@namzu/cli 26.3.0 → 28.0.0

package/dist/memory/typed.js

@@ -0,0 +1,336 @@
+/**
+ * Stored memory: the typed, one-file-per-memory store the kernel's memory
+ * tools read and write, as the CLI uses it.
+ *
+ * Four jobs live here. `saveTypedNote` is what `#note` and `/memory add`
+ * write through. `composeStoredMemoryPrompt` turns the store's generated index
+ * into the prompt section the model sees every turn. `migrateMemoryOnce`
+ * moves the JSON store into typed files, once, and offers the project's
+ * curated bullets; `importCuratedNotes` copies those when the operator asks,
+ * never editing the curated file.
+ *
+ * The CURATED files (`USER.md`, `MEMORY.md` in the application home and the
+ * project) stay what they were: operator-authored text read into every turn.
+ * The two are never given the same heading in the prompt.
+ */
+import { createHash } from 'node:crypto';
+import { access, readFile, rename, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { DiskMemoryStore, MemoryContentRejectedError, MemoryNameConflictError, slugifyMemoryName, } from '@namzu/sdk';
+import { readMemoryFile } from './io.js';
+import { projectMemoryLocation } from './store.js';
+function firstLine(text, limit) {
+    const line = (text.split(/\r?\n/).find((part) => part.trim()) ?? '').replace(/\s+/g, ' ').trim();
+    if (line.length <= limit)
+        return line;
+    let head = line.slice(0, limit - 1);
+    if (/[\uD800-\uDBFF]$/.test(head))
+        head = head.slice(0, -1);
+    return `${head.trimEnd()}…`;
+}
+function digest(text) {
+    return createHash('sha256').update(text).digest('hex');
+}
+/**
+ * Save an operator note as a typed memory, default type `project`. A note
+ * whose exact text an active memory already holds is not saved twice; the
+ * result names the one that holds it.
+ */
+export async function saveTypedNote(store, text, type = 'project') {
+    const note = text.trim();
+    if (!note)
+        return { saved: false, type };
+    const candidates = await store.list({ query: note, status: 'active', limit: 20 });
+    for (const entry of candidates.entries) {
+        const record = await store.getRecord(entry.id);
+        if (record?.entry.status === 'active' && record.content.content.trim() === note) {
+            return {
+                saved: false,
+                duplicate: true,
+                type: record.entry.type ?? type,
+                ...(record.entry.name
+                    ? { name: record.entry.name, path: join(store.path, `${record.entry.name}.md`) }
+                    : {}),
+            };
+        }
+    }
+    const { entry } = await store.create({
+        title: firstLine(note, 72),
+        summary: firstLine(note, 300),
+        description: firstLine(note, 150),
+        content: note,
+        type,
+        metadata: { source: 'operator-note', noteDigest: digest(note) },
+    });
+    return {
+        saved: true,
+        type,
+        ...(entry.name ? { name: entry.name, path: join(store.path, `${entry.name}.md`) } : {}),
+    };
+}
+/**
+ * The prompt section for the stored-memory index, or null when the store
+ * holds no active memory. Named so it can never be mistaken for the curated
+ * sections beside it.
+ */
+export function composeStoredMemoryPrompt(index) {
+    if (!index.text)
+        return null;
+    return [
+        '## Stored memories (index)',
+        '',
+        'Memories saved in earlier sessions, one line each: `- [name](name.md) — description`. Read one with read_memory (by name) when it bears on the task. Correct or archive a wrong one with update_memory rather than saving a second copy. Memories are point-in-time: verify a file, function or flag a memory names against the current code before relying on it. What earlier turns recorded on their own is not listed here; search_memory finds it.',
+        '',
+        index.text,
+    ].join('\n');
+}
+/** Records per curated file when it was offered and imported, so a launch offers it once. */
+const MARKER = 'migration.json';
+async function readMarker(directory) {
+    try {
+        const parsed = JSON.parse(await readFile(join(directory, MARKER), 'utf8'));
+        return parsed !== null && typeof parsed === 'object' ? parsed : {};
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return {};
+        throw error;
+    }
+}
+/** Merge `state` into the marker's record for `path`, re-reading it first. */
+async function markCuratedFile(directory, path, state) {
+    const marker = await readMarker(directory).catch(() => ({}));
+    const files = { ...(marker.curatedFiles ?? {}) };
+    files[path] = { ...(files[path] ?? {}), ...state };
+    await writeFile(join(directory, MARKER), `${JSON.stringify({ ...marker, curatedFiles: files }, null, 2)}\n`, { mode: 0o600 });
+}
+async function exists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Move `path` aside to `path.migrated`, or a numbered name when that is taken. */
