86,32 @@ export declare const OrgDefSchema: z.ZodObject<{
         memory_namespace: z.ZodOptional<z.ZodOptional<z.ZodString>>;
         max_turns_per_message: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
         idle_minutes: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
-        workspace: z.ZodOptional<z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"repo">, z.ZodLiteral<"isolated">, z.ZodString]>>>;
+        workspace: z.ZodOptional<z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"repo">, z.ZodLiteral<"isolated">, z.ZodLiteral<"worktree">, z.ZodLiteral<"worktree-per-role">, z.ZodString]>>>;
+        circuit_breaker: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+            failure_threshold: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+            cooldown_ms: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+        }, z.core.$strip>>>;
+        stale_base_threshold: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+        prechecks: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            command: z.ZodString;
+        }, z.core.$strip>>>>;
     }, z.core.$loose>>, z.ZodTransform<{
         memory_namespace?: string | undefined;
         idle_minutes?: number | undefined;
+        circuit_breaker?: {
+            failure_threshold?: number | undefined;
+            cooldown_ms?: number | undefined;
+        } | undefined;
+        prechecks?: {
+            name: string;
+            command: string;
+        }[] | undefined;
         max_concurrent_agents: number;
         budget_tokens: number;
         max_turns_per_message: number;
         workspace: string;
+        stale_base_threshold: number;
     }, {
         [x: string]: unknown;
         max_concurrent_agents?: number | undefined;
@@ -96,6 +120,15 @@ export declare const OrgDefSchema: z.ZodObject<{
         max_turns_per_message?: number | undefined;
         idle_minutes?: number | undefined;
         workspace?: string | undefined;
+        circuit_breaker?: {
+            failure_threshold?: number | undefined;
+            cooldown_ms?: number | undefined;
+        } | undefined;
+        stale_base_threshold?: number | undefined;
+        prechecks?: {
+            name: string;
+            command: string;
+        }[] | undefined;
     }>>;
     roles: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -136,8 +169,19 @@ export declare const OrgDefSchema: z.ZodObject<{
                 read: "read";
             }>>>;
         }, z.core.$loose>>;
+        runtime: z.ZodOptional<z.ZodEnum<{
+            claude: "claude";
+            kimicode: "kimicode";
+            opencode: "opencode";
+        }>>;
         max_turns_per_message: z.ZodOptional<z.ZodNumber>;
+        budget_tokens: z.ZodOptional<z.ZodNumber>;
     }, z.core.$loose>>;
+    runtime: z.ZodOptional<z.ZodEnum<{
+        claude: "claude";
+        kimicode: "kimicode";
+        opencode: "opencode";
+    }>>;
 }, z.core.$loose>;
 export type OrgDef = z.infer<typeof OrgDefSchema>;
 export type OrgRole = z.infer<typeof RoleSchema>;
@@ -149,7 +193,7 @@ export interface BusEvent {
     ts: number;
     org: string;
     run: string;
-    type: 'message' | 'xorg' | 'tool' | 'asset' | 'chat' | 'status' | 'audit' | 'usage' | 'question';
+    type: 'message' | 'xorg' | 'tool' | 'asset' | 'chat' | 'status' | 'audit' | 'usage' | 'question' | 'gate';
     from?: string;
     to?: string;
     subject?: string;
@@ -166,6 +210,17 @@ export interface BusEvent {
     interactionId?: string;
     agentSessionId?: string;
 }
+export interface DecisionGate {
+    id: string;
+    name: string;
+    description: string;
+    roleId: string;
+    status: 'pending' | 'approved' | 'rejected';
+    createdAt: number;
+    resolvedBy?: string;
+    resolvedAt?: number;
+    resolution?: string;
+}
 export declare const ORG_DIR = ".monomind/orgs";
 /**
  * Recommended org_send handoff format for inter-role communication:

package/dist/src/orgrt/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/orgrt/types.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,4FAA4F;AAC5F,eAAO,MAAM,cAAc;;;;;;;;;;;;;kBAOhB,CAAC;AAEZ,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;iBAYH,CAAC;AAE3B,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiBP,CAAC;AAEjB,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;mBAmBmG,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAElH,CAAC;AAEjB,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAClD,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AACjD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,mGAAmG;AACnG,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC;IACjG,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,yFAAyF;IACzF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,OAAO,mBAAmB,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;GAuBG"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/orgrt/types.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,4FAA4F;AAC5F,eAAO,MAAM,cAAc;;;;;;;;;;;;;kBAOhB,CAAC;AAEZ,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;iBAcH,CAAC;AAE3B,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0BP,CAAC;AAEjB,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAkCmG,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAOlH,CAAC;AAEjB,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAClD,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AACjD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,mGAAmG;AACnG,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;IAC1G,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,yFAAyF;IACzF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,OAAO,mBAAmB,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;GAuBG"}

package/dist/src/orgrt/types.js

@@ -15,7 +15,9 @@ export const RolePolicySchema = z.object({
     /** glob patterns relative to org cwd */
     fileWrite: z.array(z.string()).default(['**']),
     fileRead: z.array(z.string()).default(['**']),
-    /** allowed domains for WebFetch/WebSearch; empty array = no web */
+    /** allowed domains for WebFetch/WebSearch; empty array = no web.
+     *  Entries: exact host, subdomain suffix ('example.com' also matches
+     *  'api.example.com'), '*.example.com' wildcard, or '*' for any host. */
     webAllow: z.array(z.string()).optional(),
     maxTokens: z.number().int().positive().optional(),
     /** Git access level: 'none' blocks all git, 'read' allows status/log/diff,
@@ -35,10 +37,19 @@ export const RoleSchema = z.object({
     }).partial().optional(),
     provider: ProviderSchema.optional(),
     policy: RolePolicySchema.optional(),
+    /** Per-role runtime override: when set, this role's sessions run on the given
+     *  agent runtime regardless of the org-level `runtime` field or the
+     *  MONOMIND_RUNTIME env var ('claude' explicitly forces the Claude default).
+     *  Enables mixed-runtime orgs — e.g. a Claude coordinator with opencode workers. */
+    runtime: z.enum(['claude', 'kimicode', 'opencode']).optional(),
     /** Per-role override of run_config.max_turns_per_message — roles that legitimately
      *  need many more turns per message (e.g. a developer doing sequential build/fix/verify
      *  cycles) than others (e.g. docs, pm) shouldn't be forced onto one global budget. */
     max_turns_per_message: z.number().int().positive().optional(),
+    /** Per-role override of the even run_config.budget_tokens split — a role on a
+     *  token-hungry model (e.g. GLM via opencode) can get a larger budget without
+     *  inflating the org-wide budget for every other role. Unset = even split. */
+    budget_tokens: z.number().int().positive().optional(),
 }).passthrough();
 export const OrgDefSchema = z.object({
     name: z.string().min(1),
@@ -57,10 +68,30 @@ export const OrgDefSchema = z.object({
          *  'isolated' — a scratch dir under .monomind/orgs/<name>/workspace, which the
          *  policy engine's workdir check then confines every path to.
          *  An absolute path is used verbatim. */
-        workspace: z.union([z.literal('repo'), z.literal('isolated'), z.string()]).optional(),
+        workspace: z.union([z.literal('repo'), z.literal('isolated'), z.literal('worktree'), z.literal('worktree-per-role'), z.string()]).optional(),
+        /** Circuit breaker: after N consecutive non-success session results from
+         *  a role, trip the circuit and close the role's mailbox instead of looping. */
+        circuit_breaker: z.object({
+            failure_threshold: z.number().int().positive().default(5),
+            cooldown_ms: z.number().int().nonnegative().default(0),
+        }).partial().optional(),
+        /** Stale-base drift detection: warn (or refuse) when the working tree is
+         *  too many commits behind its tracking branch. 0 disables. */
+        stale_base_threshold: z.number().int().nonnegative().default(0),
+        /** Precondition checks: shell commands that must exit 0 before a scheduled
+         *  run starts. If any fail, the run is skipped and the failure logged. */
+        prechecks: z.array(z.object({
+            name: z.string(),
+            command: z.string(),
+        })).optional(),
     }).partial().passthrough().default({})
-        .transform(rc => ({ max_concurrent_agents: 4, budget_tokens: 1_000_000, max_turns_per_message: 30, workspace: 'repo', ...rc })),
+        .transform(rc => ({ max_concurrent_agents: 4, budget_tokens: 1_000_000, max_turns_per_message: 30, workspace: 'repo', stale_base_threshold: 0, ...rc })),
     roles: z.array(RoleSchema).min(1),
+    /** Which agent runtime hosts this org's role sessions. When absent, the
+     *  MONOMIND_RUNTIME env var is honored, falling back to the default Claude
+     *  runner. Per-org values override the env var, and a role's own `runtime`
+     *  field (see RoleSchema) overrides this per role. */
+    runtime: z.enum(['claude', 'kimicode', 'opencode']).optional(),
 }).passthrough();
 export const ORG_DIR = '.monomind/orgs';
 /**

