@nexrall/code-core 1.4.46 → 1.4.48

package/dist/agent/skills.d.ts

@@ -1,3 +1,10 @@
+export interface SkillWarning {
+    /** Absolute path of the SKILL.md / command file the problem was found in. */
+    file: string;
+    /** Skill name, when one could be determined. */
+    name: string;
+    message: string;
+}
 export interface Skill {
     name: string;
     description: string;
@@ -11,10 +18,33 @@ export interface Skill {
     disableModelInvocation: boolean;
     /** false → only the model may invoke it (auto-load only, not meant to be typed as a command). */
     userInvocable: boolean;
+    /** agentskills.io spec field — license name or reference to a bundled license file. Informational only. */
+    license?: string;
+    /** agentskills.io spec field — environment requirements (e.g. "Requires git, docker"). Informational only. */
+    compatibility?: string;
+    /** agentskills.io spec field — arbitrary author-supplied key/value metadata (from a nested `metadata:` block). */
+    metadata?: Record<string, string>;
+    /** agentskills.io spec field (experimental) — space-separated tool names the skill declares it needs. Not yet enforced as an allowlist; informational. */
+    allowedTools?: string[];
 }
-/** Discover all skills (project overrides global overrides plugin overrides builtin).
- *  Directory-style `.nexrall/skills/<name>/SKILL.md` beats a flat `.nexrall/commands/<name>.md`
- *  of the same name within the same precedence tier. */
+/**
+ * Discover all skills, with diagnostics.
+ *
+ * Precedence, most to least authoritative: project `.nexrall/skills` >
+ * project `.nexrall/commands` > project `.agents/skills` (cross-client) >
+ * global `.nexrall/commands` > global `.nexrall/skills` > global
+ * `.agents/skills` (cross-client) > plugin > builtin.
+ *
+ * The `.agents/skills` scans are always the weakest source within their tier
+ * — see the module comment above for why. Directory-style
+ * `.nexrall/skills/<name>/SKILL.md` beats a flat `.nexrall/commands/<name>.md`
+ * of the same name within the same precedence tier.
+ */
+export declare function loadSkillsWithWarnings(workDir: string): {
+    skills: Skill[];
+    warnings: SkillWarning[];
+};
+/** Discover all skills (project overrides global overrides plugin overrides builtin). See loadSkillsWithWarnings for the full precedence rule and diagnostics. */
 export declare function loadSkills(workDir: string): Skill[];
 export declare function findSkill(skills: Skill[], name: string): Skill | undefined;
 /** Skills the MODEL may auto-invoke via the use_skill tool (excludes disable-model-invocation:true ones). */
@@ -28,7 +58,7 @@ export declare function summariseSkills(skills: Skill[]): string;
  * substitution as slash commands — see commands/loader.ts#expandBody), then
  * prepend a short header pointing at the skill's own directory (if any) so
  * the model knows where to find supporting files it may need to read_file
- * on demand, mirroring Claude Code's "reference files from your SKILL.md"
+ * on demand, mirroring the spec's "reference files from your SKILL.md"
  * guidance without loading them into context up front.
  */
 export declare function expandSkill(skill: Skill, argString: string, workDir: string): string;

package/dist/agent/skills.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/agent/skills.ts"],"names":[],"mappings":"AA2CA,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpD,0IAA0I;IAC1I,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kHAAkH;IAClH,sBAAsB,EAAE,OAAO,CAAC;IAChC,iGAAiG;IACjG,aAAa,EAAE,OAAO,CAAC;CACxB;AAyID;;wDAEwD;AACxD,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,EAAE,CAanD;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAG1E;AAED,6GAA6G;AAC7G,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAE5D;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAE5D;AAED,oHAAoH;AACpH,wBAAgB,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAIvD;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAcpF"}
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/agent/skills.ts"],"names":[],"mappings":"AAyEA,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpD,0IAA0I;IAC1I,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kHAAkH;IAClH,sBAAsB,EAAE,OAAO,CAAC;IAChC,iGAAiG;IACjG,aAAa,EAAE,OAAO,CAAC;IACvB,2GAA2G;IAC3G,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8GAA8G;IAC9G,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kHAAkH;IAClH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,0JAA0J;IAC1J,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AA8LD;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAAC,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,CAsBrG;AAED,kKAAkK;AAClK,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,EAAE,CAEnD;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAG1E;AAED,6GAA6G;AAC7G,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAE5D;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAE5D;AAED,oHAAoH;AACpH,wBAAgB,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAIvD;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAcpF"}

