@namzu/sdk 35.0.0 → 37.0.0

package/dist/store/memory/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/store/memory/index.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,mBAAmB;IACvB,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAA;IAErD,MAAM,CAAC,MAA0B;QAChC,IAAI,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QAE/C,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAA;YACpC,OAAO,GAAG,OAAO,CAAC,MAAM,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC/E,CAAA;QACF,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAA;YAChC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACnF,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAA;QAC5D,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAA;QAEjD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAA;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAA;QAExC,OAAO;YACN,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;YAChC,UAAU;SACV,CAAA;IACF,CAAC;IAED,QAAQ,CAAC,EAAY;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC5B,CAAC;IAED,UAAU;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACzC,CAAC;IAED,KAAK;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAA;IACzB,CAAC;IAED,OAAO,CAAC,OAA2B;QAClC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;QACpB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QAClC,CAAC;IACF,CAAC;IAED,GAAG,CAAC,KAAuB;QAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IAClC,CAAC;IAED,MAAM,CAAC,EAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC/B,CAAC;CACD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/store/memory/index.ts"],"names":[],"mappings":"AAQA,SAAS,KAAK,CAAC,IAAY;IAC1B,OAAO,IAAI,GAAG,CACb,IAAI;SACF,SAAS,CAAC,MAAM,CAAC;SACjB,WAAW,EAAE;SACb,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAChC,CAAA;AACF,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,WAAgC;IACrF,KAAK,MAAM,KAAK,IAAI,IAAI;SACtB,SAAS,CAAC,MAAM,CAAC;SACjB,WAAW,EAAE;SACb,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAChC,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;IAC3C,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAClC,OAAoC,EACpC,MAA0B,EAC1B,YAAsC,GAAG,EAAE,CAAC,EAAE;IAE9C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IACvC,MAAM,WAAW,GAAG,IAAI,GAAG,CAC1B,MAAM,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAC3E,CAAA;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAA;IACnF,MAAM,MAAM,GAAG,OAAO;SACpB,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACT,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;QAClD,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAC/E;SACA,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACT,CAAC,WAAW,CAAC,IAAI;QACjB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACzE,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,CAC1C,CACF;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACd,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAChC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;YACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC1B,MAAM,MAAM,GACX,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;gBACnF,IAAI,MAAM,GAAG,CAAC;oBAAE,QAAQ,EAAE,CAAA;gBAC1B,KAAK,IAAI,MAAM,CAAA;YAChB,CAAC;QACF,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;IAClC,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC;SAC1D,IAAI,CACJ,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACR,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ;QACvB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK;QACjB,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS;QACrC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACjE,CAAA;IACF,OAAO;QACN,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC;QACjF,UAAU,EAAE,MAAM,CAAC,MAAM;KACzB,CAAA;AACF,CAAC;AAED,MAAM,OAAO,mBAAmB;IACvB,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAA;IAErD,MAAM,CAAC,MAA0B;QAChC,OAAO,mBAAmB,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;IAC/D,CAAC;IAED,QAAQ,CAAC,EAAY;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC5B,CAAC;IAED,UAAU;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACzC,CAAC;IAED,KAAK;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAA;IACzB,CAAC;IAED,OAAO,CAAC,OAA2B;QAClC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;QACpB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QAClC,CAAC;IACF,CAAC;IAED,GAAG,CAAC,KAAuB;QAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IAClC,CAAC;IAED,MAAM,CAAC,EAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC/B,CAAC;CACD"}

package/dist/store/memory/memory.d.ts

@@ -1,5 +1,5 @@
 import type { MemoryId } from '../../types/ids/index.js';
-import type { CreateMemoryParams, MemoryContent, MemoryIndexEntry, MemorySearchParams, MemorySearchResult, MemoryStore } from '../../types/memory/index.js';
+import type { CreateMemoryParams, MemoryContent, MemoryIndexEntry, MemoryRecord, MemorySearchParams, MemorySearchResult, MemoryStore, UpdateMemoryParams } from '../../types/memory/index.js';
 import { InMemoryMemoryIndex } from './index.js';
 export declare class InMemoryMemoryStore implements MemoryStore {
     private content;
@@ -9,7 +9,8 @@ export declare class InMemoryMemoryStore implements MemoryStore {
         content: MemoryContent;
     }>;
     get(id: MemoryId): Promise<MemoryContent | undefined>;
-    update(id: MemoryId, updates: Partial<CreateMemoryParams>): Promise<MemoryIndexEntry | undefined>;
+    getRecord(id: MemoryId): Promise<MemoryRecord | undefined>;
+    update(id: MemoryId, updates: UpdateMemoryParams): Promise<MemoryIndexEntry | undefined>;
     delete(id: MemoryId): Promise<boolean>;
     list(params?: MemorySearchParams): Promise<MemorySearchResult>;
     getIndex(): InMemoryMemoryIndex;

