@opengeni/contracts 5.5.0 → 5.5.2-canary.40656248492001

package/dist/{chunk-5Q54VCCH.js → chunk-SHO4YO4B.js}

@@ -1,3 +1,7 @@
+import {
+  OPENGENI_SLACK_REST_USER_SCOPES
+} from "./chunk-PUIUXIOL.js";
+
 // src/slack-bot-scopes.ts
 var OPENGENI_SLACK_BOT_REQUIRED_SCOPES = [
   "app_mentions:read",
@@ -26,9 +30,14 @@ var OPENGENI_SLACK_BOT_SEARCH_SCOPES = [
 var OPENGENI_SLACK_BOT_REQUESTED_SCOPES = [
   ...OPENGENI_SLACK_BOT_REQUIRED_SCOPES,
   OPENGENI_SLACK_REACTION_REQUIRED_SCOPE,
-  OPENGENI_SLACK_FILE_UPLOAD_REQUIRED_SCOPE,
-  ...OPENGENI_SLACK_BOT_SEARCH_SCOPES
+  OPENGENI_SLACK_FILE_UPLOAD_REQUIRED_SCOPE
 ];
+function openGeniSlackBotRequestedScopes(mode = "limited") {
+  return [
+    ...OPENGENI_SLACK_BOT_REQUESTED_SCOPES,
+    ...mode === "full" ? OPENGENI_SLACK_BOT_SEARCH_SCOPES : []
+  ];
+}
 var OPENGENI_SLACK_BOT_EVENTS = [
   "app_home_opened",
   "app_mention",
@@ -38,33 +47,7 @@ var OPENGENI_SLACK_BOT_EVENTS = [
   "message.mpim",
   "reaction_added"
 ];
-var OPENGENI_SLACK_MCP_USER_SCOPES = [
-  "search:read.public",
-  "search:read.private",
-  "search:read.mpim",
-  "search:read.im",
-  "search:read.files",
-  "files:read",
-  "emoji:read",
-  "search:read.users",
-  "chat:write",
-  "channels:history",
-  "groups:history",
-  "mpim:history",
-  "im:history",
-  "channels:write",
-  "groups:write",
-  "im:write",
-  "mpim:write",
-  "reactions:write",
-  "canvases:read",
-  "canvases:write",
-  "users:read",
-  "users:read.email",
-  "channels:read",
-  "groups:read",
-  "mpim:read"
-];
+var OPENGENI_SLACK_MCP_USER_SCOPES = OPENGENI_SLACK_REST_USER_SCOPES;
 var OPENGENI_MANAGED_PUBLIC_BASE_URL = "https://app.opengeni.ai";
 function normalizedSlackManifestText(value, fallback, label, maxLength) {
   const normalized = value?.trim() || fallback;
@@ -94,17 +77,17 @@ function normalizedSlackManifestBaseUrl(publicBaseUrl) {
 }
 function buildOpenGeniSlackBotManifest(publicBaseUrl, options = {}) {
   const baseUrl = normalizedSlackManifestBaseUrl(publicBaseUrl);
-  const appName = normalizedSlackManifestText(options.appName, "OpenGeni", "app name", 35);
+  const appName = normalizedSlackManifestText(options.appName, "Opengeni", "app name", 35);
   const botDisplayName = normalizedSlackManifestText(
     options.botDisplayName,
-    "OpenGeni",
+    "Opengeni",
     "bot display name",
     80
   );
   const slashCommand = normalizedSlackCommand(options.slashCommand);
   const shortcutName = normalizedSlackManifestText(
     options.shortcutName,
-    "Open in OpenGeni",
+    "Open in Opengeni",
     "shortcut name",
     35
   );
@@ -120,7 +103,7 @@ function buildOpenGeniSlackBotManifest(publicBaseUrl, options = {}) {
       slash_commands: [
         {
           command: slashCommand,
-          description: "Start an OpenGeni task in this channel",
+          description: "Start an Opengeni task in this channel",
           should_escape: false,
           url: `${baseUrl}/v1/integrations/slack/commands`
         }
@@ -128,7 +111,7 @@ function buildOpenGeniSlackBotManifest(publicBaseUrl, options = {}) {
       shortcuts: [
         {
           callback_id: "opengeni_message",
-          description: "Start an OpenGeni task from this Slack message",
+          description: "Start an Opengeni task from this Slack message",
           name: shortcutName,
           type: "message"
         }
@@ -140,7 +123,7 @@ function buildOpenGeniSlackBotManifest(publicBaseUrl, options = {}) {
         `${baseUrl}/v1/integrations/slack/callback`
       ],
       scopes: {
-        bot: [...OPENGENI_SLACK_BOT_REQUESTED_SCOPES],
+        bot: openGeniSlackBotRequestedScopes(options.accessMode),
         user: [...OPENGENI_SLACK_MCP_USER_SCOPES]
       }
     },
@@ -199,6 +182,7 @@ export {
   OPENGENI_SLACK_FILE_UPLOAD_REQUIRED_SCOPE,
   OPENGENI_SLACK_BOT_SEARCH_SCOPES,
   OPENGENI_SLACK_BOT_REQUESTED_SCOPES,
+  openGeniSlackBotRequestedScopes,
   OPENGENI_SLACK_BOT_EVENTS,
   OPENGENI_SLACK_MCP_USER_SCOPES,
   OPENGENI_MANAGED_PUBLIC_BASE_URL,
@@ -211,4 +195,4 @@ export {
   hasOpenGeniSlackReactionScope,
   evaluateOpenGeniSlackBotScopes
 };
-//# sourceMappingURL=chunk-5Q54VCCH.js.map