package/dist/agent/skills.js

@@ -33,6 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadSkillsWithWarnings = loadSkillsWithWarnings;
 exports.loadSkills = loadSkills;
 exports.findSkill = findSkill;
 exports.autoInvokableSkills = autoInvokableSkills;
@@ -44,18 +45,19 @@ const path = __importStar(require("path"));
 const os = __importStar(require("os"));
 const index_1 = require("../plugins/index");
 const loader_1 = require("../commands/loader");
-function parseFrontmatter(raw) {
-    const m = /^\s*---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(raw);
-    if (!m)
-        return { meta: {}, body: raw.trim() };
-    const meta = {};
-    for (const line of m[1].split(/\r?\n/)) {
-        const kv = /^([A-Za-z0-9_-]+)\s*:\s*(.*)$/.exec(line.trim());
-        if (kv)
-            meta[kv[1].toLowerCase()] = kv[2].trim().replace(/^["']|["']$/g, '');
-    }
-    return { meta, body: (m[2] ?? '').trim() };
-}
+const frontmatter_1 = require("../util/frontmatter");
+/** Frontmatter keys this parser understands, for typo/unrecognised-key detection (see SkillWarning). */
+const KNOWN_META_KEYS = new Set([
+    'name', 'description', 'model', 'mode',
+    'disable-model-invocation', 'user-invocable',
+    'license', 'compatibility', 'metadata', 'allowed-tools',
+]);
+// agentskills.io's `name` constraint: 1-64 chars, lowercase alphanumeric and
+// hyphens, no leading/trailing/consecutive hyphens. Validated LENIENTLY here
+// (warn, still load) per the spec's own client-implementation guidance —
+// rejecting a skill outright over a cosmetic name issue would be a worse
+// failure mode than a slightly-off name that still works.
+const SPEC_NAME_RE = /^[a-z0-9]+(-[a-z0-9]+)*$/;
 function parseBool(v, fallback) {
     if (v === undefined)
         return fallback;
@@ -66,7 +68,14 @@ function parseBool(v, fallback) {
         return false;
     return fallback;
 }
-function toSkill(meta, body, name, source, dir) {
+/** Space- (or comma-) separated tool list, same leniency as agentTypes.ts's parseToolList. */
+function parseSpaceList(v) {
+    if (!v)
+        return undefined;
+    const items = v.split(/[,\s]+/).map((t) => t.trim()).filter(Boolean);
+    return items.length ? items : undefined;
+}
+function toSkill(meta, body, name, source, dir, nested) {
     const model = ['turbo', 'pro', 'ultra'].find((x) => x === (meta.model ?? '').toLowerCase());
     return {
         name,
@@ -78,13 +87,51 @@ function toSkill(meta, body, name, source, dir) {
         dir,
         disableModelInvocation: parseBool(meta['disable-model-invocation'], false),
         userInvocable: parseBool(meta['user-invocable'], true),
+        license: meta.license || undefined,
+        compatibility: meta.compatibility || undefined,
+        metadata: nested?.metadata,
+        allowedTools: parseSpaceList(meta['allowed-tools']),
     };
 }
+/**
+ * Lenient validation warnings for a skill's frontmatter — never blocks loading, only reported.
+ *
+ * `rawName` is the name BEFORE lowercasing (whatever the frontmatter or the
+ * directory/file actually said) — validated against the spec's naming rule,
+ * which is itself case-sensitive ("lowercase ... only" is a real constraint,
+ * not cosmetic). `effectiveName` is the lowercased name used as the map key
+ * and `Skill.name` — using it here instead would make an uppercase name
+ * always "pass" validation simply because it had already been normalised
+ * away by the time this function saw it.
+ */
+function validateSkillMeta(meta, rawName, effectiveName, dirName, file, warnings) {
+    if (!warnings)
+        return;
+    if (!SPEC_NAME_RE.test(rawName)) {
+        warnings.push({
+            file, name: effectiveName,
+            message: `name "${rawName}" does not match the agentskills.io convention (lowercase letters, numbers, and single hyphens only) — loaded anyway, but other clients reading this skill may warn or reject it.`,
+        });
+    }
+    else if (rawName.length > 64) {