package/dist/store/memory/memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/store/memory/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,KAAK,EACX,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,MAAM,6BAA6B,CAAA;AAEpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAEhD,qBAAa,mBAAoB,YAAW,WAAW;IACtD,OAAO,CAAC,OAAO,CAAmC;IAClD,OAAO,CAAC,KAAK,CAA4B;IAEnC,MAAM,CACX,MAAM,EAAE,kBAAkB,GACxB,OAAO,CAAC;QAAE,KAAK,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,aAAa,CAAA;KAAE,CAAC;IA2BzD,GAAG,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAIrD,MAAM,CACX,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAClC,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAqClC,MAAM,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAMtC,IAAI,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIpE,QAAQ,IAAI,mBAAmB;CAG/B"}
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/store/memory/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,KAAK,EACX,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,kBAAkB,EAClB,MAAM,6BAA6B,CAAA;AAGpC,OAAO,EAAE,mBAAmB,EAAuB,MAAM,YAAY,CAAA;AAErE,qBAAa,mBAAoB,YAAW,WAAW;IACtD,OAAO,CAAC,OAAO,CAAmC;IAClD,OAAO,CAAC,KAAK,CAA4B;IAEnC,MAAM,CACX,MAAM,EAAE,kBAAkB,GACxB,OAAO,CAAC;QAAE,KAAK,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,aAAa,CAAA;KAAE,CAAC;IA2BzD,GAAG,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAIrD,SAAS,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAM1D,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAuCxF,MAAM,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAMtC,IAAI,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQpE,QAAQ,IAAI,mBAAmB;CAG/B"}

package/dist/store/memory/memory.js

@@ -1,5 +1,6 @@
+import { assertMemoryStatus } from '../../types/memory/index.js';
 import { generateMemoryId } from '../../utils/id.js';
-import { InMemoryMemoryIndex } from './index.js';
+import { InMemoryMemoryIndex, searchMemoryEntries } from './index.js';
 export class InMemoryMemoryStore {
     content = new Map();
     index = new InMemoryMemoryIndex();
@@ -28,7 +29,14 @@ export class InMemoryMemoryStore {
     async get(id) {
         return this.content.get(id);
     }
+    async getRecord(id) {
+        const entry = this.index.getEntry(id);
+        const content = this.content.get(id);
+        return entry && content ? structuredClone({ entry, content }) : undefined;
+    }
     async update(id, updates) {
+        if (updates.status !== undefined)
+            assertMemoryStatus(updates.status);
         const existing = this.index.getEntry(id);
         if (!existing)
             return undefined;
@@ -38,6 +46,7 @@ export class InMemoryMemoryStore {
             title: updates.title ?? existing.title,
             summary: updates.summary ?? existing.summary,
             tags: updates.tags ? [...updates.tags] : existing.tags,
+            status: updates.status ?? existing.status,
             updatedAt: now,
         };
         this.index.set(updated);
@@ -63,7 +72,7 @@ export class InMemoryMemoryStore {
         return existed;
     }
     async list(params) {
-        return this.index.search(params ?? {});
+        return searchMemoryEntries(this.index.allEntries(), params ?? {}, (id) => this.content.get(id)?.content ?? '');
     }
     getIndex() {
         return this.index;