+//# sourceMappingURL=chunk-SHO4YO4B.js.map

package/dist/chunk-SHO4YO4B.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/slack-bot-scopes.ts"],"sourcesContent":["import { OPENGENI_SLACK_REST_USER_SCOPES } from \"./slack-rest-mcp\";\n\nexport const OPENGENI_SLACK_BOT_REQUIRED_SCOPES = [\n  \"app_mentions:read\",\n  \"canvases:read\",\n  \"channels:history\",\n  \"channels:read\",\n  \"chat:write\",\n  \"commands\",\n  \"files:read\",\n  \"groups:history\",\n  \"groups:read\",\n  \"im:history\",\n  \"im:read\",\n  \"im:write\",\n  \"mpim:history\",\n  \"mpim:read\",\n  \"users:read\",\n] as const;\n\n/** Read-only scope needed only for the optional emoji-reaction summon surface. */\nexport const OPENGENI_SLACK_REACTION_REQUIRED_SCOPE = \"reactions:read\" as const;\n\n/** Optional grant for explicit retained-file delivery to a task's Slack thread. */\nexport const OPENGENI_SLACK_FILE_UPLOAD_REQUIRED_SCOPE = \"files:write\" as const;\n\n/**\n * Bot-token search scopes for Slack's Real-time Search API\n * (`assistant.search.context`). Slack accepts these as BOT scopes, so\n * workspace-wide public search runs under the bot identity and never needs a\n * human proxy token. Private-channel, DM, and MPIM search remain user-token\n * only and belong exclusively to the personal hosted-MCP grant.\n */\nexport const OPENGENI_SLACK_BOT_SEARCH_SCOPES = [\n  \"search:read.public\",\n  \"search:read.files\",\n  \"search:read.users\",\n] as const;\n\n/**\n * Scopes requested by the managed and generated self-hosted manifests.\n *\n * `reactions:read`, `files:write`, and the bot search scopes are not part of the\n * base eligibility contract: legacy installations may continue using existing\n * Slack interactions and tools while the reaction setting stays disabled, bot\n * search and file delivery stay unavailable, and the tools ask an admin to reinstall.\n */\nexport const OPENGENI_SLACK_BOT_REQUESTED_SCOPES = [\n  ...OPENGENI_SLACK_BOT_REQUIRED_SCOPES,\n  OPENGENI_SLACK_REACTION_REQUIRED_SCOPE,\n  OPENGENI_SLACK_FILE_UPLOAD_REQUIRED_SCOPE,\n] as const;\n\nexport function openGeniSlackBotRequestedScopes(mode: \"limited\" | \"full\" = \"limited\"): string[] {\n  return [\n    ...OPENGENI_SLACK_BOT_REQUESTED_SCOPES,\n    ...(mode === \"full\" ? OPENGENI_SLACK_BOT_SEARCH_SCOPES : []),\n  ];\n}\n\nexport const OPENGENI_SLACK_BOT_EVENTS = [\n  \"app_home_opened\",\n  \"app_mention\",\n  \"message.channels\",\n  \"message.groups\",\n  \"message.im\",\n  \"message.mpim\",\n  \"reaction_added\",\n] as const;\n\n/** User grants required by the reviewed Slack API MCP tools. */\nexport const OPENGENI_SLACK_MCP_USER_SCOPES = OPENGENI_SLACK_REST_USER_SCOPES;\n\nexport const OPENGENI_MANAGED_PUBLIC_BASE_URL = \"https://app.opengeni.ai\" as const;\n\nexport type OpenGeniSlackBotManifestOptions = Readonly<{\n  appName?: string;\n  botDisplayName?: string;\n  slashCommand?: string;\n  shortcutName?: string;\n  accessMode?: \"limited\" | \"full\";\n}>;\n\nfunction normalizedSlackManifestText(\n  value: string | undefined,\n  fallback: string,\n  label: string,\n  maxLength: number,\n): string {\n  const normalized = value?.trim() || fallback;\n  if (normalized.length > maxLength || /[\\r\\n\\0]/u.test(normalized)) {\n    throw new Error(`Slack bot manifest ${label} must be at most ${maxLength} plain characters`);\n  }\n  return normalized;\n}\n\nfunction normalizedSlackCommand(value: string | undefined): string {\n  const command = value?.trim() || \"/opengeni\";\n  if (!/^\\/[a-z0-9_-]{1,31}$/u.test(command)) {\n    throw new Error(\n      \"Slack bot manifest slash command must start with / and contain at most 31 lowercase letters, digits, hyphens, or underscores\",\n    );\n  }\n  return command;\n}\n\nfunction normalizedSlackManifestBaseUrl(publicBaseUrl: string): string {\n  const parsed = new URL(publicBaseUrl);\n  if (parsed.protocol !