+async function retire(path) {
+    let target = `${path}.migrated`;
+    for (let n = 2; await exists(target); n++)
+        target = `${path}.migrated-${n}`;
+    try {
+        await rename(path, target);
+    }
+    catch (error) {
+        // Another process retired it first.
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    return target;
+}
+/**
+ * The text of every top-level bullet (`- text`) in a curated file, each once,
+ * in order. No bullet is judged to be a note or not: the file is never
+ * changed, so copying one the operator wrote costs a memory they can archive,
+ * never a line of their file. A nested bullet belongs to its parent and is not
+ * taken; only a bullet's first line is.
+ */
+export function curatedBullets(text) {
+    const bullets = new Set();
+    for (const line of text.split('\n')) {
+        const match = /^- (\S.*)$/.exec(line.replace(/\r$/, ''));
+        const bullet = match?.[1]?.trim();
+        if (bullet)
+            bullets.add(bullet);
+    }
+    return [...bullets];
+}
+/**
+ * Create the memory for one curated bullet, false when it is already stored.
+ *
+ * Under the name its text slugs to, first: the store refuses a taken name
+ * inside its lock, so two turns copying the same bullet at once write it once,
+ * the second finding the first's record by its source digest. A name held by
+ * a memory with the same text is that bullet already stored; one held by an
+ * unrelated memory falls back to a suffixed name.
+ */
+async function copyBullet(store, bullet, sourceDigest, importedFrom) {
+    const params = {
+        title: firstLine(bullet, 72),
+        summary: firstLine(bullet, 300),
+        description: firstLine(bullet, 150),
+        content: bullet,
+        type: 'project',
+        metadata: { source: 'curated-bullet', sourceDigest, importedFrom },
+    };
+    const name = slugifyMemoryName(bullet);
+    try {
+        await store.create({ ...params, name });
+        return true;
+    }
+    catch (error) {
+        if (!(error instanceof MemoryNameConflictError))
+            throw error;
+    }
+    const holder = await store.getByName(name);
+    if (holder?.content.metadata?.sourceDigest === sourceDigest ||
+        holder?.content.content.trim() === bullet) {
+        return false;
+    }
+    await store.create(params);
+    return true;
+}
+/**
+ * Move what the JSON store held into typed files, once and safely again, and
+ * say once per curated file whether it holds notes that could move.
+ *
+ * 1. A JSON store (`index.json` + `content/`) in `directory` is imported
+ *    record by record with its ids, timestamps and status, then moved aside
+ *    to `index.json.migrated` and `content.migrated`. A record the Markdown
+ *    store refuses to write — over its size limit, or holding a NUL byte —
+ *    is reported and stays in the retired files; stopping on it would leave
+ *    `index.json` in place and the store refusing every operation for good.
+ *    Any other failure leaves the JSON store where it is, to retry next launch.
+ * 2. The project's curated `MEMORY.md` is never changed. When it holds
+ *    top-level bullets — some may be notes `#note` used to append — the
+ *    report offers them once per file, since the checkout's file and a
+ *    subdirectory's own `.namzu/MEMORY.md` are different files, and
+ *    `/memory import-notes` copies them into typed memories when the
+ *    operator asks. They stay curated, read into every turn as before, until
+ *    the operator deletes them from the file.
+ */
+export async function migrateMemoryOnce(options) {
+    const { store, directory, cwd } = options;
+    const problems = [];
+    const skippedRecords = [];
+    let importedRecords = 0;
+    let notesOffer;
+    const indexPath = join(directory, 'index.json');
+    if (await exists(indexPath)) {
+        try {
+            const disk = new DiskMemoryStore({ baseDir: directory, directory });
+            const { entries } = await disk.list();
+            const refused = [];
+            for (const entry of entries) {
+                const record = await disk.getRecord(entry.id);
+                if (!record)
+                    continue;
+                try {
+                    if ((await store.importRecord(record, { type: 'project' })) === 'imported') {
+                        importedRecords++;
+                    }
+                }
+                catch (error) {
+                    if (!(error instanceof MemoryContentRejectedError))
+                        throw error;
+                    refused.push({
+                        id: entry.id,
+                        title: entry.title,
+                        reason: error.message,
+                    });
+                }
+            }
+            await retire(indexPath);
+            const content = join(directory, 'content');
+            const retiredContent = (await exists(content)) ? await retire(content) : content;