package/dist/store/memory/memory.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../src/store/memory/memory.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAEhD,MAAM,OAAO,mBAAmB;IACvB,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAA;IAC1C,KAAK,GAAG,IAAI,mBAAmB,EAAE,CAAA;IAEzC,KAAK,CAAC,MAAM,CACX,MAA0B;QAE1B,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAA;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAEtB,MAAM,KAAK,GAAqB;YAC/B,EAAE;YACF,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;YACzC,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACd,CAAA;QAED,MAAM,aAAa,GAAkB;YACpC,EAAE;YACF,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;SAC9D,CAAA;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACrB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,CAAC,CAAA;QAEnC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAY;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CACX,EAAY,EACZ,OAAoC;QAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QACxC,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAA;QAE/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAEtB,MAAM,OAAO,GAAqB;YACjC,GAAG,QAAQ;YACX,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK;YACtC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO;YAC5C,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI;YACtD,SAAS,EAAE,GAAG;SACd,CAAA;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAEvB,IACC,OAAO,CAAC,OAAO,KAAK,SAAS;YAC7B,OAAO,CAAC,MAAM,KAAK,SAAS;YAC5B,OAAO,CAAC,QAAQ,KAAK,SAAS,EAC7B,CAAC;YACF,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC5C,IAAI,eAAe,EAAE,CAAC;gBACrB,MAAM,cAAc,GAAkB;oBACrC,GAAG,eAAe;oBAClB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO;oBACnD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM;oBAChD,QAAQ,EACP,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ;iBACpF,CAAA;gBACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,cAAc,CAAC,CAAA;YACrC,CAAC;QACF,CAAC;QAED,OAAO,OAAO,CAAA;IACf,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAY;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACrC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACvB,OAAO,OAAO,CAAA;IACf,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAA2B;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;IACvC,CAAC;IAED,QAAQ;QACP,OAAO,IAAI,CAAC,KAAK,CAAA;IAClB,CAAC;CACD"}
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../src/store/memory/memory.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAErE,MAAM,OAAO,mBAAmB;IACvB,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAA;IAC1C,KAAK,GAAG,IAAI,mBAAmB,EAAE,CAAA;IAEzC,KAAK,CAAC,MAAM,CACX,MAA0B;QAE1B,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAA;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAEtB,MAAM,KAAK,GAAqB;YAC/B,EAAE;YACF,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;YACzC,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACd,CAAA;QAED,MAAM,aAAa,GAAkB;YACpC,EAAE;YACF,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;SAC9D,CAAA;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACrB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,CAAC,CAAA;QAEnC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAY;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAY;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACpC,OAAO,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1E,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAY,EAAE,OAA2B;QACrD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QACxC,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAA;QAE/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAEtB,MAAM,OAAO,GAAqB;YACjC,GAAG,QAAQ;YACX,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK;YACtC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO;YAC5C,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI;YACtD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM;YACzC,SAAS,EAAE,GAAG;SACd,CAAA;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAEvB,IACC,OAAO,CAAC,OAAO,KAAK,SAAS;YAC7B,OAAO,CAAC,MAAM,KAAK,SAAS;YAC5B,OAAO,CAAC,QAAQ,KAAK,SAAS,EAC7B,CAAC;YACF,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC5C,IAAI,eAAe,EAAE,CAAC;gBACrB,MAAM,cAAc,GAAkB;oBACrC,GAAG,eAAe;oBAClB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO;oBACnD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM;oBAChD,QAAQ,EACP,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ;iBACpF,CAAA;gBACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,cAAc,CAAC,CAAA;YACrC,CAAC;QACF,CAAC;QAED,OAAO,OAAO,CAAA;IACf,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAY;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACrC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACvB,OAAO,OAAO,CAAA;IACf,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAA2B;QACrC,OAAO,mBAAmB,CACzB,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EACvB,MAAM,IAAI,EAAE,EACZ,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,IAAI,EAAE,CAC3C,CAAA;IACF,CAAC;IAED,QAAQ;QACP,OAAO,IAAI,CAAC,KAAK,CAAA;IAClB,CAAC;CACD"}

package/dist/store/memory/operation-lock.d.ts

@@ -0,0 +1,11 @@
+/** Wait bound, not a lease: a slow or crashed owner is never silently replaced. */
+export declare const DEFAULT_MEMORY_LOCK_TIMEOUT_MS = 10000;
+export declare function validateMemoryLockTimeout(timeoutMs: number): void;
+/**
+ * Local-filesystem exclusion for cooperating processes. Atomic rename of the
+ * index alone cannot serialize the index/content read-modify-write transaction.
+ * An abandoned lock fails closed; guessing a lease expired would permit two
+ * live writers to overwrite each other again.
+ */
+export declare function acquireMemoryOperationLock(path: string, timeoutMs: number): Promise<() => Promise<void>>;
+//# sourceMappingURL=operation-lock.d.ts.map

package/dist/store/memory/operation-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-lock.d.ts","sourceRoot":"","sources":["../../../src/store/memory/operation-lock.ts"],"names":[],"mappings":"AAMA,mFAAmF;AACnF,eAAO,MAAM,8BAA8B,QAAS,CAAA;AAEpD,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAQjE;AAWD;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC/C,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CA6D9B"}