+        warnings.push({ file, name: effectiveName, message: `name is ${rawName.length} characters — the spec caps this at 64. Loaded anyway.` });
+    }
+    if (dirName !== undefined && meta.name && meta.name.trim().toLowerCase() !== dirName.toLowerCase()) {
+        warnings.push({
+            file, name: effectiveName,
+            message: `frontmatter name "${meta.name}" does not match its directory name "${dirName}" — the spec requires them to match for cross-client compatibility. Loaded anyway, using the frontmatter name.`,
+        });
+    }
+    const strayKeys = Object.keys(meta).filter((k) => !KNOWN_META_KEYS.has(k));
+    if (strayKeys.length) {
+        warnings.push({ file, name: effectiveName, message: `has unrecognised frontmatter key(s): ${strayKeys.join(', ')} — these are ignored.` });
+    }
+}
 // Legacy flat-file skills: .nexrall/commands/<name>.md (and plugin commands/).
 // Kept as its own loader (rather than merged into loadSkillDir below) since the
 // naming/precedence rule ("skill directory wins over a same-name flat command")
 // requires knowing about both shapes before the caller merges them.
-function loadFlatCommandDir(dir, source, into) {
+function loadFlatCommandDir(dir, source, into, warnings) {
     let files;
     try {
         files = fs.readdirSync(dir).filter((f) => f.endsWith('.md'));
@@ -93,23 +140,27 @@ function loadFlatCommandDir(dir, source, into) {
         return;
     }
     for (const file of files) {
+        const full = path.join(dir, file);
         try {
-            const raw = fs.readFileSync(path.join(dir, file), 'utf-8');
-            const { meta, body } = parseFrontmatter(raw);
-            const name = (meta.name || path.basename(file, '.md')).trim().toLowerCase();
+            const raw = fs.readFileSync(full, 'utf-8');
+            const { meta, body } = (0, frontmatter_1.parseFrontmatter)(raw);
+            const rawName = (meta.name || path.basename(file, '.md')).trim();
+            const name = rawName.toLowerCase();
             if (!name)
                 continue;
             if (source !== 'project' && into.has(name))
                 continue; // earlier tiers win
+            validateSkillMeta(meta, rawName, name, undefined, full, warnings);
             into.set(name, toSkill(meta, body, name, source));
         }
-        catch {
-            /* skip malformed */
+        catch (err) {
+            warnings?.push({ file: full, name: path.basename(file, '.md'), message: `could not be read or parsed (${err.message}) — skipped.` });
         }
     }
 }
 // Directory-style skills: .nexrall/skills/<name>/SKILL.md (+ optional supporting files).
-function loadSkillDir(root, source, into) {
+// Also used for the cross-client `.agents/skills/<name>/SKILL.md` convention — same shape.
+function loadSkillDir(root, source, into, warnings) {
     let entries;
     try {
         entries = fs.readdirSync(root, { withFileTypes: true });
@@ -131,8 +182,9 @@ function loadSkillDir(root, source, into) {
         }
         try {
             const raw = fs.readFileSync(skillFile, 'utf-8');
-            const { meta, body } = parseFrontmatter(raw);
-            const name = (meta.name || entry.name).trim().toLowerCase();
+            const { meta, body, nested } = (0, frontmatter_1.parseFrontmatter)(raw);
+            const rawName = (meta.name || entry.name).trim();
+            const name = rawName.toLowerCase();
             if (!name)
                 continue;
             // A directory-style skill always wins over an earlier flat command of
@@ -140,10 +192,11 @@ function loadSkillDir(root, source, into) {
             // project tier always wins outright regardless of load order.
             if (source !== 'project' && into.has(name))
                 continue;
-            into.set(name, toSkill(meta, body, name, source, skillDir));
+            validateSkillMeta(meta, rawName, name, entry.name, skillFile, warnings);
+            into.set(name, toSkill(meta, body, name, source, skillDir, nested));
         }
-        catch {