+            for (const record of refused) {
+                skippedRecords.push(`"${record.title}" (${record.id}) was not moved: ${record.reason} It is kept in ${join(retiredContent, `${record.id}.json`)}.`);
+            }
+        }
+        catch (error) {
+            problems.push(`The JSON memory store in ${directory} was not migrated: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    try {
+        const location = projectMemoryLocation(cwd);
+        const marker = await readMarker(directory);
+        const state = marker.curatedFiles?.[location.path];
+        if (!state?.offeredAt && !state?.importedAt) {
+            const text = readMemoryFile(location);
+            const bullets = text === null ? [] : curatedBullets(text);
+            if (bullets.length > 0) {
+                notesOffer = { path: location.path, count: bullets.length };
+                await markCuratedFile(directory, location.path, {
+                    offeredAt: new Date().toISOString(),
+                });
+            }
+        }
+    }
+    catch (error) {
+        problems.push(`Could not check the project's curated memory for notes: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    return {
+        importedRecords,
+        skippedRecords,
+        ...(notesOffer ? { notesOffer } : {}),
+        problems,
+    };
+}
+/**
+ * Copy the project's curated bullets into typed memory files, because the
+ * operator asked (`/memory import-notes`). The curated file is read, never
+ * written: deleting a bullet from it is the operator's call. Idempotent: a
+ * bullet already stored — by an earlier or concurrent import, as a `#note`
+ * with the same text, or under its name with the same text — is not copied
+ * again.
+ */
+export async function importCuratedNotes(options) {
+    const { store, directory, cwd } = options;
+    const location = projectMemoryLocation(cwd);
+    const text = readMemoryFile(location);
+    const bullets = text === null ? [] : curatedBullets(text);
+    if (bullets.length === 0) {
+        return { path: location.path, found: 0, copied: 0, alreadyStored: 0 };
+    }
+    // Digests of what is stored already, archived memories included: a copy
+    // the operator archived stays archived rather than coming back.
+    const stored = new Set();
+    for (const entry of (await store.list({})).entries) {
+        const metadata = (await store.get(entry.id))?.metadata;
+        stored.add(metadata?.sourceDigest);
+        stored.add(metadata?.noteDigest);
+    }
+    let copied = 0;
+    for (const bullet of bullets) {
+        const sourceDigest = digest(bullet);
+        if (stored.has(sourceDigest))
+            continue;
+        if (await copyBullet(store, bullet, sourceDigest, location.path))
+            copied++;
+        stored.add(sourceDigest);
+    }
+    await markCuratedFile(directory, location.path, { importedAt: new Date().toISOString() });
+    return {
+        path: location.path,
+        found: bullets.length,
+        copied,
+        alreadyStored: bullets.length - copied,
+    };
+}
+/** Operator notices for a migration; empty when nothing moved, nothing is offered and nothing failed. */
+export function describeMemoryMigration(report, directory) {
+    const notices = [];
+    if (report.importedRecords > 0) {
+        notices.push(`Stored memory: moved ${report.importedRecords} record${report.importedRecords === 1 ? '' : 's'} from the JSON store into Markdown files in ${directory}.`);
+    }
+    for (const skipped of report.skippedRecords)
+        notices.push(`Stored memory: ${skipped}`);
+    if (report.notesOffer) {
+        const { path, count } = report.notesOffer;
+        notices.push(`Stored memory: ${path} has ${count} top-level bullet${count === 1 ? '' : 's'}, some perhaps notes #note saved before notes became typed memory files. They stay curated and still reach every turn. Run /memory import-notes to copy them into ${directory} as typed memories; the curated file is never changed. New #note and /memory add notes are saved there already.`);
+    }
+    notices.push(...report.problems);
+    return notices;
+}
+/** The operator's report for `/memory import-notes`. */
+export function describeCuratedNotesImport(result, directory) {
+    if (result.found === 0) {
+        return `No top-level bullets to copy in ${result.path}; it is unchanged.`;
+    }
+    const plural = (n) => (n === 1 ? '' : 's');
+    const already = result.alreadyStored > 0
+        ? ` ${result.alreadyStored} ${result.alreadyStored === 1 ? 'was' : 'were'} already stored and not copied again.`
+        : '';
+    return `Copied ${result.copied} of ${result.found} bullet${plural(result.found)} from ${result.path} into typed memory files in ${directory}.${already} ${result.path} is unchanged: its bullets are still curated text in every turn. Delete the ones you no longer want there yourself.`;
+}
+//# sourceMappingURL=typed.js.map