package/dist/store/memory/operation-lock.js

@@ -0,0 +1,94 @@
+import { randomUUID } from 'node:crypto';
+import { lstat, open, readFile, unlink } from 'node:fs/promises';
+import { setTimeout as delay } from 'node:timers/promises';
+import { NamzuError } from '../../types/errors/index.js';
+/** Wait bound, not a lease: a slow or crashed owner is never silently replaced. */
+export const DEFAULT_MEMORY_LOCK_TIMEOUT_MS = 10_000;
+export function validateMemoryLockTimeout(timeoutMs) {
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs <= 0) {
+        throw new NamzuError({
+            code: 'invalid_config',
+            message: 'DiskMemoryStore lockTimeoutMs must be a positive safe integer.',
+            retryable: false,
+        });
+    }
+}
+function lockError(path, reason, timeoutMs) {
+    return new NamzuError({
+        code: 'storage_error',
+        message: `Memory operation lock ${path}: ${reason}. Stop all processes using this memory store and inspect the lock owner before removing a stale lock; it is never broken automatically.`,
+        details: { lockPath: path, timeoutMs },
+        retryable: false,
+    });
+}
+/**
+ * Local-filesystem exclusion for cooperating processes. Atomic rename of the
+ * index alone cannot serialize the index/content read-modify-write transaction.
+ * An abandoned lock fails closed; guessing a lease expired would permit two
+ * live writers to overwrite each other again.
+ */
+export async function acquireMemoryOperationLock(path, timeoutMs) {
+    const deadline = performance.now() + timeoutMs;
+    let attempted = false;
+    for (;;) {
+        if (attempted && performance.now() >= deadline) {
+            throw lockError(path, `acquisition timed out after ${timeoutMs} ms`, timeoutMs);
+        }
+        attempted = true;
+        let handle;
+        try {
+            handle = await open(path, 'wx', 0o600);
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+            const existing = await lstat(path).catch((statError) => {
+                if (statError.code === 'ENOENT')
+                    return undefined;
+                throw statError;
+            });
+            if (!existing)
+                continue;
+            if (!existing.isFile() || existing.isSymbolicLink()) {
+                throw lockError(path, 'the occupied lock is not a regular file', timeoutMs);
+            }
+            if (performance.now() >= deadline) {
+                throw lockError(path, `acquisition timed out after ${timeoutMs} ms`, timeoutMs);
+            }
+            await delay(Math.min(25, Math.max(1, deadline - performance.now())));
+            continue;
+        }
+        const owner = `${JSON.stringify({ pid: process.pid, token: randomUUID(), acquiredAt: Date.now() })}\n`;
+        const identity = await handle.stat().catch(async (error) => {
+            await handle.close();
+            // Exclusive create happened, but ownership could not be established.
+            // Leave the path for explicit recovery rather than unlink an unknown inode.
+            throw error;
+        });
+        try {
+            await handle.writeFile(owner, 'utf8');
+            await handle.sync();
+        }
+        catch (error) {
+            await handle.close();
+            const current = await lstat(path).catch(() => undefined);
+            if (current?.dev === identity.dev && current.ino === identity.ino) {
+                await unlink(path).catch(() => undefined);
+            }
+            throw error;
+        }
+        await handle.close();
+        return async () => {
+            const current = await lstat(path);
+            if (!current.isFile() ||
+                current.isSymbolicLink() ||
+                current.dev !== identity.dev ||
+                current.ino !== identity.ino ||
+                (await readFile(path, 'utf8')) !== owner) {
+                throw lockError(path, 'the lock owner changed before release', timeoutMs);
+            }
+            await unlink(path);
+        };
+    }
+}
+//# sourceMappingURL=operation-lock.js.map

