@namzu/cli 39.0.0 → 39.2.0

package/dist/tui/permission-review.d.ts

@@ -1,24 +1,29 @@
 /**
- * Maximum exact permission envelope handed to an interactive reviewer.
- *
- * This is a refusal boundary, not a display truncation boundary. A call above
- * it is not offered for approval and is not executed. Keeping the limit on the
- * complete batch also prevents many individually-small calls from turning one
- * consent prompt into an unbounded allocation.
+ * The most characters (UTF-16 units) of one string the review shows. A string
+ * past it is replaced in the review by a short placeholder, the call is listed
+ * as withheld, and the person can approve it once but not remember the answer.
+ */
+export declare const MAX_REVIEW_VALUE_CHARS = 200000;
+/**
+ * The most the review allocates for one batch. Past it the writer does not
+ * refuse: it writes placeholders for what is left, so many individually small
+ * values cannot add up to an unbounded prompt, and the person is still asked.
  */
-export declare const MAX_PERMISSION_REVIEW_BYTES = 8000;
+export declare const REVIEW_ALLOCATION_BYTES: number;
 /**
- * What a batch of workflow starts may weigh: the script's 256 KiB source limit
- * (the SDK runtime's), its 64 KiB of arguments, and the room JSON escaping
- * takes. The 8 000-byte boundary above exists so many small calls cannot add up
- * to an unbounded prompt; a workflow's script is one value the runtime already
- * bounds, and it is read in a pager, so the review is not what limits it.
+ * What a batch of workflow starts may weigh per value: the script's 256 KiB
+ * source limit (the SDK runtime's), its 64 KiB of arguments, and the room JSON
+ * escaping takes. The script is one value the runtime already bounds, and it is
+ * read in a pager.
  */
 export declare const MAX_WORKFLOW_REVIEW_BYTES: number;
-/** The limit that applies to this batch: workflow starts alone get the larger one. */
-export declare function permissionReviewLimit(calls: readonly {
+/** The per-value and whole-batch limits that apply to this batch. */
+export declare function permissionReviewLimits(calls: readonly {
     readonly name: string;
-}[]): number;
+}[]): {
+    readonly valueChars: number;
+    readonly totalBytes: number;
+};
 /** Physical rows kept visible without crowding a 24-row terminal. */
 export declare const PERMISSION_REVIEW_PAGE_ROWS = 6;
 /**
@@ -33,13 +38,34 @@ export interface PermissionReviewCall {
     readonly input: unknown;
     readonly isDestructive: boolean;
 }
+/** A call that can be approved once but never remembered, because of its input's size. */
+export interface WithheldCall {
+    /** Position in the batch. */
+    readonly index: number;
+    readonly name: string;
+    /** Characters left out of the review, summed over the call's values. */
+    readonly characters: number;
+    /**
+     * Part of the input is replaced by a placeholder. Otherwise the input is
+     * shown whole but is long enough that only a one-time yes is offered.
+     */
+    readonly omitted: boolean;
+}
 export type PermissionReviewResult = {
     readonly ok: true;
     readonly text: string;
     readonly bytes: number;
+    /** Calls whose review carries a placeholder; approving them is one-time only. */
+    readonly withheld: readonly WithheldCall[];
+    /**
+     * sha256 of the true batch: the written text, plus a digest of every
+     * value replaced by a placeholder. Equal hashes mean the input the
+     * person approved is the input that runs.
+     */
+    readonly envelopeHash: string;
 } | {
     readonly ok: false;
-    readonly reason: 'too_large' | 'unrepresentable';
+    readonly reason: 'unrepresentable';
 };
 export interface PermissionReviewSummary {
     /** Compact agent plan; full prepared arguments remain available in the exact view. */
@@ -56,7 +82,30 @@ export interface PermissionReviewSummary {
     readonly complete: boolean;
 }
 /** Actionable fail-closed feedback for a TUI review that cannot be exact. */
-export declare function permissionReviewRefusal(reason: 'too_large' | 'unrepresentable'): string;
+export declare function permissionReviewRefusal(_reason: 'unrepresentable'): string;
+/** What the person is told about a call whose input is too large to show. */
+export declare const WITHHELD_NOTICE = "Too large to show in full. Approving runs it once and is not remembered.";
+/** What the person is told about a call whose input is long but shown whole. */
+export declare const LONG_INPUT_NOTICE = "Long input. Approving runs it once and is not remembered.";
+/** The marks a withheld call carries beside its number in a batch. */
+export declare const WITHHELD_MARK = "too large to show";
+export declare const LONG_INPUT_MARK = "long input";
+/** The one notice a prompt carries for every withheld call of its batch. */
+export declare function withheldNotice(withheld: readonly WithheldCall[], total: number): string;
+/** The placeholder written in place of a value the review leaves out. */
+export declare function withheldPlaceholder(characters: number): string;
+/** A tool with no view of its own is approved once only past these. */
+export declare const LONG_INPUT_UNITS = 2000;
+export declare const LONG_INPUT_ELEMENTS = 10000;
+export declare const LONG_INPUT_DEPTH = 64;
+/**
+ * Whether an input reads as too long to take in as one line: more than
+ * {@link LONG_INPUT_UNITS} units of compact JSON, more than
+ * {@link LONG_INPUT_ELEMENTS} elements, or nested deeper than
+ * {@link LONG_INPUT_DEPTH}. Stops as soon as one is true, so the cost is
+ * bounded whatever the input.
+ */
+export declare function isLongInput(input: unknown): boolean;
 /** One terminal row of the source-preserving permission projection. */
 export interface PermissionReviewRow {
     /** Stable absolute position in the projected review. */
@@ -76,7 +125,10 @@ export interface PermissionReviewRow {
  * permission protocol can preserve and stops building as soon as the complete
  * envelope crosses the limit.
  */
-export declare function buildPermissionReview(calls: readonly PermissionReviewCall[], maxBytes?: number): PermissionReviewResult;
+export declare function buildPermissionReview(calls: readonly PermissionReviewCall[], limits?: {
+    readonly valueChars: number;
+    readonly totalBytes: number;
+}): PermissionReviewResult;
 /**
  * Derive a readable review from the immutable exact envelope.
  *
@@ -113,6 +165,11 @@ export interface PermissionSummaryContext {
         readonly maxConcurrency: number;
         readonly maxAgents: number;
     };
+    /**
+     * The calls approved once only because of their size, by position: each
+     * is marked beside its number, where it appears in the list.
+     */
+    readonly withheld?: readonly WithheldCall[];
 }
 export declare function buildPermissionSummary(review: string, context?: PermissionSummaryContext): PermissionReviewSummary;
 /**