== \"https:\" || parsed.username || parsed.password) {\n    throw new Error(\"Slack bot manifest public base URL must be credential-free HTTPS\");\n  }\n  parsed.hash = \"\";\n  parsed.search = \"\";\n  parsed.pathname = parsed.pathname.replace(/\\/+$/, \"\");\n  return parsed.toString().replace(/\\/$/, \"\");\n}\n\n/** Canonical managed/self-hosted Slack app manifest. Slack accepts JSON manifests. */\nexport function buildOpenGeniSlackBotManifest(\n  publicBaseUrl: string,\n  options: OpenGeniSlackBotManifestOptions = {},\n) {\n  const baseUrl = normalizedSlackManifestBaseUrl(publicBaseUrl);\n  const appName = normalizedSlackManifestText(options.appName, \"Opengeni\", \"app name\", 35);\n  const botDisplayName = normalizedSlackManifestText(\n    options.botDisplayName,\n    \"Opengeni\",\n    \"bot display name\",\n    80,\n  );\n  const slashCommand = normalizedSlackCommand(options.slashCommand);\n  const shortcutName = normalizedSlackManifestText(\n    options.shortcutName,\n    \"Open in Opengeni\",\n    \"shortcut name\",\n    35,\n  );\n  return {\n    display_information: { name: appName },\n    features: {\n      app_home: {\n        home_tab_enabled: true,\n        messages_tab_enabled: true,\n        messages_tab_read_only_enabled: false,\n      },\n      bot_user: { display_name: botDisplayName, always_online: false },\n      slash_commands: [\n        {\n          command: slashCommand,\n          description: \"Start an Opengeni task in this channel\",\n          should_escape: false,\n          url: `${baseUrl}/v1/integrations/slack/commands`,\n        },\n      ],\n      shortcuts: [\n        {\n          callback_id: \"opengeni_message\",\n          description: \"Start an Opengeni task from this Slack message\",\n          name: shortcutName,\n          type: \"message\",\n        },\n      ],\n    },\n    oauth_config: {\n      redirect_urls: [\n        `${baseUrl}/v1/integrations/oauth/callback`,\n        `${baseUrl}/v1/integrations/slack/callback`,\n      ],\n      scopes: {\n        bot: openGeniSlackBotRequestedScopes(options.accessMode),\n        user: [...OPENGENI_SLACK_MCP_USER_SCOPES],\n      },\n    },\n    settings: {\n      event_subscriptions: {\n        bot_events: [...OPENGENI_SLACK_BOT_EVENTS],\n        request_url: `${baseUrl}/v1/integrations/slack/events`,\n      },\n      interactivity: {\n        is_enabled: true,\n        request_url: `${baseUrl}/v1/integrations/slack/interactions`,\n      },\n      is_mcp_enabled: true,\n      org_deploy_enabled: false,\n      socket_mode_enabled: false,\n      token_rotation_enabled: false,\n    },\n  } as const;\n}\n\n/**\n * Optional bot grants used by the shipped read/identity and task-file-delivery\n * surfaces. Every other unrequired scope fails closed, including unknown future\n * Slack scopes, so verification, core routing, and UI eligibility cannot drift.\n */\nexport const OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES = [\n  \"team:read\",\n  OPENGENI_SLACK_REACTION_REQUIRED_SCOPE,\n  OPENGENI_SLACK_FILE_UPLOAD_REQUIRED_SCOPE,\n  ...OPENGENI_SLACK_BOT_SEARCH_SCOPES,\n] as const;\n\nexport function hasOpenGeniSlackFileUploadScope(grantedScopes: readonly string[]): boolean {\n  return grantedScopes.includes(OPENGENI_SLACK_FILE_UPLOAD_REQUIRED_SCOPE);\n}\n\nexport function hasOpenGeniSlackBotSearchScopes(grantedScopes: readonly string[]): boolean {\n  return OPENGENI_SLACK_BOT_SEARCH_SCOPES.every((scope) => grantedScopes.includes(scope));\n}\n\n/** @deprecated Use evaluateOpenGeniSlackBotScopes; an allowlist is the policy. */\nexport const OPENGENI_SLACK_BOT_FORBIDDEN_SCOPES = [\"channels:join\", \"chat:write.public\"] as const;\n\nexport type OpenGeniSlackBotScopePolicy = {\n  accepted: boolean;\n  missingRequired: string[];\n  unsupported: string[];\n};\n\nfunction isOpenGeniSlackBotScopeAllowed(scope: string): boolean {\n  return (\n    (OPENGENI_SLACK_BOT_REQUIRED_SCOPES as readonly string[]).includes(scope) ||\n    (OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES as readonly string[]).includes(scope)\n  );\n}\n\nexport function areOpenGeniSlackBotScopesAccepted(grantedScopes: readonly string[]): boolean {\n  return (\n    OPENGENI_SLACK_BOT_REQUIRED_SCOPES.every((scope) => grantedScopes.includes(scope)) &&\n    grantedScopes.every(isOpenGeniSlackBotScopeAllowed)\n  );\n}\n\nexport function hasOpenGeniSlackReactionScope(grantedScopes: readonly string[]): boolean {\n  return