package/dist/store/memory/operation-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-lock.js","sourceRoot":"","sources":["../../../src/store/memory/operation-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAmB,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACjF,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAExD,mFAAmF;AACnF,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAA;AAEpD,MAAM,UAAU,yBAAyB,CAAC,SAAiB;IAC1D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,UAAU,CAAC;YACpB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,gEAAgE;YACzE,SAAS,EAAE,KAAK;SAChB,CAAC,CAAA;IACH,CAAC;AACF,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,MAAc,EAAE,SAAiB;IACjE,OAAO,IAAI,UAAU,CAAC;QACrB,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,yBAAyB,IAAI,KAAK,MAAM,yIAAyI;QAC1L,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,SAAS,EAAE,KAAK;KAChB,CAAC,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,IAAY,EACZ,SAAiB;IAEjB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;IAC9C,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,SAAS,CAAC;QACT,IAAI,SAAS,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAChD,MAAM,SAAS,CAAC,IAAI,EAAE,+BAA+B,SAAS,KAAK,EAAE,SAAS,CAAC,CAAA;QAChF,CAAC;QACD,SAAS,GAAG,IAAI,CAAA;QAChB,IAAI,MAAkB,CAAA;QACtB,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;YACnE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,SAAgC,EAAE,EAAE;gBAC7E,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAA;gBACjD,MAAM,SAAS,CAAA;YAChB,CAAC,CAAC,CAAA;YACF,IAAI,CAAC,QAAQ;gBAAE,SAAQ;YACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;gBACrD,MAAM,SAAS,CAAC,IAAI,EAAE,yCAAyC,EAAE,SAAS,CAAC,CAAA;YAC5E,CAAC;YACD,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACnC,MAAM,SAAS,CAAC,IAAI,EAAE,+BAA+B,SAAS,KAAK,EAAE,SAAS,CAAC,CAAA;YAChF,CAAC;YACD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;YACpE,SAAQ;QACT,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAA;QACtG,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACnE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACpB,qEAAqE;YACrE,4EAA4E;YAC5E,MAAM,KAAK,CAAA;QACZ,CAAC,CAAC,CAAA;QACF,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;YACrC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACpB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACxD,IAAI,OAAO,EAAE,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACnE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC1C,CAAC;YACD,MAAM,KAAK,CAAA;QACZ,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACpB,OAAO,KAAK,IAAI,EAAE;YACjB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YACjC,IACC,CAAC,OAAO,CAAC,MAAM,EAAE;gBACjB,OAAO,CAAC,cAAc,EAAE;gBACxB,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;gBAC5B,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;gBAC5B,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,KAAK,EACvC,CAAC;gBACF,MAAM,SAAS,CAAC,IAAI,EAAE,uCAAuC,EAAE,SAAS,CAAC,CAAA;YAC1E,CAAC;YACD,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC,CAAA;IACF,CAAC;AACF,CAAC"}

package/dist/tools/builtins/bash.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bash.d.ts","sourceRoot":"","sources":["../../../src/tools/builtins/bash.ts"],"names":[],"mappings":"AA8FA,6GAA6G;AAC7G,eAAO,MAAM,qBAAqB,4NACwL,CAAA;AAE1N,eAAO,MAAM,QAAQ;;;;EA+OnB,CAAA"}
+{"version":3,"file":"bash.d.ts","sourceRoot":"","sources":["../../../src/tools/builtins/bash.ts"],"names":[],"mappings":"AAoRA,6GAA6G;AAC7G,eAAO,MAAM,qBAAqB,4NACwL,CAAA;AAE1N,eAAO,MAAM,QAAQ;;;;EAqOnB,CAAA"}