package/dist/tui/permission-review.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission-review.d.ts","sourceRoot":"","sources":["../../src/tui/permission-review.ts"],"names":[],"mappings":"AAKA;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,OAAQ,CAAA;AAEhD;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,QAAa,CAAA;AAEnD,sFAAsF;AACtF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,MAAM,CAIzF;AAED,qEAAqE;AACrE,eAAO,MAAM,2BAA2B,IAAI,CAAA;AAE5C;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGjF;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAC/B;AAED,MAAM,MAAM,sBAAsB,GAC/B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,CAAA;CAAE,CAAA;AAE3E,MAAM,WAAW,uBAAuB;IACvC,sFAAsF;IACtF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC1B;AAWD,6EAA6E;AAC7E,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,GAAG,MAAM,CAIvF;AAED,uEAAuE;AACvE,MAAM,WAAW,mBAAmB;IACnC,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;CAC9B;AAKD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,SAAS,oBAAoB,EAAE,EACtC,QAAQ,SAA+B,GACrC,sBAAsB,CAqJxB;AAED;;;;;;;;;;;;;GAaG;AACH,+EAA+E;AAC/E,MAAM,WAAW,wBAAwB;IACxC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;IAC5D;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;IAC/C;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE;QACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;QAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAC1B,CAAA;CACD;AAED,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,wBAA6B,GACpC,uBAAuB,CA0GzB;AAotBD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CACnC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,GAAG,SAAS,GACjC,SAAS,mBAAmB,EAAE,CA0DhC"}
+{"version":3,"file":"permission-review.d.ts","sourceRoot":"","sources":["../../src/tui/permission-review.ts"],"names":[],"mappings":"AAOA;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAE7C;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,QAAc,CAAA;AAElD;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,QAAa,CAAA;AAEnD,qEAAqE;AACrE,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG;IACpF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC3B,CAIA;AAED,qEAAqE;AACrE,eAAO,MAAM,2BAA2B,IAAI,CAAA;AAE5C;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGjF;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAC/B;AAED,0FAA0F;AAC1F,MAAM,WAAW,YAAY;IAC5B,6BAA6B;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CACzB;AAED,MAAM,MAAM,sBAAsB,GAC/B;IACA,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAA;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC5B,GACD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,CAAA;AAE7D,MAAM,WAAW,uBAAuB;IACvC,sFAAsF;IACtF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC1B;AAWD,6EAA6E;AAC7E,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAE1E;AAED,6EAA6E;AAC7E,eAAO,MAAM,eAAe,6EAC+C,CAAA;AAE3E,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,8DAA8D,CAAA;AAE5F,sEAAsE;AACtE,eAAO,MAAM,aAAa,sBAAsB,CAAA;AAChD,eAAO,MAAM,eAAe,eAAe,CAAA;AAE3C,4EAA4E;AAC5E,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGvF;AASD,yEAAyE;AACzE,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,OAAQ,CAAA;AACrC,eAAO,MAAM,mBAAmB,QAAS,CAAA;AACzC,eAAO,MAAM,gBAAgB,KAAK,CAAA;AAElC;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CA0BnD;AAED,uEAAuE;AACvE,MAAM,WAAW,mBAAmB;IACnC,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;CAC9B;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,SAAS,oBAAoB,EAAE,EACtC,MAAM,GAAE;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAEjE,GACC,sBAAsB,CAoQxB;AAED;;;;;;;;;;;;;GAaG;AACH,+EAA+E;AAC/E,MAAM,WAAW,wBAAwB;IACxC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;IAC5D;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;IAC/C;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE;QACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;QAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAC1B,CAAA;IACD;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;CAC3C;AASD,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,wBAA6B,GACpC,uBAAuB,CA0GzB;AAotBD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CACnC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,GAAG,SAAS,GACjC,SAAS,mBAAmB,EAAE,CA0DhC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@namzu/cli",
-  "version": "39.0.0",
+  "version": "39.2.0",
   "description": "Interactive and headless terminal agent for Namzu, with provider discovery, durable sessions, tools and diagnostics.",
   "keywords": [
     "namzu",
@@ -57,18 +57,18 @@
     "react": "19.2.6",
     "string-width": "8.2.1",
     "yaml": "^2.9.0",
-    "@namzu/anthropic": "6.3.0",
     "@namzu/browser": "2.0.1",
-    "@namzu/computer-use": "3.1.0",
-    "@namzu/deepseek": "^2.1.0",
+    "@namzu/anthropic": "6.3.0",
     "@namzu/files": "1.1.2",
-    "@namzu/google": "^1.1.3",
     "@namzu/ollama": "2.2.5",
+    "@namzu/computer-use": "3.1.0",
     "@namzu/openai": "4.2.0",
-    "@namzu/openrouter": "3.0.4",
+    "@namzu/google": "^1.1.3",
     "@namzu/sandbox": "^28.0.0",
-    "@namzu/sdk": "^53.0.0",
-    "@namzu/zen": "^5.0.2"
+    "@namzu/sdk": "^53.2.0",
+    "@namzu/openrouter": "3.0.4",
+    "@namzu/zen": "^5.0.2",
+    "@namzu/deepseek": "^2.1.0"
   },
   "devDependencies": {
     "@biomejs/biome": "^1.9.4",