grantedScopes.includes(OPENGENI_SLACK_REACTION_REQUIRED_SCOPE);\n}\n\nexport function evaluateOpenGeniSlackBotScopes(\n  grantedScopes: readonly string[],\n): OpenGeniSlackBotScopePolicy {\n  const granted = new Set(grantedScopes);\n  const missingRequired = OPENGENI_SLACK_BOT_REQUIRED_SCOPES.filter((scope) => !granted.has(scope));\n  const unsupported = [...granted].filter((scope) => !isOpenGeniSlackBotScopeAllowed(scope)).sort();\n  return {\n    accepted: areOpenGeniSlackBotScopesAccepted(grantedScopes),\n    missingRequired,\n    unsupported,\n  };\n}\n"],"mappings":";;;;;AAEO,IAAM,qCAAqC;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,yCAAyC;AAG/C,IAAM,4CAA4C;AASlD,IAAM,mCAAmC;AAAA,EAC9C;AAAA,EACA;AAAA,EACA;AACF;AAUO,IAAM,sCAAsC;AAAA,EACjD,GAAG;AAAA,EACH;AAAA,EACA;AACF;AAEO,SAAS,gCAAgC,OAA2B,WAAqB;AAC9F,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAI,SAAS,SAAS,mCAAmC,CAAC;AAAA,EAC5D;AACF;AAEO,IAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,iCAAiC;AAEvC,IAAM,mCAAmC;AAUhD,SAAS,4BACP,OACA,UACA,OACA,WACQ;AACR,QAAM,aAAa,OAAO,KAAK,KAAK;AACpC,MAAI,WAAW,SAAS,aAAa,YAAY,KAAK,UAAU,GAAG;AACjE,UAAM,IAAI,MAAM,sBAAsB,KAAK,oBAAoB,SAAS,mBAAmB;AAAA,EAC7F;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,OAAmC;AACjE,QAAM,UAAU,OAAO,KAAK,KAAK;AACjC,MAAI,CAAC,wBAAwB,KAAK,OAAO,GAAG;AAC1C,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,+BAA+B,eAA+B;AACrE,QAAM,SAAS,IAAI,IAAI,aAAa;AACpC,MAAI,OAAO,aAAa,YAAY,OAAO,YAAY,OAAO,UAAU;AACtE,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,SAAO,OAAO;AACd,SAAO,SAAS;AAChB,SAAO,WAAW,OAAO,SAAS,QAAQ,QAAQ,EAAE;AACpD,SAAO,OAAO,SAAS,EAAE,QAAQ,OAAO,EAAE;AAC5C;AAGO,SAAS,8BACd,eACA,UAA2C,CAAC,GAC5C;AACA,QAAM,UAAU,+BAA+B,aAAa;AAC5D,QAAM,UAAU,4BAA4B,QAAQ,SAAS,YAAY,YAAY,EAAE;AACvF,QAAM,iBAAiB;AAAA,IACrB,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,eAAe,uBAAuB,QAAQ,YAAY;AAChE,QAAM,eAAe;AAAA,IACnB,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,SAAO;AAAA,IACL,qBAAqB,EAAE,MAAM,QAAQ;AAAA,IACrC,UAAU;AAAA,MACR,UAAU;AAAA,QACR,kBAAkB;AAAA,QAClB,sBAAsB;AAAA,QACtB,gCAAgC;AAAA,MAClC;AAAA,MACA,UAAU,EAAE,cAAc,gBAAgB,eAAe,MAAM;AAAA,MAC/D,gBAAgB;AAAA,QACd;AAAA,UACE,SAAS;AAAA,UACT,aAAa;AAAA,UACb,eAAe;AAAA,UACf,KAAK,GAAG,OAAO;AAAA,QACjB;AAAA,MACF;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,aAAa;AAAA,UACb,aAAa;AAAA,UACb,MAAM;AAAA,UACN,MAAM;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,eAAe;AAAA,QACb,GAAG,OAAO;AAAA,QACV,GAAG,OAAO;AAAA,MACZ;AAAA,MACA,QAAQ;AAAA,QACN,KAAK,gCAAgC,QAAQ,UAAU;AAAA,QACvD,MAAM,CAAC,GAAG,8BAA8B;AAAA,MAC1C;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR,qBAAqB;AAAA,QACnB,YAAY,CAAC,GAAG,yBAAyB;AAAA,QACzC,aAAa,GAAG,OAAO;AAAA,MACzB;AAAA,MACA,eAAe;AAAA,QACb,YAAY;AAAA,QACZ,aAAa,GAAG,OAAO;AAAA,MACzB;AAAA,MACA,gBAAgB;AAAA,MAChB,oBAAoB;AAAA,MACpB,qBAAqB;AAAA,MACrB,wBAAwB;AAAA,IAC1B;AAAA,EACF;AACF;AAOO,IAAM,0CAA0C;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA,GAAG;AACL;AAEO,SAAS,gCAAgC,eAA2C;AACzF,SAAO,cAAc,SAAS,yCAAyC;AACzE;AAEO,SAAS,gCAAgC,eAA2C;AACzF,SAAO,iCAAiC,MAAM,CAAC,UAAU,cAAc,SAAS,KAAK,CAAC;AACxF;AAGO,IAAM,sCAAsC,CAAC,iBAAiB,mBAAmB;AAQxF,SAAS,+BAA+B,OAAwB;AAC9D,SACG,mCAAyD,SAAS,KAAK,KACvE,wCAA8D,SAAS,KAAK;AAEjF;AAEO,SAAS,kCAAkC,eAA2C;AAC3F,SACE,mCAAmC,MAAM,CAAC,UAAU,cAAc,SAAS,KAAK,CAAC,KACjF,cAAc,MAAM,8BAA8B;AAEtD;AAEO,SAAS,8BAA8B,eAA2C;AACvF,SAAO,cAAc,SAAS,sCAAsC;AACtE;AAEO,SAAS,+BACd,eAC6B;AAC7B,QAAM,UAAU,IAAI,IAAI,aAAa;AACrC,QAAM,kBAAkB,mCAAmC,OAAO,CAAC,UAAU,CAAC,QAAQ,IAAI,KAAK,CAAC;AAChG,QAAM,cAAc,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,+BAA+B,KAAK,CAAC,EAAE,KAAK;AAChG,SAAO;AAAA,IACL,UAAU,kCAAkC,aAAa;AAAA,IACzD;AAAA,IACA;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-HHZSZYYF.js → chunk-T3HSWMA5.js}

@@ -135,7 +135,9 @@ var DEFAULT_IGNORABLE_CODE_POINTS = /\p{Default_Ignorable_Code_Point}+/gu;
 var ESCAPED_QUOTE_DELIMITERS = /\\+(?=["'])/gu;
 var TITLE_LABEL_PATTERN = /^(?:(?:suggested|generated|concise)\s+)?(?:(?:session|chat|conversation|task)\s+)?title\s*[:\-–—]\s*/iu;
 var LEADING_BOILERPLATE_PATTERNS = [
-  /^(?:hi|hello|hey)(?:\s+there)?\s*[,!:.\-–—]*\s*/iu,
+  // Require a real separator, not ASCII-only \b: History, HelloWorld and
+  // Unicode word continuations are title content, as is "thereabouts" after Hi.