package/dist/memory/typed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typed.js","sourceRoot":"","sources":["../../src/memory/typed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EACN,eAAe,EAEf,0BAA0B,EAC1B,uBAAuB,EAGvB,iBAAiB,GACjB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAalD,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa;IAC7C,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IAChG,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO,IAAI,CAAA;IACrC,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;IACnC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC3D,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAA;AAC5B,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,KAA0B,EAC1B,IAAY,EACZ,OAAmB,SAAS;IAE5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IACxB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACxC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;IACjF,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC9C,IAAI,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACjF,OAAO;gBACN,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI;gBAC/B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;oBACpB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE;oBAChF,CAAC,CAAC,EAAE,CAAC;aACN,CAAA;QACF,CAAC;IACF,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;QACpC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1B,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC;QAC7B,WAAW,EAAE,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC;QACjC,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,QAAQ,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;KAC/D,CAAC,CAAA;IACF,OAAO;QACN,KAAK,EAAE,IAAI;QACX,IAAI;QACJ,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvF,CAAA;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAA0B;IACnE,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAC5B,OAAO;QACN,4BAA4B;QAC5B,EAAE;QACF,ybAAyb;QACzb,EAAE;QACF,KAAK,CAAC,IAAI;KACV,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACb,CAAC;AA4BD,6FAA6F;AAC7F,MAAM,MAAM,GAAG,gBAAgB,CAAA;AAW/B,KAAK,UAAU,UAAU,CAAC,SAAiB;IAC1C,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAY,CAAA;QACrF,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAA0B,CAAC,CAAC,CAAC,EAAE,CAAA;IACxF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAA;QACjE,MAAM,KAAK,CAAA;IACZ,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,eAAe,CAC7B,SAAiB,EACjB,IAAY,EACZ,KAAuB;IAEvB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAoB,CAAC,CAAA;IAC/E,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAA;IAChD,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,CAAA;IAClD,MAAM,SAAS,CACd,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EACvB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAClE,EAAE,IAAI,EAAE,KAAK,EAAE,CACf,CAAA;AACF,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IACjC,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;QAClB,OAAO,IAAI,CAAA;IACZ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;AACF,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,MAAM,CAAC,IAAY;IACjC,IAAI,MAAM,GAAG,GAAG,IAAI,WAAW,CAAA;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;QAAE,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,EAAE,CAAA;IAC3E,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,oCAAoC;QACpC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;IACpE,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;QACxD,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;QACjC,IAAI,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAChC,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAA;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,UAAU,CACxB,KAA0B,EAC1B,MAAc,EACd,YAAoB,EACpB,YAAoB;IAEpB,MAAM,MAAM,GAAG;QACd,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5B,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC;QAC/B,WAAW,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC;QACnC,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,SAAkB;QACxB,QAAQ,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE;KAClE,CAAA;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,CAAC;QACJ,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACvC,OAAO,IAAI,CAAA;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC;YAAE,MAAM,KAAK,CAAA;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IAC1C,IACC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,YAAY,KAAK,YAAY;QACvD,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,MAAM,EACxC,CAAC;QACF,OAAO,KAAK,CAAA;IACb,CAAC;IACD,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1B,OAAO,IAAI,CAAA;AACZ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAKvC;IACA,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,OAAO,CAAA;IACzC,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,cAAc,GAAa,EAAE,CAAA;IACnC,IAAI,eAAe,GAAG,CAAC,CAAA;IACvB,IAAI,UAA+C,CAAA;IAEnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IAC/C,IAAI,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;YACnE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;YACrC,MAAM,OAAO,GAAoD,EAAE,CAAA;YACnE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBAC7C,IAAI,CAAC,MAAM;oBAAE,SAAQ;gBACrB,IAAI,CAAC;oBACJ,IAAI,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;wBAC5E,eAAe,EAAE,CAAA;oBAClB,CAAC;gBACF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IAAI,CAAC,CAAC,KAAK,YAAY,0BAA0B,CAAC;wBAAE,MAAM,KAAK,CAAA;oBAC/D,OAAO,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,KAAK,CAAC,EAAE;wBACZ,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,MAAM,EAAE,KAAK,CAAC,OAAO;qBACrB,CAAC,CAAA;gBACH,CAAC;YACF,CAAC;YACD,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;YACvB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;YAC1C,MAAM,cAAc,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;YAChF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC9B,cAAc,CAAC,IAAI,CAClB,IAAI,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,EAAE,oBAAoB,MAAM,CAAC,MAAM,kBAAkB,IAAI,CAAC,cAAc,EAAE,GAAG,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,CAC9H,CAAA;YACF,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CACZ,4BAA4B,SAAS,sBAAsB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnH,CAAA;QACF,CAAC;IACF,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAA;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAClD,IAAI,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;YACrC,MAAM,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;YACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,UAAU,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;gBAC3D,MAAM,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;oBAC/C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACnC,CAAC,CAAA;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,QAAQ,CAAC,IAAI,CACZ,2DAA2D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnH,CAAA;IACF,CAAC;IAED,OAAO;QACN,eAAe;QACf,cAAc;QACd,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,QAAQ;KACR,CAAA;AACF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAIxC;IACA,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,OAAO,CAAA;IACzC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAA;IAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IACrC,MAAM,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAA;IACtE,CAAC;IACD,wEAAwE;IACxE,gEAAgE;IAChE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAW,CAAA;IACjC,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAA;QACtD,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;QAClC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;IACjC,CAAC;IACD,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;QACnC,IAAI,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,SAAQ;QACtC,IAAI,MAAM,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,EAAE,CAAA;QAC1E,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACzB,CAAC;IACD,MAAM,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IACzF,OAAO;QACN,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,MAAM;QACN,aAAa,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM;KACtC,CAAA;AACF,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,uBAAuB,CACtC,MAA6B,EAC7B,SAAiB;IAEjB,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CACX,wBAAwB,MAAM,CAAC,eAAe,UAAU,MAAM,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,+CAA+C,SAAS,GAAG,CAC1J,CAAA;IACF,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,cAAc;QAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAA;IACtF,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,UAAU,CAAA;QACzC,OAAO,CAAC,IAAI,CACX,kBAAkB,IAAI,QAAQ,KAAK,oBAAoB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,qKAAqK,SAAS,iHAAiH,CAC5W,CAAA;IACF,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IAChC,OAAO,OAAO,CAAA;AACf,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,0BAA0B,CAAC,MAA0B,EAAE,SAAiB;IACvF,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,mCAAmC,MAAM,CAAC,IAAI,oBAAoB,CAAA;IAC1E,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAClD,MAAM,OAAO,GACZ,MAAM,CAAC,aAAa,GAAG,CAAC;QACvB,CAAC,CAAC,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,uCAAuC;QAChH,CAAC,CAAC,EAAE,CAAA;IACN,OAAO,UAAU,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,MAAM,CAAC,IAAI,+BAA+B,SAAS,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,qHAAqH,CAAA;AAC3R,CAAC"}