-            /* skip malformed */
+        catch (err) {
+            warnings?.push({ file: skillFile, name: entry.name, message: `could not be read or parsed (${err.message}) — skipped.` });
         }
     }
 }
@@ -187,25 +240,45 @@ const BUILTIN_SKILLS = [
         ].join('\n'),
     },
 ];
-/** Discover all skills (project overrides global overrides plugin overrides builtin).
- *  Directory-style `.nexrall/skills/<name>/SKILL.md` beats a flat `.nexrall/commands/<name>.md`
- *  of the same name within the same precedence tier. */
-function loadSkills(workDir) {
+/**
+ * Discover all skills, with diagnostics.
+ *
+ * Precedence, most to least authoritative: project `.nexrall/skills` >
+ * project `.nexrall/commands` > project `.agents/skills` (cross-client) >
+ * global `.nexrall/commands` > global `.nexrall/skills` > global
+ * `.agents/skills` (cross-client) > plugin > builtin.
+ *
+ * The `.agents/skills` scans are always the weakest source within their tier
+ * — see the module comment above for why. Directory-style
+ * `.nexrall/skills/<name>/SKILL.md` beats a flat `.nexrall/commands/<name>.md`
+ * of the same name within the same precedence tier.
+ */
+function loadSkillsWithWarnings(workDir) {
     const out = new Map();
-    // Flat commands first (so a same-tier skill directory below can override them).
-    loadFlatCommandDir(path.join(workDir, '.nexrall', 'commands'), 'project', out);
-    loadSkillDir(path.join(workDir, '.nexrall', 'skills'), 'project', out);
-    loadFlatCommandDir(path.join(os.homedir(), '.nexrall', 'commands'), 'global', out);
-    loadSkillDir(path.join(os.homedir(), '.nexrall', 'skills'), 'global', out);
+    const warnings = [];
+    // Project tier is last-write-wins (see loadSkillDir/loadFlatCommandDir's
+    // `source !== 'project'` guard), so the WEAKEST project source loads first.
+    loadSkillDir(path.join(workDir, '.agents', 'skills'), 'project', out, warnings);
+    loadFlatCommandDir(path.join(workDir, '.nexrall', 'commands'), 'project', out, warnings);
+    loadSkillDir(path.join(workDir, '.nexrall', 'skills'), 'project', out, warnings);
+    // Global tier is first-write-wins (the guard skips a repeat name), so the
+    // STRONGEST global source loads first, and .agents/skills loads last.
+    loadFlatCommandDir(path.join(os.homedir(), '.nexrall', 'commands'), 'global', out, warnings);
+    loadSkillDir(path.join(os.homedir(), '.nexrall', 'skills'), 'global', out, warnings);
+    loadSkillDir(path.join(os.homedir(), '.agents', 'skills'), 'global', out, warnings);
     for (const dir of (0, index_1.pluginAssetDirs)(workDir, 'commands'))
-        loadFlatCommandDir(dir, 'plugin', out);
+        loadFlatCommandDir(dir, 'plugin', out, warnings);
     for (const dir of (0, index_1.pluginAssetDirs)(workDir, 'skills'))
-        loadSkillDir(dir, 'plugin', out);
+        loadSkillDir(dir, 'plugin', out, warnings);
     for (const skill of BUILTIN_SKILLS) {
         if (!out.has(skill.name))
             out.set(skill.name, skill);
     }
-    return [...out.values()];
+    return { skills: [...out.values()], warnings };
+}
+/** Discover all skills (project overrides global overrides plugin overrides builtin). See loadSkillsWithWarnings for the full precedence rule and diagnostics. */
+function loadSkills(workDir) {
+    return loadSkillsWithWarnings(workDir).skills;
 }
 function findSkill(skills, name) {
     const want = name.replace(/^\//, '').trim().toLowerCase();
@@ -231,7 +304,7 @@ function summariseSkills(skills) {
  * substitution as slash commands — see commands/loader.ts#expandBody), then
  * prepend a short header pointing at the skill's own directory (if any) so
  * the model knows where to find supporting files it may need to read_file
- * on demand, mirroring Claude Code's "reference files from your SKILL.md"
+ * on demand, mirroring the spec's "reference files from your SKILL.md"
  * guidance without loading them into context up front.
  */
 function expandSkill(skill, argString, workDir) {