package/dist/tools/builtins/bash.js

@@ -1,10 +1,12 @@
-import { exec } from 'node:child_process';
-import { promisify } from 'node:util';
+import { spawn } from 'node:child_process';
+import { StringDecoder } from 'node:string_decoder';
 import { z } from 'zod';
+import { SANDBOX_KILL_GRACE_MS } from '../../constants/sandbox/index.js';
 import { DANGEROUS_PATTERNS } from '../../constants/tools/index.js';
+import { killTree } from '../../process/kill-tree.js';
+import { subscribeToAbort } from '../../utils/abort.js';
 import { defineTool } from '../defineTool.js';
 import { scrubInheritedEnv } from '../env-scrub.js';
-const execAsync = promisify(exec);
 // Namzu owns its own bash timeout knob — `NAMZU_BASH_TIMEOUT_MS`.
 // The Vandal fallback (`VANDAL_NAMZU_TIMEOUT_MS`) lived here as a
 // historical bridge while Namzu was carved out of the Vandal repo,
@@ -49,26 +51,192 @@ const inputSchema = z.object({
         .optional()
         .describe('Start the command as a background job and return its id immediately, instead of waiting. The turn is not held open; read its output with the `job` tool. Use for watchers, dev servers and long builds. Do NOT write `cmd &` yourself — under the sandbox the shell that backgrounds it exits immediately and takes the job with it.'),
 });
+const MAX_SHELL_PROGRESS_CHARS = 160;
+/** Keep a bounded tail even when a process never writes a newline. */
+function appendProgressTail(previous, chunk, start, end) {
+    return (previous + chunk.slice(Math.max(start, end - MAX_SHELL_PROGRESS_CHARS), end)).slice(-MAX_SHELL_PROGRESS_CHARS);
+}
+/** Clipping a UTF-16 string must not display half of a surrogate pair. */
+function progressLine(value) {
+    let line = value.trim();
+    const first = line.charCodeAt(0);
+    if (first >= 0xdc00 && first <= 0xdfff)
+        line = line.slice(1);
+    const last = line.charCodeAt(line.length - 1);
+    if (last >= 0xd800 && last <= 0xdbff)
+        line = line.slice(0, -1);
+    return line;
+}
 /**
- * The last line worth showing from one chunk of streamed output.
- *
- * A progress line is a status, not a log: the host renders one line and
- * replaces it as the next arrives, so sending a whole chunk sends a wall
- * of text into a slot that shows one line of it. A chunk usually ends
- * mid-line and usually ends with a newline, so the last NON-EMPTY line is
- * the most recent complete thing the command actually said.
- *
- * Progress is capped rather than truncated with an ellipsis: this is
- * glanced at, and a marker in a line nobody reads to the end is noise.
+ * One latest line per stream, independent of transport chunk boundaries.
+ * Reports stay synchronous: the executor owns coalescing and backpressure.
+ * This projection adds neither an output log nor a queue of pending reports.
  */
-function lastNonEmptyLine(chunk) {
-    const lines = chunk.split('\n');
-    for (let i = lines.length - 1; i >= 0; i--) {
-        const line = lines[i]?.trim();
-        if (line)
-            return line.length > 160 ? line.slice(0, 160) : line;
-    }
-    return undefined;
+function shellProgress(report) {
+    if (!report)
+        return undefined;
+    const partial = { stdout: '', stderr: '' };
+    let lastMessage = '';
+    return ({ stream, data }) => {
+        let line = partial[stream];
+        let latest = '';
+        let start = 0;
+        // Scan delimiters without allocating an array for arbitrarily chatty output.
+        for (const match of data.matchAll(/[\r\n]/g)) {
+            line = appendProgressTail(line, data, start, match.index);
+            latest = progressLine(line) || latest;
+            line = '';
+            start = match.index + 1;
+        }
+        line = appendProgressTail(line, data, start, data.length);
+        partial[stream] = line;
+        const message = progressLine(line) || latest;
+        if (!message || message === lastMessage)
+            return;
+        lastMessage = message;
+        try {
+            report(message);
+        }
+        catch {
+            // A diagnostic observer cannot break the process output reader.
+        }
+    };
+}
+/**
+ * Keep the shell's process group until inherited pipes close. Node's exec
+ * timeout/AbortSignal kills only the wrapper and closes its pipes immediately,
+ * leaving the command and its descendants running after the promise settles.
+ */
+function execHostShell(command, options) {
+    options.signal?.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        const child = spawn(command, {
+            cwd: options.cwd,
+            env: options.env,
+            shell: true,
+            // killTree's negative PID must never target the caller's own group.
+            detached: process.platform !== 'win32',
+        });
+        const captures = {
+            stdout: {
+                chunks: [],
+                bytes: 0,
+                truncated: false,
+                decoder: new StringDecoder('utf8'),
+            },
+            stderr: {
+                chunks: [],
+                bytes: 0,
+                truncated: false,
+                decoder: new StringDecoder('utf8'),
+            },
+        };
+        let cause;
+        let failure;
+        let escalation;
+        let disposeAbort;
+        let closed = false;
+        const cancel = (origin) => {
+            if (closed || cause !== undefined)
+                return;
+            cause = origin;
+            escalation = setTimeout(() => {
+                escalation = undefined;
+                killTree(child, 'SIGKILL');
+                // A descendant can deliberately start a separate session. It is
+                // outside this group, but its inherited pipes must not hold the
+                // cancelled call forever. Keep what was captured during grace.
+                child.stdin?.destroy();