package/dist/permissions/checks.d.ts

@@ -34,7 +34,7 @@
  *
  * Re-implementing the matching here would check this file against itself. The
  * check compiles the operator's table to rules and hands them to the same
- * `AuthorizationGate` a run uses, so what it verifies is the decision that will
+ * `AuthorizationGate` a turn uses, so what it verifies is the decision that will
  * actually be taken.
  *
  * The floor is deliberately OFF while checking. `denyDangerousPatterns` would

package/dist/permissions/checks.js

@@ -34,7 +34,7 @@
  *
  * Re-implementing the matching here would check this file against itself. The
  * check compiles the operator's table to rules and hands them to the same
- * `AuthorizationGate` a run uses, so what it verifies is the decision that will
+ * `AuthorizationGate` a turn uses, so what it verifies is the decision that will
  * actually be taken.
  *
  * The floor is deliberately OFF while checking. `denyDangerousPatterns` would

package/dist/permissions/headless-trust.d.ts

@@ -4,11 +4,11 @@
  * `integrations/trust/store.ts` states the contract in its own header: "before
  * namzu reads, runs commands in, or edits files in a directory, the user must
  * trust it." That was true of the TUI and false of everything else —
- * `isTrusted` had exactly one caller, `tui/App.tsx`. `run` and `run-stream`
+ * `isTrusted` had exactly one caller, `tui/App.tsx`. `exec` and `exec --json`
  * opened a session in whatever directory they were pointed at, with tools
  * auto-approved because there is nobody to ask, so
  *
- *     git clone <a stranger's repository> && cd <it> && namzu run "what is this?"
+ *     git clone <a stranger's repository> && cd <it> && namzu exec "what is this?"
  *
  * ran that repository's code on the machine, unattended, having asked nobody.
  *
@@ -33,7 +33,7 @@
  * Anyone who can write `AGENTS.md` in that repository can write the build
  * script, the test file, the install hook — all of which run with tools
  * auto-approved. Declining to read the attacker's markdown while executing the
- * attacker's code blocks the weaker vector, reports success on a run that is
+ * attacker's code blocks the weaker vector, reports success on a turn that is
  * already compromised, and would make the instructions feature silently dead
  * in CI where nothing has ever been trusted.
  *
@@ -55,7 +55,7 @@ export type TrustDecision = {
 };
 export interface TrustCheck {
     readonly cwd: string;
-    /** `--trust` was passed: the operator accepts this folder for this run. */
+    /** `--trust` was passed: the operator accepts this folder for this turn. */
     readonly trustFlag: boolean;
     /** Injectable for tests. Defaults to the persistent `~/.namzu/trust.json`. */
     readonly trusted?: (dir: string) => boolean;