package/dist/agent/trust.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Which trust-sensitive files actually exist in `dir`, so a confirmation
+ * prompt can tell the user what THIS folder will do rather than describing
+ * risks in the abstract. Ordered most- to least-dangerous.
+ */
+export declare function detectTrustSignals(dir: string): string[];
+//# sourceMappingURL=trust.d.ts.map

package/dist/agent/trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../../src/agent/trust.ts"],"names":[],"mappings":"AAqDA;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAkExD"}

package/dist/agent/trust.js

@@ -0,0 +1,163 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectTrustSignals = detectTrustSignals;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+// ─── Workspace Trust Signals (shared) ─────────────────────────────────────
+//
+// Opening a folder for an agent to work in is not a passive act. Before the
+// user types anything, a session can already read and act on files found in
+// that folder:
+//
+//   • `.nexrall/mcp.json` declares MCP servers, and connecting to a stdio
+//     server runs `spawn(server.command, server.args)` — arbitrary command
+//     execution, straight from a file in the repo (see mcp/manager.ts /
+//     mcp/client.ts).
+//   • `.nexrall/plugins/` may contribute their OWN `mcp.json`/`hooks.json`
+//     (see plugins/index.ts's pluginMcpServers/pluginHooks) — same risk
+//     class as a bare mcp.json, just one hop further away.
+//   • `nexrall.md` is injected into the system prompt as trusted project
+//     instructions, so its contents steer the agent for the whole session.
+//   • `.nexrall/{skills,commands}` define playbooks the agent will follow,
+//     and `.nexrall/permissions.json` can pre-approve tool calls that would
+//     otherwise prompt.
+//   • `.agents/skills/` is the same kind of playbook, discovered from the
+//     agentskills.io cross-client convention (see agent/skills.ts) rather
+//     than a Nexrall-specific path — worth its own line since it may have
+//     been authored for a different client entirely.
+//
+// So `git clone` of a hostile repo followed by pointing an agent at it is
+// enough to execute attacker-chosen commands before a human reviews anything.
+//
+// This module is the shared, pure "what would this folder do" detector. The
+// CLI has its own longstanding copy (packages/cli/src/trust.ts) — kept
+// independent there rather than migrated onto this one, so a change here
+// can never silently alter the CLI's own trust-prompt wording/behaviour or
+// its own dedicated test suite. Any NEW client (e.g. the desktop app) should
+// use this shared copy instead of hand-rolling a third one.
+//
+// Deliberately stateless: nothing here reads or writes any trust STORE.
+// Whether/how a client remembers "already confirmed this session" is the
+// caller's job (see e.g. desktop's main/trustGate.ts) — this function only
+// ever reports what is true of the folder RIGHT NOW.
+/** Does the project settings file bind plugin aliases to remote repos? */
+function declaresPluginSources(dir) {
+    try {
+        const raw = fs.readFileSync(path.join(dir, '.nexrall', 'settings.json'), 'utf-8');
+        const obj = JSON.parse(raw);
+        const s = obj.pluginSources;
+        return Boolean(s && typeof s === 'object' && !Array.isArray(s) && Object.keys(s).length > 0);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Which trust-sensitive files actually exist in `dir`, so a confirmation
+ * prompt can tell the user what THIS folder will do rather than describing
+ * risks in the abstract. Ordered most- to least-dangerous.
+ */
+function detectTrustSignals(dir) {
+    const signals = [];
+    const exists = (...p) => {
+        try {
+            return fs.existsSync(path.join(dir, ...p));
+        }
+        catch {
+            return false;
+        }
+    };
+    // Code-executing first — these can run local commands before the user
+    // types anything, so they are what the decision really hinges on.
+    if (exists('.nexrall', 'mcp.json')) {
+        signals.push('.nexrall/mcp.json — can start MCP servers (runs local commands)');
+    }
+    if (exists('.nexrall', 'plugins')) {
+        // Plugins are scanned from the workspace and may contribute their own MCP
+        // servers/hooks (see plugins/index.ts → pluginMcpServers/pluginHooks), so
+        // this is in the same risk class as mcp.json rather than a cosmetic add-on.
+        signals.push('.nexrall/plugins/ — project plugins (may add MCP servers or hooks)');
+    }
+    // Then things that widen what the agent may do without asking.
+    if (exists('.nexrall', 'permissions.json')) {
+        signals.push('.nexrall/permissions.json — pre-approved tool permissions');
+    }
+    if (exists('.nexrall', 'settings.json')) {
+        // Called out separately when the file declares plugin sources: those bind
+        // a short alias to a remote repo, so installing that alias would fetch
+        // whatever the REPOSITORY chose. Installing still needs a human and its
+        // own confirmation — nothing is fetched from a declaration alone — but the
+        // user should know the repo is trying to name what they install. A
+        // settings.json can also carry a project's own `hooks` config, which runs
+        // shell commands automatically around tool calls — worth flagging here too.
+        let hasHooks = false;
+        try {
+            const raw = fs.readFileSync(path.join(dir, '.nexrall', 'settings.json'), 'utf-8');
+            const obj = JSON.parse(raw);
+            hasHooks = Boolean(obj.hooks && typeof obj.hooks === 'object' && Object.keys(obj.hooks).length > 0);
+        }
+        catch { /* absent or malformed — treated as no hooks declared */ }
+        const bits = ['.nexrall/settings.json — project settings and permission rules'];
+        if (declaresPluginSources(dir))
+            bits.push('declares plugin sources (aliases for remote plugin repos)');
+        if (hasHooks)
+            bits.push('runs hooks (shell commands) automatically around tool calls');
+        signals.push(bits.join(', '));
+    }
+    // Then things that steer the agent's behaviour.
+    if (exists('nexrall.md')) {
+        signals.push('nexrall.md — project instructions added to the agent\u2019s prompt');
+    }
+    if (exists('.nexrall', 'skills')) {
+        signals.push('.nexrall/skills/ — custom agent playbooks');
+    }
+    if (exists('.nexrall', 'commands')) {
+        signals.push('.nexrall/commands/ — custom slash commands');
+    }
+    if (exists('.nexrall', 'agents')) {
+        signals.push('.nexrall/agents/ — custom sub-agent definitions');
+    }
+    if (exists('.agents', 'skills')) {
+        // Same risk class as .nexrall/skills/ (a playbook is instructions the
+        // agent follows, not code it executes) — called out separately because
+        // this path is the agentskills.io cross-client convention, so a skill
+        // here may have been authored for/by a DIFFERENT tool than the one
+        // asking to trust this folder right now.
+        signals.push('.agents/skills/ — cross-client agent playbooks (agentskills.io convention)');
+    }
+    return signals;
+}
+//# sourceMappingURL=trust.js.map