+  /^(?:hi|hello|hey)(?:\s+there)?(?=$|[\s,!:.\-–—])\s*[,!:.\-–—]*\s*/iu,
   /^(?:i\s+(?:would\s+like|want|need)\s+you\s+to|i['’]d\s+like\s+you\s+to)\s+/iu,
   /^(?:please\s+)?(?:can|could|would|will)\s+you\s+/iu,
   /^(?:your|the)\s+(?:task|job)\s+is\s+to\s+/iu,
@@ -217,6 +219,17 @@ function automaticTitleGraphemes(value) {
   }
   return graphemes;
 }
+var MODEL_CONTROL_TOKEN = /<[|｜][^<>|｜\s]{1,64}[|｜]>/gu;
+function withoutModelControlTokens(value) {
+  return value.replace(MODEL_CONTROL_TOKEN, "\n");
+}
+function cleanStoredSessionTitle(title, titleSource) {
+  if (title === null || title === void 0) return null;
+  if (titleSource === "user") return title;
+  const stripped = withoutModelControlTokens(title);
+  if (stripped === title) return title;
+  return stripped.split("\n").map((part) => part.trim()).find(Boolean) ?? null;
+}
 function boundAutomaticSessionTitle(value) {
   const words = value.split(/\s+/u);
   const wordBounded = words.length > 10 ? words.slice(0, 10).join(" ") : value;
@@ -227,7 +240,7 @@ function boundAutomaticSessionTitle(value) {
   return (lastWhitespace >= 16 ? prefix.slice(0, lastWhitespace) : prefix).trimEnd();
 }
 function normalizeAutomaticSessionTitle(value) {
-  const firstLine = value.replace(/[\u0000-\u001f\u007f-\u009f]+/gu, "\n").split(/\n+/u).map((line) => line.trim()).find(Boolean);
+  const firstLine = withoutModelControlTokens(value).replace(/[\u0000-\u001f\u007f-\u009f]+/gu, "\n").split(/\n+/u).map((line) => line.trim()).find(Boolean);
   if (!firstLine || !hasVisibleAutomaticTitleContent(firstLine) || containsSensitiveAutomaticSessionTitleValue(firstLine)) {
     return null;
   }
@@ -266,7 +279,8 @@ function deriveSessionDisplayTitle(input, options = {}) {
     return title || automaticSessionReferenceTitle(input.id);
   }
   if (title && !sessionTitleIsPending(input)) {
-    return title;
+    const clean = cleanStoredSessionTitle(title, input.titleSource)?.trim();
+    if (clean) return clean;
   }
   for (const key of options.metadataKeys ?? []) {
     const value = input.metadata?.[key];
@@ -281,11 +295,13 @@ export {
   SESSION_TITLE_MAX_CHARACTERS,
   AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES,
   AUTOMATIC_SESSION_TITLE_FALLBACK,
+  PROMPT_PREVIEW_SCAN_MAX_CODE_UNITS,
   containsSensitiveAutomaticSessionTitleValue,
+  cleanStoredSessionTitle,
   boundAutomaticSessionTitle,
   normalizeAutomaticSessionTitle,
   deriveAutomaticSessionTitlePreview,
   sessionTitleIsPending,
   deriveSessionDisplayTitle
 };
-//# sourceMappingURL=chunk-HHZSZYYF.js.map
+//# sourceMappingURL=chunk-T3HSWMA5.js.map

package/dist/chunk-T3HSWMA5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/session-titles.ts"],"sourcesContent":["/** Human-authored session titles keep the existing public API ceiling. */\nexport const SESSION_TITLE_MAX_CHARACTERS = 200;\n\n/**\n * Automatic titles are intentionally much shorter than the manual rename\n * ceiling. This is measured in grapheme clusters so emoji and combining text\n * are never split into malformed display strings.\n */\nexport const AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES = 80;\n\n/**\n * Safe durable title used until semantic generation succeeds. It contains no\n * user prompt bytes, so provider failure/offline operation cannot leak a\n * credential or leave a raw prompt prefix in navigation surfaces.\n */\nexport const AUTOMATIC_SESSION_TITLE_FALLBACK = \"New conversation\";\n\n// Session creation accepts a body far larger than a navigation label. Bound\n// the source before any replace/split/normalization so a persisted large prompt\n// cannot amplify memory or CPU on every client render.\nexport const PROMPT_PREVIEW_SCAN_MAX_CODE_UNITS = 4_096;\n\nconst SESSION_ID_PATTERN =\n  /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;\n\nlet titleSegmenter: Intl.Segmenter | null | undefined;\n\nconst KNOWN_SENSITIVE_VALUE_PATTERNS = [\n  /-----BEGIN [A-Z ]*PRIVATE KEY-----/iu,\n  /\\bBearer\\s+[A-Za-z0-9._~+/=-]{8,}/iu,\n  /\\b(?:sk-(?:proj-)?