package/dist/permissions/headless-trust.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"headless-trust.d.ts","sourceRoot":"","sources":["../../src/permissions/headless-trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAKH,MAAM,MAAM,aAAa,GACtB;IACA,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;IACtB,mFAAmF;IACnF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACnB,GACD;IACA,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAA;IACvB,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACvB,CAAA;AAEJ,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;CAC3C;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,aAAa,CAiCpE"}
+{"version":3,"file":"headless-trust.d.ts","sourceRoot":"","sources":["../../src/permissions/headless-trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAKH,MAAM,MAAM,aAAa,GACtB;IACA,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;IACtB,mFAAmF;IACnF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACnB,GACD;IACA,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAA;IACvB,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACvB,CAAA;AAEJ,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;CAC3C;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,aAAa,CAiCpE"}

package/dist/permissions/headless-trust.js

@@ -4,11 +4,11 @@
  * `integrations/trust/store.ts` states the contract in its own header: "before
  * namzu reads, runs commands in, or edits files in a directory, the user must
  * trust it." That was true of the TUI and false of everything else —
- * `isTrusted` had exactly one caller, `tui/App.tsx`. `run` and `run-stream`
+ * `isTrusted` had exactly one caller, `tui/App.tsx`. `exec` and `exec --json`
  * opened a session in whatever directory they were pointed at, with tools
  * auto-approved because there is nobody to ask, so
  *
- *     git clone <a stranger's repository> && cd <it> && namzu run "what is this?"
+ *     git clone <a stranger's repository> && cd <it> && namzu exec "what is this?"
  *
  * ran that repository's code on the machine, unattended, having asked nobody.
  *
@@ -33,7 +33,7 @@
  * Anyone who can write `AGENTS.md` in that repository can write the build
  * script, the test file, the install hook — all of which run with tools
  * auto-approved. Declining to read the attacker's markdown while executing the
- * attacker's code blocks the weaker vector, reports success on a run that is
+ * attacker's code blocks the weaker vector, reports success on a turn that is
  * already compromised, and would make the instructions feature silently dead
  * in CI where nothing has ever been trusted.
  *
@@ -60,7 +60,7 @@ export function decideHeadlessTrust(check) {
             message: `refusing to run because the working directory changed or became unavailable while trust was being checked: ${check.cwd}`,
         };
     }
-    // `--trust` is per-run and is deliberately NOT written to the trust file.
+    // `--trust` is per-turn and is deliberately NOT written to the trust file.
     // One reflexive use must not change the machine's state forever; the TUI
     // stays the only path that records durable trust, because that is the one
     // where a human is actually looking at a prompt.
@@ -75,11 +75,11 @@ export function decideHeadlessTrust(check) {
             `refusing to run in a folder nobody has trusted: ${cwd}`,
             '',
             "namzu reads this folder's files, runs commands in it and executes its",
-            'code, and a headless run approves those tools without asking because',
+            'code, and a headless turn approves those tools without asking because',
             'there is nobody to ask.',
             '',
             'Run `namzu` here once and accept the trust prompt to trust the folder',
-            'permanently, or pass --trust to accept it for this run only.',
+            'permanently, or pass --trust to accept it for this turn only.',
         ].join('\n'),
     };
 }