package/dist/src/orgrt/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/orgrt/types.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,4FAA4F;AAC5F,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IACtH,8DAA8D;IAC9D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,iEAAiE;IACjE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,wCAAwC;IACxC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7C,mEAAmE;IACnE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD;2EACuE;IACvE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CAChE,CAAC,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC;AAE3B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/C,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvB,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACnC;;0FAEsF;IACtF,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9D,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACnE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,mFAAmF;QACnF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QACjD;;;;iDAIyC;QACzC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;KACtF,CAAC,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;SACnC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,qBAAqB,EAAE,EAAE,EAAE,SAAS,EAAE,MAAgB,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC3I,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC,WAAW,EAAE,CAAC;AA+BjB,MAAM,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;GAuBG"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/orgrt/types.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,4FAA4F;AAC5F,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IACtH,8DAA8D;IAC9D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,iEAAiE;IACjE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,wCAAwC;IACxC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7C;;6EAEyE;IACzE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD;2EACuE;IACvE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CAChE,CAAC,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC;AAE3B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/C,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvB,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACnC;;;wFAGoF;IACpF,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9D;;0FAEsF;IACtF,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7D;;kFAE8E;IAC9E,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACnE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,mFAAmF;QACnF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QACjD;;;;iDAIyC;QACzC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC5I;wFACgF;QAChF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;SACvD,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACvB;uEAC+D;QAC/D,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D;kFAC0E;QAC1E,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;SACpB,CAAC,CAAC,CAAC,QAAQ,EAAE;KACf,CAAC,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;SACnC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,qBAAqB,EAAE,EAAE,EAAE,SAAS,EAAE,MAAgB,EAAE,oBAAoB,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACpK,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC;;;0DAGsD;IACtD,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC,WAAW,EAAE,CAAC;AA2CjB,MAAM,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;GAuBG"}