|gh[oprsu]_|github_pat_|glpat-|xox[baprs]-)[A-Za-z0-9_-]{8,}/iu,\n  /\\bAKIA[0-9A-Z]{16}\\b/u,\n  /\\bAIza[0-9A-Za-z_-]{20,}\\b/u,\n  /\\beyJ[A-Za-z0-9_-]+\\.eyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\b/u,\n  /[?&](?:access_token|api_key|apikey|password|secret|token)=[^\\s&#]+/iu,\n] as const;\n\nconst URI_SCHEME_CANDIDATE_PATTERN = /\\b[a-z][a-z0-9+.-]*:\\S+/giu;\nconst WINDOWS_DRIVE_PATH_PATTERN = /^[a-z]:[\\\\/](?![\\\\/])[^:]*$/iu;\n\nconst SCHEMELESS_HOST_CANDIDATE_PATTERN =\n  /\\b(?:www\\.)?(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\\.)+[a-z](?:[a-z0-9-]{0,61}[a-z0-9])?(?::\\d{1,5})?(?:[/?#][^\\s]*)?/giu;\n\nconst SCHEMELESS_LOCAL_NETWORK_PATTERNS = [\n  /\\blocalhost(?:(?::\\d{1,5})(?:[/?#][^\\s]*)?|[/?#][^\\s]*)/iu,\n  /\\b(?:(?:25[0-5]|2[0-4]\\d|1?\\d?\\d)\\.){3}(?:25[0-5]|2[0-4]\\d|1?\\d?\\d)(?:(?::\\d{1,5})(?:[/?#][^\\s]*)?|[/?#][^\\s]*)/u,\n  /\\[(?=[0-9a-f:.]*:[0-9a-f:.]*\\])[0-9a-f:.]+\\](?:(?::\\d{1,5})(?:[/?#][^\\s]*)?|[/?#][^\\s]*)/iu,\n] as const;\n\nconst FILE_LIKE_HOST_SUFFIXES = new Set([\n  \"css\",\n  \"html\",\n  \"js\",\n  \"json\",\n  \"jsx\",\n  \"lock\",\n  \"md\",\n  \"sql\",\n  \"toml\",\n  \"ts\",\n  \"tsx\",\n  \"xml\",\n  \"yaml\",\n  \"yml\",\n]);\n\n// These authorities are established framework/namespace notation whose exact\n// casing is meaningful. Keep this exception deliberately narrow: generic\n// PascalCase or uppercase authorities remain host-like because an uppercase\n// real domain (for example MICROSOFT.COM/Admin) must not bypass the URL gate.\nconst DOTTED_TECHNOLOGY_PATH_AUTHORITIES = new Set([\n  \"ASP.NET\",\n  \"AWS.SDK\",\n  \"Microsoft.Extensions\",\n  \"System.IO\",\n]);\n\nconst SECRET_ASSIGNMENT_CANDIDATE_PATTERN =\n  /(?:^|[^A-Za-z0-9])(?:(['\"])([A-Za-z][A-Za-z0-9_. -]*)\\1|([A-Za-z][A-Za-z0-9_.-]*))\\s*[=:]\\s*[^\\s,;]+/gu;\n\nconst SECRET_LABEL_ASSIGNMENT_PATTERN =\n  /\\b(?:api[ _-]?key|access[ _-]?token|auth[ _-]?token|credential|credentials|password|passwd|private[ _-]?key|secret|token)\\b\\s*[=:]\\s*[^\\s,;]+/iu;\n\nconst SENSITIVE_ASSIGNMENT_KEY_SUFFIXES = new Set([\n  \"credential\",\n  \"credentials\",\n  \"password\",\n  \"passwd\",\n  \"secret\",\n  \"token\",\n]);\n\nconst COMPACT_SENSITIVE_ASSIGNMENT_KEY_SUFFIXES = [\n  \"apikey\",\n  \"accesskey\",\n  \"accesskeyid\",\n  \"accesstoken\",\n  \"authtoken\",\n  \"credential\",\n  \"credentials\",\n  \"password\",\n  \"passwd\",\n  \"privatekey\",\n  \"secret\",\n  \"secretkey\",\n  \"token\",\n] as const;\n\nconst SENSITIVE_ASSIGNMENT_KEY_WORD_SUFFIXES = [\n  [\"api\", \"key\"],\n  [\"access\", \"key\"],\n  [\"access\", \"key\", \"id\"],\n  [\"auth\", \"key\"],\n  [\"private\", \"key\"],\n  [\"secret\", \"key\"],\n] as const;\n\nfunction hasWordSuffix(words: readonly string[], suffix: readonly string[]): boolean {\n  if (words.length < suffix.length) return false;\n  const offset = words.length - suffix.length;\n  return suffix.every((word, index) => words[offset + index] === word);\n}\n\nfunction containsSensitiveAssignment(value: string): boolean {\n  for (const match of value.matchAll(SECRET_ASSIGNMENT_CANDIDATE_PATTERN)) {\n    const key = match[2] ?? match[3];\n    if (!key) continue;\n    const words = key\n      .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n      .replace(/([A-Z]+)([A-Z][a-z])/g, \"$1 $2\")\n      .toLowerCase()\n      .split(/[^a-z0-9]+/)\n      .filter(Boolean);\n    const last = words.at(-1);\n    if (last && SENSITIVE_ASSIGNMENT_KEY_SUFFIXES.has(last)) return true;\n    if (last && COMPACT_SENSITIVE_ASSIGNMENT_KEY_SUFFIXES.some((suffix) => last.endsWith(suffix))) {\n      return true;\n    }\n    if (SENSITIVE_ASSIGNMENT_KEY_WORD_SUFFIXES.some((suffix) => hasWordSuffix(words, suffix))) {\n      return true;\n    }\n  }\n  return false;\n}\n\nfunction containsUriScheme(value: string): boolean {\n  for (const match of value.matchAll(URI_SCHEME_CANDIDATE_PATTERN)) {\n    // A Windows drive path is the one scheme-shaped token accepted here. Keep\n    // the exception exact: one separator after the drive letter and no later\n    // colon, so x://host and a nested scheme remain rejected.