package/dist/permissions/headless-trust.js.map

@@ -1 +1 @@
-{"version":3,"file":"headless-trust.js","sourceRoot":"","sources":["../../src/permissions/headless-trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAsB7D,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACpD,2EAA2E;IAC3E,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACJ,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO;YACN,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,8GAA8G,KAAK,CAAC,GAAG,EAAE;SAClI,CAAA;IACF,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,iDAAiD;IACjD,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;IAClD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;IACvE,IAAI,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;IACpD,OAAO;QACN,OAAO,EAAE,KAAK;QACd,OAAO,EAAE;YACR,mDAAmD,GAAG,EAAE;YACxD,EAAE;YACF,uEAAuE;YACvE,sEAAsE;YACtE,yBAAyB;YACzB,EAAE;YACF,uEAAuE;YACvE,8DAA8D;SAC9D,CAAC,IAAI,CAAC,IAAI,CAAC;KACZ,CAAA;AACF,CAAC"}
+{"version":3,"file":"headless-trust.js","sourceRoot":"","sources":["../../src/permissions/headless-trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAsB7D,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACpD,2EAA2E;IAC3E,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACJ,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO;YACN,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,8GAA8G,KAAK,CAAC,GAAG,EAAE;SAClI,CAAA;IACF,CAAC;IACD,2EAA2E;IAC3E,yEAAyE;IACzE,0EAA0E;IAC1E,iDAAiD;IACjD,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;IAClD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;IACvE,IAAI,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;IACpD,OAAO;QACN,OAAO,EAAE,KAAK;QACd,OAAO,EAAE;YACR,mDAAmD,GAAG,EAAE;YACxD,EAAE;YACF,uEAAuE;YACvE,uEAAuE;YACvE,yBAAyB;YACzB,EAAE;YACF,uEAAuE;YACvE,+DAA+D;SAC/D,CAAC,IAAI,CAAC,IAAI,CAAC;KACZ,CAAA;AACF,CAAC"}

package/dist/permissions/mode.d.ts

@@ -1,15 +1,15 @@
 import { type ReviewMode } from '@namzu/sdk';
 /**
- * How a run resolves the calls no rule decided.
+ * How a turn resolves the calls no rule decided.
  *
  * The `[permissions]` table says what a tool may do. The kernel's review
  * policy (`createReviewHandler` in `@namzu/sdk`) says what happens to
  * everything it did not cover; the modes and their words live there, and
- * this file resolves which one a run gets from the flag and the terminal.
+ * this file resolves which one a turn gets from the flag and the terminal.
  *
  * The two axes are separate on purpose: a rule is
  * a durable statement an operator reviewed, and a mode is a property of ONE
- * invocation — the difference between "we never force-push" and "this run is
+ * invocation — the difference between "we never force-push" and "this turn is
  * unattended".
  *
  * ## Precedence between a flag and the config file
@@ -36,7 +36,7 @@ export declare function effectivePermissionMode(mode: PermissionMode, approvedAl
 /** The behavior shown by both the permission selector and the session report. */
 export declare function permissionModeDescription(mode: PermissionMode): string;
 /**
- * The mode for a run, from the flag, the bypass alias, and whether anyone is
+ * The mode for a turn, from the flag, the bypass alias, and whether anyone is
  * there to answer.
  *
  * `--yolo` / `--dangerously-skip-permissions` map to `auto`. They were accepted

package/dist/permissions/mode.js

@@ -36,7 +36,7 @@ export function permissionModeDescription(mode) {
     }
 }
 /**
- * The mode for a run, from the flag, the bypass alias, and whether anyone is
+ * The mode for a turn, from the flag, the bypass alias, and whether anyone is
  * there to answer.
  *
  * `--yolo` / `--dangerously-skip-permissions` map to `auto`. They were accepted

package/dist/permissions/rules.d.ts

@@ -8,7 +8,7 @@
  * to "ask a human". This turns a `[permissions]` table into that array.
  *
  * The whole surface is pure: config in, rules out. The gate stays the only
- * thing that decides anything, which is what keeps this testable without a run.
+ * thing that decides anything, which is what keeps this testable without a turn.
  */
 import { type AuthorizationRule } from '@namzu/sdk';
 import { type PermissionChecksConfig } from './checks.js';

package/dist/permissions/rules.js

@@ -8,7 +8,7 @@
  * to "ask a human". This turns a `[permissions]` table into that array.
  *
  * The whole surface is pure: config in, rules out. The gate stays the only
- * thing that decides anything, which is what keeps this testable without a run.
+ * thing that decides anything, which is what keeps this testable without a turn.
  */
 import { builtinCommandArguments } from '@namzu/sdk';
 import { verifyPermissionChecks } from './checks.js';