+                child.stdout?.destroy();
+                child.stderr?.destroy();
+            }, SANDBOX_KILL_GRACE_MS);
+            escalation.unref?.();
+            killTree(child, 'SIGTERM');
+        };
+        const capture = (stream, chunk) => {
+            const state = captures[stream];
+            const kept = Math.min(chunk.length, options.maxBuffer - state.bytes);
+            if (kept > 0) {
+                state.chunks.push(Buffer.from(chunk.subarray(0, kept)));
+                state.bytes += kept;
+            }
+            if (kept < chunk.length) {
+                state.truncated = true;
+                if (cause === undefined) {
+                    failure = Object.assign(new RangeError(`${stream} maxBuffer length exceeded`), {
+                        code: 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER',
+                    });
+                    cancel('maxBuffer');
+                }
+            }
+            if (options.onOutput) {
+                const data = state.decoder.write(chunk);
+                if (data)
+                    options.onOutput({ stream, data });
+            }
+        };
+        const onStdout = (chunk) => capture('stdout', chunk);
+        const onStderr = (chunk) => capture('stderr', chunk);
+        child.stdout?.on('data', onStdout);
+        child.stderr?.on('data', onStderr);
+        child.once('error', (error) => {
+            failure ??= error;
+        });
+        child.once('close', (code, signal) => {
+            closed = true;
+            disposeAbort?.();
+            clearTimeout(deadline);
+            if (escalation !== undefined) {
+                clearTimeout(escalation);
+                // Pipes closing can precede a descendant which closed its copies.
+                // Force the owned group now instead of retaining its PID in a timer.
+                killTree(child, 'SIGKILL');
+            }
+            child.stdout?.off('data', onStdout);
+            child.stderr?.off('data', onStderr);
+            for (const stream of ['stdout', 'stderr']) {
+                const data = captures[stream].decoder.end();
+                if (data)
+                    options.onOutput?.({ stream, data });
+            }
+            const decodeCapture = (stream) => {
+                const state = captures[stream];
+                const bytes = Buffer.concat(state.chunks, state.bytes);
+                // Do not flush an incomplete UTF-8 character cut by our byte cap.
+                return state.truncated ? new StringDecoder('utf8').write(bytes) : bytes.toString('utf8');
+            };
+            const stdout = decodeCapture('stdout');
+            const stderr = decodeCapture('stderr');
+            if (!failure && cause === undefined && code === 0 && signal === null) {
+                resolve({ stdout, stderr });
+                return;
+            }
+            const error = failure ??
+                (cause === 'caller'
+                    ? Object.assign(new Error('The operation was aborted', { cause: options.signal?.reason }), {
+                        name: 'AbortError',
+                        code: 'ABORT_ERR',
+                    })
+                    : new Error(`Command failed: ${command}\n${stderr}`));
+            reject(Object.assign(error, {
+                stdout,
+                stderr,
+                stdoutTruncated: captures.stdout.truncated,
+                stderrTruncated: captures.stderr.truncated,
+                code: failure?.code ?? (cause === 'caller' ? 'ABORT_ERR' : code),
+                killed: cause !== undefined,
+                signal,
+                timedOut: cause === 'timeout',
+            }));
+        });
+        const deadline = setTimeout(() => cancel('timeout'), options.timeout);
+        deadline.unref?.();
+        if (options.signal) {
+            disposeAbort = subscribeToAbort(options.signal, () => cancel('caller'));
+            if (options.signal.aborted)
+                cancel('caller');
+        }
+    });
 }
 function isDangerousCommand(command) {
     return DANGEROUS_PATTERNS.some((pattern) => pattern.test(command));
@@ -167,6 +335,7 @@ export const BashTool = defineTool({
         // sandbox can be added later as an explicit
         // `SandboxExecOptions.workspaceRelativeCwd` field; the bash
         // builtin doesn't have that requirement today.
+        const onOutput = shellProgress(context.report);
         if (context.sandbox) {
             const result = await context.sandbox.exec('/bin/sh', ['-c', input.command], {
                 timeout: input.timeout,
@@ -181,21 +350,8 @@ export const BashTool = defineTool({
                 // durable transcript — so this is a progress signal, not a
                 // second copy of the output. `result.stdout` remains the
                 // answer the model is given.
-                onOutput: context.report
-                    ? ({ data }) => {
-                        const line = lastNonEmptyLine(data);
-                        if (line)
-                            context.report?.(line);
-                    }
-                    : undefined,
+                onOutput,
             });
-            if (result.timedOut) {
-                return {
-                    success: false,
-                    output: '',
-                    error: `Command timed out after ${input.timeout}ms`,
-                };
-            }
             // The sandbox reports when IT clipped a stream. Dropping those
             // flags meant the model saw a complete-looking result that had
             // silently lost its tail — and the kernel's own convention is
@@ -208,39 +364,30 @@ export const BashTool = defineTool({
                 result.stdout ? `STDOUT:\n${result.stdout}` : '',
                 result.stderr ? `STDERR:\n${result.stderr}` : '',