\n    if (!WINDOWS_DRIVE_PATH_PATTERN.test(match[0])) return true;\n  }\n  return false;\n}\n\nfunction isDottedTechnologyPath(candidate: string): boolean {\n  if (/[?:#]/u.test(candidate)) return false;\n  const [authority, ...pathSegments] = candidate.split(\"/\");\n  if (!authority || pathSegments.length === 0 || pathSegments.some((segment) => !segment)) {\n    return false;\n  }\n  if (\n    !DOTTED_TECHNOLOGY_PATH_AUTHORITIES.has(authority) ||\n    pathSegments.some((segment) => !/^[A-Z][A-Za-z0-9_-]*$/u.test(segment))\n  ) {\n    return false;\n  }\n  return true;\n}\n\nfunction containsSchemelessUrl(value: string): boolean {\n  if (SCHEMELESS_LOCAL_NETWORK_PATTERNS.some((pattern) => pattern.test(value))) return true;\n\n  for (const match of value.matchAll(SCHEMELESS_HOST_CANDIDATE_PATTERN)) {\n    const candidate = match[0];\n    if (candidate.toLowerCase().startsWith(\"www.\")) return true;\n    if (!/[/?#]/u.test(candidate)) continue;\n\n    const authority = candidate.split(/[/?#]/u, 1)[0] ?? \"\";\n    const hostname = authority.replace(/:\\d{1,5}$/u, \"\");\n    const suffix = hostname.split(\".\").at(-1)?.toLowerCase();\n    if (suffix && FILE_LIKE_HOST_SUFFIXES.has(suffix)) continue;\n    if (isDottedTechnologyPath(candidate)) continue;\n    return true;\n  }\n  return false;\n}\n\nconst OPAQUE_IDENTIFIER_PATTERN =\n  /\\b(?=[A-Za-z0-9_-]{32,}\\b)(?=[A-Za-z0-9_-]*[A-Za-z])(?=[A-Za-z0-9_-]*\\d)[A-Za-z0-9_-]+\\b/u;\n\nconst DEFAULT_IGNORABLE_CODE_POINTS = /\\p{Default_Ignorable_Code_Point}+/gu;\nconst ESCAPED_QUOTE_DELIMITERS = /\\\\+(?=[\"'])/gu;\n\nconst TITLE_LABEL_PATTERN =\n  /^(?:(?:suggested|generated|concise)\\s+)?(?:(?:session|chat|conversation|task)\\s+)?title\\s*[:\\-–—]\\s*/iu;\n\nconst LEADING_BOILERPLATE_PATTERNS = [\n  // Require a real separator, not ASCII-only \\b: History, HelloWorld and\n  // Unicode word continuations are title content, as is \"thereabouts\" after Hi.\n  /^(?:hi|hello|hey)(?:\\s+there)?(?=$|[\\s,!:.\\-–—])\\s*[,!:.\\-–—]*\\s*/iu,\n  /^(?:i\\s+(?:would\\s+like|want|need)\\s+you\\s+to|i['’]d\\s+like\\s+you\\s+to)\\s+/iu,\n  /^(?:please\\s+)?(?:can|could|would|will)\\s+you\\s+/iu,\n  /^(?:your|the)\\s+(?:task|job)\\s+is\\s+to\\s+/iu,\n  /^(?:please\\s+)?help\\s+me\\s+(?:to\\s+)?/iu,\n  /^please(?:\\s*[,!:.\\-–—]+\\s*|\\s+|$)/iu,\n] as const;\n\nfunction automaticTitleDetectionValue(value: string): string {\n  // Detection uses a compatibility-normalized shadow value so fullwidth\n  // punctuation/letters, invisible token splits, and serialized quote\n  // delimiters cannot evade the policy.\n  // The accepted title itself stays byte-for-byte in the user's language and\n  // emoji form; this shadow is never returned or persisted.\n  return value\n    .normalize(\"NFKC\")\n    .replace(DEFAULT_IGNORABLE_CODE_POINTS, \"\")\n    .replace(ESCAPED_QUOTE_DELIMITERS, \"\");\n}\n\nfunction hasVisibleAutomaticTitleContent(value: string): boolean {\n  return automaticTitleDetectionValue(value).trim().length > 0;\n}\n\n/**\n * Whether a bounded automatic-title candidate contains a credential, URL, or\n * opaque identifier that must stay out of navigation and other display-title\n * surfaces. Callers handling an unbounded source must bound it before invoking\n * this helper.\n */\nexport function containsSensitiveAutomaticSessionTitleValue(value: string): boolean {\n  const detectionValue = automaticTitleDetectionValue(value);\n\n  if (KNOWN_SENSITIVE_VALUE_PATTERNS.some((pattern) => pattern.test(detectionValue))) return true;\n  if (containsUriScheme(detectionValue)) return true;\n  if (containsSchemelessUrl(detectionValue)) return true;\n  if (SECRET_LABEL_ASSIGNMENT_PATTERN.test(detectionValue)) return true;\n  if (containsSensitiveAssignment(detectionValue)) return true;\n  if (OPAQUE_IDENTIFIER_PATTERN.test(detectionValue)) return true;\n  return false;\n}\n\nfunction stripAutomaticTitleBoilerplate(value: string): string {\n  let title = value;\n  for (let pass = 0; pass < 4; pass += 1) {\n    const before = title;\n    title = title\n      .replace(/^(?:```[^\\n]*|[\\s#>*_`\"'“”‘’\\-–—]+)+/u, \"\")\n      .replace(TITLE_LABEL_PATTERN, \"\");\n    for (const pattern of LEADING_BOILERPLATE_PATTERNS) {\n      title = title.replace(pattern, \"\");\n    }\n    title = title.trim();\n    if (title === before) break;\n  }\n  return title;\n}\n\nconst AUTOMATIC_TITLE_TRAILING_PUNCTUATION = /[\\s.!?,;:\\-–—]+$/u;\n\n// Closing quote and markdown marks, mapped to the distinct opening mark that\n// would pair with them inside the title.