package/dist/src/routing/model-download.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Opt-in download of the semantic-routing embedding model.
+ *
+ * The semantic router (`routing/embedder.ts`) needs the weights of
+ * Snowflake/snowflake-arctic-embed-xs (~88 MB) cached on disk by
+ * `@huggingface/transformers`. On a fresh install they are absent, so the
+ * router silently falls back to keyword + hash routing. Nothing may download
+ * them implicitly — this module exists so `monomind init` can ASK first, and
+ * so users can fetch the model later via `monomind download-embeddings` (or
+ * `scripts/download-embedding-model.mjs` on a source checkout).
+ *
+ * Kept dependency-light and free of CLI I/O so it is unit-testable: the
+ * prompt/TTY decisions live in `embeddingDownloadDecision()`, the actual
+ * download in `downloadEmbeddingModel()`.
+ */
+/** HuggingFace model id — kept in sync with `routing/embedder.ts`. */
+export declare const EMBEDDING_MODEL_ID = "Snowflake/snowflake-arctic-embed-xs";
+/** Approximate download size, used only for prompt/UX copy. */
+export declare const EMBEDDING_MODEL_SIZE_LABEL = "~88 MB";
+/**
+ * Locate the cache directory `@huggingface/transformers` writes model weights
+ * into (`<package root>/.cache`), or null when the optionalDependency is not
+ * installed. Resolution mirrors the guard in
+ * `__tests__/route-layer-source-worker.test.ts`.
+ */
+export declare function findTransformersCacheDir(): string | null;
+/** True when the embedding model weights are already cached on disk. */
+export declare function isEmbeddingModelCached(): boolean;
+export type EmbeddingDownloadReason = 'already-cached' | 'non-interactive' | 'prompt';
+/**
+ * Pure decision for the init-time download prompt, kept separate from I/O so
+ * tests can drive it with stubbed TTY/CI values.
+ */
+export declare function embeddingDownloadDecision(input: {
+    cached: boolean;
+    stdinTTY: boolean;
+    stdoutTTY: boolean;
+    ci: boolean;
+}): EmbeddingDownloadReason;
+/**
+ * Download the embedding model by loading the feature-extraction pipeline
+ * once, which populates the transformers.js cache. Progress is reported via
+ * the optional `onProgress` callback (human-readable lines).
+ *
+ * Throws when `@huggingface/transformers` is not installed or the download
+ * fails — callers decide how to present that.
+ */
+export declare function downloadEmbeddingModel(onProgress?: (line: string) => void): Promise<void>;
+//# sourceMappingURL=model-download.d.ts.map

package/dist/src/routing/model-download.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-download.d.ts","sourceRoot":"","sources":["../../../src/routing/model-download.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,sEAAsE;AACtE,eAAO,MAAM,kBAAkB,wCAAwC,CAAC;AAExE,+DAA+D;AAC/D,eAAO,MAAM,0BAA0B,WAAW,CAAC;AAEnD;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,GAAG,IAAI,CAkBxD;AAED,wEAAwE;AACxE,wBAAgB,sBAAsB,IAAI,OAAO,CAMhD;AAED,MAAM,MAAM,uBAAuB,GAC/B,gBAAgB,GAChB,iBAAiB,GACjB,QAAQ,CAAC;AAEb;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;CACb,GAAG,uBAAuB,CAI1B;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAClC,OAAO,CAAC,IAAI,CAAC,CA2Bf"}