package/dist/api/client.d.ts

@@ -131,6 +131,36 @@ export interface DescribeAttachmentResult {
 }
 export declare function describeAttachment(kind: 'image' | 'pdf', data: string, mediaType?: string, name?: string): Promise<DescribeAttachmentResult>;
 export declare function getBalance(): Promise<number>;
+export interface UsageDailyDay {
+    date: string;
+    total: number;
+    byType: Record<string, number>;
+}
+export interface UsageDailyResult {
+    days: UsageDailyDay[];
+    totalSpent: number;
+}
+/**
+ * Day-by-day spend breakdown, same endpoint the web app's Settings > Usage
+ * chart reads (backend/routes/user.js's /usage-daily). Used by Nexrall Work's
+ * own Settings > Usage panel so both surfaces show the identical numbers.
+ */
+export declare function getUsageDaily(days?: number): Promise<UsageDailyResult>;
 export declare function exchangeVscodeCode(code: string): Promise<AuthConfig>;
 export declare function login(email: string, password: string): Promise<AuthConfig>;
+export interface UserProfile {
+    id: string | number;
+    email: string;
+    name?: string;
+    phone?: string;
+    avatar_url?: string;
+    username?: string;
+    bio?: string;
+}
+/**
+ * Same GET /api/user/profile the web app's Settings > Profile section reads.
+ * Used by Nexrall Work's own Settings > Profile panel so both surfaces show
+ * identical account data.
+ */
+export declare function getUserProfile(): Promise<UserProfile>;
 //# sourceMappingURL=client.d.ts.map