                 clipped.length > 0
-                    ? `[${clipped.join(' and ')} was truncated by the sandbox output cap — re-run with a filter (grep/head/tail) to see the rest]`
+                    ? `[${clipped.join(' and ')} was truncated by the sandbox output cap. The omitted output is unavailable in this result. Use a saved artifact or a read-only observation; do not repeat a state-changing action to recover its output.]`
                     : '',
             ]
                 .filter(Boolean)
                 .join('\n\n');
             return {
-                success: result.exitCode === 0,
+                success: !result.timedOut && result.exitCode === 0,
                 output: output || '(no output)',
                 data: {
                     exitCode: result.exitCode,
                     sandboxed: true,
+                    timedOut: result.timedOut,
                     stdoutTruncated: result.stdoutTruncated ?? false,
                     stderrTruncated: result.stderrTruncated ?? false,
                 },
-                error: result.exitCode !== 0 ? `Command exited with code ${result.exitCode}` : undefined,
+                error: result.timedOut
+                    ? `Command timed out after ${input.timeout}ms. Any captured output before the deadline is above.`
+                    : result.exitCode !== 0
+                        ? `Command exited with code ${result.exitCode}`
+                        : undefined,
             };
         }
-        // Thread the run/deadline signal into the child process. Without it
-        // a Stop tore down the model stream and left the command running,
-        // and the executor's deadline could only ever DETACH from the tool
-        // rather than end the work it started.
-        // `exec` REJECTS on a non-zero exit, on its own timeout, and on a
-        // kill — and the rejection carries `stdout`, `stderr`, `code` and
-        // `killed`. Letting it propagate threw all of that away: the registry
-        // turned the throw into a structured failure, so the model was told a
-        // command failed and not one word about how.
-        //
-        // That is the common case, not an edge one. A failing test run and a
-        // failing build are the two things an agent runs bash for most, and
-        // both exit non-zero WITH the output that explains why. The sandbox
-        // branch above already reports all of it; this branch did not, so the
-        // same command told the model two different amounts depending on where
-        // it happened to run.
+        // The owned runner retains stdout/stderr on non-zero exit and timeout,
+        // so a failed command still returns the evidence explaining its failure.
         // The inherited half is scrubbed; `context.env` is not. Inheritance is
         // implicit — nobody decided this command should see `process.env` — while
         // a `context.env` key is one a host wrote on purpose. See
@@ -248,12 +395,13 @@ export const BashTool = defineTool({
         // the sandbox, and for what it therefore does not catch.
         const inherited = scrubInheritedEnv();
         try {
-            const { stdout, stderr } = await execAsync(input.command, {
+            const { stdout, stderr } = await execHostShell(input.command, {
                 cwd: context.workingDirectory,
                 timeout: input.timeout,
                 env: { ...inherited.env, ...context.env },
                 maxBuffer: DEFAULT_BASH_MAX_BUFFER_BYTES,
                 signal: context.abortSignal,
+                onOutput,
             });
             return {
                 success: true,
@@ -266,17 +414,23 @@ export const BashTool = defineTool({
             // A caller-owned Stop is the caller's, not a command failure.
             if (context.abortSignal?.aborted)
                 throw err;
-            // `exec` reports its own timeout as a kill, and the distinction
-            // matters to the model: "ran out of time" is a different next move
-            // from "exited 1".
-            const timedOut = failure.killed === true && failure.signal === 'SIGTERM';
+            // A maxBuffer stop or an ordinary signal is not a deadline. The
+            // runner latches the first cancellation cause before signalling.
+            const timedOut = failure.timedOut === true;
             const exitCode = typeof failure.code === 'number' ? failure.code : undefined;
+            const clipped = [
+                failure.stdoutTruncated ? 'stdout' : '',
+                failure.stderrTruncated ? 'stderr' : '',
+            ].filter(Boolean);
             // Only on the failure path. A successful command did not need to know,
             // and appending this to every result would make the common case noisy
             // to buy nothing. A failing one is exactly where "authentication
             // failed" has to be distinguishable from "the variable was withheld".
             const output = [
                 formatShellOutput(failure.stdout, failure.stderr),
+                clipped.length > 0
+                    ? `[${clipped.join(' and ')} ${clipped.length === 1 ? 'was' : 'were'} truncated by the host output cap. The omitted output is unavailable in this result.]`
+                    : '',
                 describeWithheldEnv(inherited.dropped),
             ]
                 .filter(Boolean)
@@ -287,6 +441,8 @@ export const BashTool = defineTool({
                 data: {
                     ...(exitCode !== undefined ? { exitCode } : {}),
                     timedOut,
+                    stdoutTruncated: failure.stdoutTruncated ?? false,
+                    stderrTruncated: failure.stderrTruncated ?? false,
                     ...(failure.signal ? { signal: failure.signal } : {}),
                 },
                 error: timedOut