package/dist/src/routing/model-download.js

@@ -0,0 +1,106 @@
+/**
+ * Opt-in download of the semantic-routing embedding model.
+ *
+ * The semantic router (`routing/embedder.ts`) needs the weights of
+ * Snowflake/snowflake-arctic-embed-xs (~88 MB) cached on disk by
+ * `@huggingface/transformers`. On a fresh install they are absent, so the
+ * router silently falls back to keyword + hash routing. Nothing may download
+ * them implicitly — this module exists so `monomind init` can ASK first, and
+ * so users can fetch the model later via `monomind download-embeddings` (or
+ * `scripts/download-embedding-model.mjs` on a source checkout).
+ *
+ * Kept dependency-light and free of CLI I/O so it is unit-testable: the
+ * prompt/TTY decisions live in `embeddingDownloadDecision()`, the actual
+ * download in `downloadEmbeddingModel()`.
+ */
+import { existsSync } from 'fs';
+import { createRequire } from 'module';
+import { dirname, join } from 'path';
+/** HuggingFace model id — kept in sync with `routing/embedder.ts`. */
+export const EMBEDDING_MODEL_ID = 'Snowflake/snowflake-arctic-embed-xs';
+/** Approximate download size, used only for prompt/UX copy. */
+export const EMBEDDING_MODEL_SIZE_LABEL = '~88 MB';
+/**
+ * Locate the cache directory `@huggingface/transformers` writes model weights
+ * into (`<package root>/.cache`), or null when the optionalDependency is not
+ * installed. Resolution mirrors the guard in
+ * `__tests__/route-layer-source-worker.test.ts`.
+ */
+export function findTransformersCacheDir() {
+    let entry;
+    try {
+        const require = createRequire(import.meta.url);
+        // Resolve the main entry, not '<pkg>/package.json' — the package does not
+        // export its package.json, so that throws ERR_PACKAGE_PATH_NOT_EXPORTED.
+        entry = require.resolve('@huggingface/transformers');
+    }
+    catch {
+        return null;
+    }
+    let dir = dirname(entry);
+    for (let i = 0; i < 5 && !existsSync(join(dir, 'package.json')); i++) {
+        const parent = dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return join(dir, '.cache');
+}
+/** True when the embedding model weights are already cached on disk. */
+export function isEmbeddingModelCached() {
+    const cache = findTransformersCacheDir();
+    if (!cache)
+        return false;
+    // 'Xenova' covers checkouts where a Xenova-mirrored model populated the
+    // same cache (same check the semantic-routing tests use).
+    return existsSync(join(cache, 'Snowflake')) || existsSync(join(cache, 'Xenova'));
+}
+/**
+ * Pure decision for the init-time download prompt, kept separate from I/O so
+ * tests can drive it with stubbed TTY/CI values.
+ */
+export function embeddingDownloadDecision(input) {
+    if (input.cached)
+        return 'already-cached';
+    if (!input.stdinTTY || !input.stdoutTTY || input.ci)
+        return 'non-interactive';
+    return 'prompt';
+}
+/**
+ * Download the embedding model by loading the feature-extraction pipeline
+ * once, which populates the transformers.js cache. Progress is reported via
+ * the optional `onProgress` callback (human-readable lines).
+ *
+ * Throws when `@huggingface/transformers` is not installed or the download
+ * fails — callers decide how to present that.
+ */
+export async function downloadEmbeddingModel(onProgress) {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    let hf;
+    try {
+        hf = await import('@huggingface/transformers');
+    }
+    catch {
+        throw new Error('@huggingface/transformers is not installed (it is an optionalDependency). ' +
+            'Reinstall with optional dependencies enabled, e.g. `npm install --include=optional`.');
+    }
+    const seen = new Set();
+    await hf.pipeline('feature-extraction', EMBEDDING_MODEL_ID, {
+        dtype: 'fp32',
+        progress_callback: (p) => {
+            if (!onProgress || !p)
+                return;
+            if (p.status === 'downloading' && p.file && !seen.has(p.file)) {
+                seen.add(p.file);
+                onProgress(`Downloading ${p.file}...`);
+            }
+            else if (p.status === 'progress' && p.file && typeof p.progress === 'number') {
+                onProgress(`Downloading ${p.file}... ${Math.floor(p.progress)}%`);
+            }
+            else if (p.status === 'done' && p.file) {
+                onProgress(`Downloaded ${p.file}`);
+            }
+        },
+    });
+}
+//# sourceMappingURL=model-download.js.map

package/dist/src/routing/model-download.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-download.js","sourceRoot":"","sources":["../../../src/routing/model-download.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAErC,sEAAsE;AACtE,MAAM,CAAC,MAAM,kBAAkB,GAAG,qCAAqC,CAAC;AAExE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,0BAA0B,GAAG,QAAQ,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB;IACtC,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,0EAA0E;QAC1E,yEAAyE;QACzE,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,sBAAsB;IACpC,MAAM,KAAK,GAAG,wBAAwB,EAAE,CAAC;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,wEAAwE;IACxE,0DAA0D;IAC1D,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AACnF,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAKzC;IACC,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,gBAAgB,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,EAAE;QAAE,OAAO,iBAAiB,CAAC;IAC9E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAmC;IAEnC,8DAA8D;IAC9D,IAAI,EAAO,CAAC;IACZ,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,MAAM,CAAC,2BAAqC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,4EAA4E;YAC5E,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,EAAE,kBAAkB,EAAE;QAC1D,KAAK,EAAE,MAAM;QACb,iBAAiB,EAAE,CAAC,CAAwD,EAAE,EAAE;YAC9E,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;gBAAE,OAAO;YAC9B,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACjB,UAAU,CAAC,eAAe,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;YACzC,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC/E,UAAU,CAAC,eAAe,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACpE,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACzC,UAAU,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/src/services/crash-reporter.d.ts