package/dist/api/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAA8B,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAiErH,eAAO,MAAM,QAAQ,QAAmB,CAAC;AAIzC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5D,OAAO,EAAE,CAAC,EAAE,EACZ,UAAU,EAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GACtD,CAAC,EAAE,CAeL;AAiGD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACnC,oFAAoF;IACpF,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACjG,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6IAA6I;IAC7I,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;;;;;;;;OAeG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AA8ID,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,GAC7B,OAAO,CAAC,OAAO,CAAC,CAkmClB;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU9D;AAID;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAYxD;AAeD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,OAAO,GAAG,KAAK,EACrB,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,wBAAwB,CAAC,CAmCnC;AAID,wBAAsB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CA0BlD;AAID,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA+B1E;AAID,wBAAsB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA0BhF"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAA8B,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAiErH,eAAO,MAAM,QAAQ,QAAmB,CAAC;AAIzC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5D,OAAO,EAAE,CAAC,EAAE,EACZ,UAAU,EAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GACtD,CAAC,EAAE,CAeL;AAiGD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACnC,oFAAoF;IACpF,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACjG,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6IAA6I;IAC7I,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;;;;;;;;OAeG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AA8ID,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,GAC7B,OAAO,CAAC,OAAO,CAAC,CAkmClB;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU9D;AAID;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAYxD;AAeD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,OAAO,GAAG,KAAK,EACrB,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,wBAAwB,CAAC,CAmCnC;AAID,wBAAsB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CA0BlD;AAID,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,aAAa,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,SAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAyBxE;AAID,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA+B1E;AAID,wBAAsB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA0BhF;AAID,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC,CAqB3D"}

package/dist/api/client.js

@@ -10,8 +10,10 @@ exports.cancelTurn = cancelTurn;
 exports.revokeRefreshToken = revokeRefreshToken;
 exports.describeAttachment = describeAttachment;
 exports.getBalance = getBalance;
+exports.getUsageDaily = getUsageDaily;
 exports.exchangeVscodeCode = exchangeVscodeCode;
 exports.login = login;
+exports.getUserProfile = getUserProfile;
 const eventsource_parser_1 = require("eventsource-parser");
 const node_fetch_1 = __importDefault(require("node-fetch"));
 const crypto_1 = require("crypto");
@@ -1544,6 +1546,33 @@ async function getBalance() {
     const data = (await response.json());
     return typeof data.balance === 'number' ? data.balance : 0;
 }
+/**
+ * Day-by-day spend breakdown, same endpoint the web app's Settings > Usage
+ * chart reads (backend/routes/user.js's /usage-daily). Used by Nexrall Work's
+ * own Settings > Usage panel so both surfaces show the identical numbers.
+ */
+async function getUsageDaily(days = 30) {
+    const fetchOnce = () => (0, node_fetch_1.default)(`${exports.API_BASE}/api/user/usage-daily?days=${days}`, { method: 'GET', headers: authHeaders() });
+    let response = await fetchOnce();
+    if (response.status === 401 || response.status === 403) {
+        const body = await response.text().catch(() => '');
+        if (isExpiredTokenResponse(response.status, body) && await refreshAccessToken()) {
+            response = await fetchOnce();
+        }
+        else {
+            throw new Error(`API error ${response.status}: ${body}`);
+        }
+    }
+    if (!response.ok) {
+        const errText = await response.text();
+        throw new Error(`API error ${response.status}: ${errText}`);
+    }
+    const data = (await response.json());
+    return {
+        days: Array.isArray(data.days) ? data.days : [],
+        totalSpent: typeof data.totalSpent === 'number' ? data.totalSpent : 0,
+    };
+}
 // ─── VSCode OAuth ─────────────────────────────────────────────────────────────
 async function exchangeVscodeCode(code) {
     const response = await (0, node_fetch_1.default)(`${exports.API_BASE}/api/auth/vscode-exchange`, {
@@ -1596,4 +1625,27 @@ async function login(email, password) {
         email: data.email ?? email,
     };
 }
+/**
+ * Same GET /api/user/profile the web app's Settings > Profile section reads.
+ * Used by Nexrall Work's own Settings > Profile panel so both surfaces show
+ * identical account data.
+ */
+async function getUserProfile() {
+    const fetchOnce = () => (0, node_fetch_1.default)(`${exports.API_BASE}/api/user/profile`, { method: 'GET', headers: authHeaders() });
+    let response = await fetchOnce();
+    if (response.status === 401 || response.status === 403) {
+        const body = await response.text().catch(() => '');
+        if (isExpiredTokenResponse(response.status, body) && await refreshAccessToken()) {
+            response = await fetchOnce();
+        }
+        else {
+            throw new Error(`API error ${response.status}: ${body}`);
+        }
+    }
+    if (!response.ok) {
+        const errText = await response.text();
+        throw new Error(`API error ${response.status}: ${errText}`);
+    }
+    return (await response.json());
+}
 //# sourceMappingURL=client.js.map