package/dist/chunks/agent-session-HFOLAFFL.js

@@ -1,53 +0,0 @@
-import { createRequire as __namzuCreateRequire } from 'node:module';
-const require = __namzuCreateRequire(import.meta.url);
-import {
-  createPalAgentSession,
-  palSessionEnvironment
-} from "./chunk-7EASYULO.js";
-import "./chunk-OXJEMOBQ.js";
-import "./chunk-NLKIBRXJ.js";
-import "./chunk-LFVQSMJG.js";
-import "./chunk-YKEPC6NH.js";
-import "./chunk-CDYUGK7F.js";
-import "./chunk-WHODOMXA.js";
-import "./chunk-HV77F4SF.js";
-import "./chunk-W27ZDC4R.js";
-import "./chunk-EUU4TDTH.js";
-import "./chunk-NUGPLXVK.js";
-import "./chunk-DFA5OB46.js";
-import "./chunk-7YXHOSHD.js";
-import "./chunk-233DQVSC.js";
-import "./chunk-II57E2QW.js";
-import "./chunk-GNBMKISG.js";
-import "./chunk-GU5YARBU.js";
-import "./chunk-KONYGNG6.js";
-import "./chunk-2KKF45DQ.js";
-import "./chunk-AXCOWIIH.js";
-import "./chunk-N3FI7O4U.js";
-import "./chunk-XJ4IUCH6.js";
-import "./chunk-6LLJQ3KY.js";
-import "./chunk-QO5JUKFG.js";
-import "./chunk-2VMMTC2V.js";
-import "./chunk-EEDZOGV4.js";
-import "./chunk-UBOPUGDN.js";
-import "./chunk-H6B6AROX.js";
-import "./chunk-CL5TCY4F.js";
-import "./chunk-FBNKKDIY.js";
-import "./chunk-UTMGJDC3.js";
-import "./chunk-CZEU2JYJ.js";
-import "./chunk-WMEZTDLT.js";
-import "./chunk-CUOWARJI.js";
-import "./chunk-OH6TB27S.js";
-import "./chunk-IE5XIE4W.js";
-import "./chunk-B73OIFL6.js";
-import "./chunk-4K2NRXHJ.js";
-import "./chunk-JORONMD3.js";
-import "./chunk-MCNEFI5Q.js";
-import "./chunk-AZ3YHVFA.js";
-import "./chunk-RQBT4RVE.js";
-import "./chunk-76FLAFCG.js";
-export {
-  createPalAgentSession,
-  palSessionEnvironment
-};
-//# sourceMappingURL=agent-session-HFOLAFFL.js.map