@@ -28,6 +28,11 @@ export declare function setEnabled(enabled: boolean): void;
 /**
  * Strip obvious secrets/PII before anything gets sent to a public GitHub repo.
  * Not a substitute for careful callers — this is a last-resort net.
+ *
+ * C6 hardening adds: absolute-path collapse (any multi-segment path to
+ * basename), hostname redaction (contextual after ://@, standalone with
+ * TLD heuristic — excludes version numbers, known code extensions, and
+ * decimals), IPv4/IPv6, emails, SSNs, and phone numbers.
  */
 export declare function redact(text: string): string;
 export declare function computeSignature(repo: string, title: string): string;

package/dist/src/services/crash-reporter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crash-reporter.d.ts","sourceRoot":"","sources":["../../../src/services/crash-reporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA2BH,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,6FAA6F;IAC7F,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,eAAe,GAAG,UAAU,GAAG,cAAc,GAAG,OAAO,CAAC;IAC1F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAwCD,wBAAgB,SAAS,IAAI,OAAO,CASnC;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAEjD;AAED;;;GAGG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAmC3C;AAkBD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGpE;AA2KD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA4FrF"}
+{"version":3,"file":"crash-reporter.d.ts","sourceRoot":"","sources":["../../../src/services/crash-reporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA2BH,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,6FAA6F;IAC7F,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,eAAe,GAAG,UAAU,GAAG,cAAc,GAAG,OAAO,CAAC;IAC1F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAwCD,wBAAgB,SAAS,IAAI,OAAO,CASnC;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAEjD;AAED;;;;;;;;GAQG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA2F3C;AAkBD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGpE;AA2KD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA4FrF"}