package/dist/termination.d.ts

@@ -0,0 +1,75 @@
+/**
+ * What a turn-running command does when it is told to stop from outside.
+ *
+ * A turn holds its conversation's writer lease while it runs, renewed for five
+ * minutes at a time. Node's default for SIGTERM, SIGHUP and SIGINT is to die
+ * on the spot, which settles nothing and releases nothing: the conversation
+ * then refuses `/resume`, `/abandon` and a new prompt ("leased by a live
+ * writer") until the lease expires, although no process is writing to it.
+ * A supervisor stopping a service sends SIGTERM, a closed terminal sends
+ * SIGHUP, and Ctrl+C at a shell running `namzu exec` sends SIGINT.
+ *
+ * So on the first of those signals the command:
+ *
+ * 1. gives back every session lease the process holds
+ *    (`releaseHeldSessionLeases`). A running turn is left `interrupted` — no
+ *    live lease, not paused — which the next writer closes through the
+ *    explicit flow: `/abandon`, `/resume`, or the TUI's next prompt
+ *    (`abandonInterrupted`). Nothing is appended for it on the way out: the
+ *    process cannot know how far the turn got, and `interrupted` says exactly
+ *    what is known;
+ * 2. runs the command's own cleanup, bounded: stop the turn, close the
+ *    session (tool servers, background jobs, the `session_end` hook) and, for
+ *    the TUI, hand the terminal back;
+ * 3. dies of the signal it was sent, so the parent sees the conventional
+ *    status (a shell reports 143 for SIGTERM, 129 for SIGHUP, 130 for SIGINT).
+ *
+ * A second signal while that is under way exits at once. SIGKILL runs no code
+ * at all; its lease is freed when it expires.
+ */
+/** The signals a turn-running command answers by giving its conversation back. */
+export declare const TERMINATION_SIGNALS: readonly ["SIGTERM", "SIGHUP", "SIGINT"];
+export type TerminationSignal = (typeof TERMINATION_SIGNALS)[number];
+/**
+ * The signal this process is stopping for, or `null`. The binary's own exit
+ * path consults it: once a signal is being handled, the handler ends the
+ * process, and a command that returns meanwhile must not exit ahead of it.
+ */
+export declare function terminationInProgress(): TerminationSignal | null;
+export interface TerminationHandling {
+    /** Add a cleanup step (run in the order added, after the leases are released). */
+    onTerminate(cleanup: (signal: TerminationSignal) => Promise<void> | void): void;
+    /** Stop listening: the command finished on its own. */
+    dispose(): void;
+}
+/** The process surface this uses, for a test to substitute. */
+export interface TerminationProcess {
+    on(signal: TerminationSignal, listener: () => void): unknown;
+    removeListener(signal: TerminationSignal, listener: () => void): unknown;
+    kill(pid: number, signal: TerminationSignal): unknown;
+    exit(code: number): never;
+    readonly pid: number;
+    readonly platform: NodeJS.Platform;
+}
+export interface HandleTerminationOptions {
+    readonly process?: TerminationProcess;
+    readonly leaseReleaseMs?: number;
+    readonly cleanupMs?: number;
+    /** Test hook: called instead of the re-raise at the end. */
+    readonly onFinished?: (signal: TerminationSignal) => void;
+}
+/** 128 + the signal's number: what a shell reports for a process the signal killed. */
+export declare function signalExitCode(signal: TerminationSignal): number;
+/**
+ * Answer SIGTERM, SIGHUP and SIGINT as the module header describes, until
+ * {@link TerminationHandling.dispose}.
+ */
+export declare function handleTerminationSignals(options?: HandleTerminationOptions): TerminationHandling;
+/**
+ * A command handler that answers the termination signals for as long as it
+ * runs. The handler adds its own cleanup once it has something to clean up.
+ */
+export declare function withTerminationHandling<A>(handler: (args: A, termination: TerminationHandling) => Promise<number>): (args: A) => Promise<number>;
+/** @internal For tests: forget a handled signal. */
+export declare function resetTerminationForTests(): void;
+//# sourceMappingURL=termination.d.ts.map

package/dist/termination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"termination.d.ts","sourceRoot":"","sources":["../src/termination.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAMH,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,0CAA2C,CAAA;AAC3E,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAA;AAWpE;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,iBAAiB,GAAG,IAAI,CAEhE;AAED,MAAM,WAAW,mBAAmB;IACnC,kFAAkF;IAClF,WAAW,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;IAC/E,uDAAuD;IACvD,OAAO,IAAI,IAAI,CAAA;CACf;AAED,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IAClC,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAA;IAC5D,cAAc,CAAC,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAA;IACxE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAA;IACrD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAA;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAA;CAClC;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAA;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAA;CACzD;AAeD,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAEhE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACvC,OAAO,GAAE,wBAA6B,GACpC,mBAAmB,CA6DrB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,EACxC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,mBAAmB,KAAK,OAAO,CAAC,MAAM,CAAC,GACrE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAS9B;AAED,oDAAoD;AACpD,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C"}