package/dist/checkpoint/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/checkpoint/manager.ts"],"names":[],"mappings":"AA4CA,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAQD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAMlE;AAyBD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,OAAO,EAAE,OAAO,CAAC;IACjB,8FAA8F;IAC9F,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,sGAAsG;IACtG,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kFAAkF;IAClF,YAAY,EAAE,MAAM,CAAC;IACrB,6FAA6F;IAC7F,SAAS,EAAE,MAAM,CAAC;IAClB,6FAA6F;IAC7F,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AA6BD,qBAAa,iBAAiB;IAWhB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAVpC,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC;;;;OAIG;gBAC0B,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;IAa5D,OAAO,CAAC,OAAO;IAIf;;;OAGG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAcpD;;;;;OAKG;IACH,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IA8BxE;;;;;;;OAOG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAQxC,OAAO,CAAC,iBAAiB;IAiBzB,0FAA0F;IAC1F,UAAU,IAAI,IAAI;IAWlB,IAAI,IAAI,iBAAiB,EAAE;IAY3B,cAAc,IAAI,OAAO;IAIzB;;;;;OAKG;IACH,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;IA0BnD,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,WAAW;IAuBnB,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,KAAK;IAOb,OAAO,CAAC,YAAY;CAkCrB"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/checkpoint/manager.ts"],"names":[],"mappings":"AA+CA,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAQD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAMlE;AA4BD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,OAAO,EAAE,OAAO,CAAC;IACjB,8FAA8F;IAC9F,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,sGAAsG;IACtG,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kFAAkF;IAClF,YAAY,EAAE,MAAM,CAAC;IACrB,6FAA6F;IAC7F,SAAS,EAAE,MAAM,CAAC;IAClB,6FAA6F;IAC7F,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AA6BD,qBAAa,iBAAiB;IAWhB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAVpC,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC;;;;OAIG;gBAC0B,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;IAa5D,OAAO,CAAC,OAAO;IAIf;;;OAGG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAcpD;;;;;OAKG;IACH,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IA8BxE;;;;;;;OAOG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAQxC,OAAO,CAAC,iBAAiB;IAiBzB,0FAA0F;IAC1F,UAAU,IAAI,IAAI;IAWlB,IAAI,IAAI,iBAAiB,EAAE;IAY3B,cAAc,IAAI,OAAO;IAIzB;;;;;OAKG;IACH,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;IA0BnD,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,WAAW;IAuBnB,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,KAAK;IAOb,OAAO,CAAC,YAAY;CAkCrB"}

package/dist/checkpoint/manager.js

@@ -68,6 +68,9 @@ const MAX_SNAPSHOT_BYTES = 2 * 1024 * 1024; // 2 MB/file — larger files are no
 const MAX_PERSISTED_TURNS = 50; // pruned oldest-first on commit
 const MUTATING_TOOLS = new Set([
     'write_file',
+    'write_docx',
+    'write_xlsx',
+    'write_pptx',
     'edit_file',
     'multi_edit',
     'delete_file',
@@ -99,6 +102,9 @@ function str(v) {
 function affectedPaths(name, input) {
     switch (name) {
         case 'write_file':
+        case 'write_docx':
+        case 'write_xlsx':
+        case 'write_pptx':
         case 'edit_file':
         case 'multi_edit':
         case 'delete_file':

package/dist/commands/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/commands/loader.ts"],"names":[],"mappings":"AA6BA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;CACrD;AAiFD,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CASjE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAG7F;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAuCnF;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3F"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/commands/loader.ts"],"names":[],"mappings":"AA8BA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;CACrD;AAsED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CASjE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAG7F;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAuCnF;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3F"}