package/dist/src/services/crash-reporter.js

@@ -70,6 +70,11 @@ export function setEnabled(enabled) {
 /**
  * Strip obvious secrets/PII before anything gets sent to a public GitHub repo.
  * Not a substitute for careful callers — this is a last-resort net.
+ *
+ * C6 hardening adds: absolute-path collapse (any multi-segment path to
+ * basename), hostname redaction (contextual after ://@, standalone with
+ * TLD heuristic — excludes version numbers, known code extensions, and
+ * decimals), IPv4/IPv6, emails, SSNs, and phone numbers.
  */
 export function redact(text) {
     let out = text;
@@ -86,6 +91,17 @@ export function redact(text) {
     out = out.replace(/\/home\/[^/\s]+/g, '/home/<user>');
     out = out.replace(/\/Users\/[^/\s]+/g, '/Users/<user>');
     out = out.replace(/C:\\Users\\[^\\\s]+/g, 'C:\\Users\\<user>');
+    // C6: strip IPv4 addresses — leaked via ECONNREFUSED, fetch errors,
+    // telemetry endpoints, internal service URLs. IPv6 is handled later with
+    // bracket, full, and compressed :: forms.
+    out = out.replace(/\b(?:\d{1,3}\.){3}\d{1,3}\b/g, '<ip>');
+    // C6: strip emails — commonly embedded in ValidationError messages and
+    // customer data dumps that reach the crash handler via err.message.
+    out = out.replace(/\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g, '<email>');
+    // C6: PII in err.message — SSN and phone numbers commonly appear in
+    // validation errors. SSN is high-sensitivity; phone is medium.
+    out = out.replace(/\b\d{3}-\d{2}-\d{4}\b/g, '<ssn>');
+    out = out.replace(/(?:\+?\d{1,3}[-.\s]?)?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}\b/g, '<phone>');
     const SECRET_PATTERNS = [
         /(?:api[_-]?key|apikey)\s*[:=]\s*['"]?[^\s'"]{8,}['"]?/gi,
         /(?:secret|password|passwd|pwd)\s*[:=]\s*['"]?[^\s'"]{8,}['"]?/gi,
@@ -102,6 +118,39 @@ export function redact(text) {
     ];
     for (const pattern of SECRET_PATTERNS)
         out = out.replace(pattern, '[redacted]');
+    // Collapse any remaining multi-segment absolute path to its basename,
+    // preserving optional :line:col suffixes for debuggability.  Fires on
+    // /a/b, ~/a/b, C:\a\b — single-segment paths (/tmp) are not touched.
+    // Runs AFTER home-dir and username replacement.
+    out = out.replace(/(?:~\/|(?<![:/>\w])\/(?!\/)|[A-Z]:\\)(?:[^\s'"]*[/\\])([\w.-]+(?::\d+(?::\d+)?)?)/g, '<path>/$1');
+    // Hostname / domain redaction.
+    // 1. Contextual: hostnames that follow :// or @ (requires at least one dot).
+    out = out.replace(/(\/\/|@)([a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?)+)/g, '$1<host>');
+    // 2. Standalone: 3+ dot-separated segments with a TLD-like tail (2-6
+    //    alpha chars).  Excludes version numbers (v2.9.0, 1.2.3), filenames
+    //    whose last segment is a known code/config extension, and bare
+    //    decimal numbers.
+    const KNOWN_CODE_EXTS = /\.(?:js|ts|jsx|tsx|json|md|yaml|yml|html|css|mjs|cjs|toml|xml|txt|log|sql|sh|py|go|rs|rb|java|c|cpp|h|hpp|swift|kt|lock|map)$/i;
+    out = out.replace(/\b([a-zA-Z][a-zA-Z0-9-]*(?:\.[a-zA-Z0-9][a-zA-Z0-9-]*)+\.[a-zA-Z]{2,6})\b/g, (match) => {
+        if (/^v?\d+(\.\d+)+$/.test(match))
+            return match; // version
+        if (KNOWN_CODE_EXTS.test(match))
+            return match; // filename
+        if (/^\d+(\.\d+)+$/.test(match))
+            return match; // decimal
+        return '<host>';
+    });
+    // IPv6 addresses.
+    // Bracketed form (URLs): [::1], [fe80::1], [2001:db8::1]
+    out = out.replace(/\[(?:[0-9a-fA-F]{0,4}:){2,}[0-9a-fA-F]{0,4}\]/g, '[<ipv6>]');
+    // Full unbracketed: 3+ colon-separated hex groups (avoids HH:MM:SS false positives)
+    out = out.replace(/(?<![:\w])(?:[0-9a-fA-F]{1,4}:){3,7}[0-9a-fA-F]{0,4}(?![:\w])/g, '<ipv6>');
+    // Compressed :: with leading hex groups: fe80::1, 2001:db8::1.
+    // Uses \b (not lookbehind) so hex digits before :: don't block the match.
+    // std::vector is safe: 's' is not [0-9a-fA-F].
+    out = out.replace(/\b[0-9a-fA-F]{1,4}(?::[0-9a-fA-F]{1,4})*::(?:[0-9a-fA-F]{1,4}(?::[0-9a-fA-F]{1,4})*)?\b/g, '<ipv6>');
+    // Compressed :: without leading hex: ::1, ::ffff:10.0.0.1
+    out = out.replace(/(?<![:\w])::(?:[0-9a-fA-F]{1,4}(?::[0-9a-fA-F]{1,4})*)?(?![:\w])/g, '<ipv6>');
     return out;
 }
 /**