\nconst TRAILING_WRAPPER_MARKS = new Map<string, string | null>([\n  ['\"', null],\n  [\"'\", null],\n  [\"`\", null],\n  [\"*\", null],\n  [\"”\", \"“\"],\n  [\"’\", \"‘\"],\n  [\"»\", \"«\"],\n]);\n\n/**\n * Remove trailing punctuation and a closing quote or markdown mark whose\n * opening counterpart was already stripped as a leading wrapper, so\n * `\"Pod Crash Debugging\"` and `**Pod Crash Debugging**` do not keep a dangling\n * closing mark. A mark that still pairs with one inside the title stays.\n */\nfunction trimAutomaticTitleEnd(value: string): string {\n  let title = value;\n  for (let pass = 0; pass < 4; pass += 1) {\n    const before = title;\n    title = title.replace(AUTOMATIC_TITLE_TRAILING_PUNCTUATION, \"\");\n    const last = title.at(-1);\n    const opening = last === undefined ? undefined : TRAILING_WRAPPER_MARKS.get(last);\n    if (last !== undefined && opening !== undefined) {\n      let rest = title;\n      while (rest.endsWith(last)) rest = rest.slice(0, -last.length);\n      if (!rest.includes(last) && (opening === null || !rest.includes(opening))) {\n        title = rest;\n      }\n    }\n    if (title === before) break;\n  }\n  return title.trim();\n}\n\nfunction automaticTitleGraphemes(value: string): string[] {\n  if (titleSegmenter === undefined) {\n    titleSegmenter =\n      typeof Intl.Segmenter === \"function\"\n        ? new Intl.Segmenter(undefined, { granularity: \"grapheme\" })\n        : null;\n  }\n  if (titleSegmenter) {\n    return Array.from(titleSegmenter.segment(value), (part) => part.segment);\n  }\n\n  // Older embedded runtimes may not ship Intl.Segmenter. Preserve surrogate\n  // pairs plus common combining/emoji sequences instead of failing module load\n  // or slicing UTF-16 code units.\n  const graphemes: string[] = [];\n  for (const point of value) {\n    const prior = graphemes.at(-1);\n    if (\n      prior &&\n      (/^[\\p{Mark}\\u{FE0E}\\u{FE0F}\\p{Emoji_Modifier}]$/u.test(point) ||\n        point === \"\\u200d\" ||\n        prior.endsWith(\"\\u200d\"))\n    ) {\n      graphemes[graphemes.length - 1] = `${prior}${point}`;\n    } else {\n      graphemes.push(point);\n    }\n  }\n  return graphemes;\n}\n\n/**\n * Model control tokens such as `<|fim_suffix|>`, `<|im_end|>` or `<｜end▁of▁sentence｜>`\n * sometimes leak into generated text. They are never title content: each one\n * becomes a line break, so a title keeps only its first real segment.\n */\nconst MODEL_CONTROL_TOKEN = /<[|｜][^<>|｜\\s]{1,64}[|｜]>/gu;\n\nfunction withoutModelControlTokens(value: string): string {\n  return value.replace(MODEL_CONTROL_TOKEN, \"\\n\");\n}\n\n/**\n * Read-side cleanup for a durable title. Automatic titles written before\n * control-token stripping can still hold a token (\"Release plan<|fim_suffix|>\");\n * those keep only their first real segment, and a token-only title reads as no\n * title. Human renames and titles without a token are returned unchanged.\n */\nexport function cleanStoredSessionTitle(\n  title: string | null | undefined,\n  titleSource: string | null | undefined,\n): string | null {\n  if (title === null || title === undefined) return null;\n  if (titleSource === \"user\") return title;\n  const stripped = withoutModelControlTokens(title);\n  if (stripped === title) return title;\n  return (\n    stripped\n      .split(\"\\n\")\n      .map((part) => part.trim())\n      .find(Boolean) ?? null\n  );\n}\n\n/** Bound an already-normalized automatic-title candidate without splitting graphemes. */\nexport function boundAutomaticSessionTitle(value: string): string {\n  const words = value.split(/\\s+/u);\n  const wordBounded = words.length > 10 ? words.slice(0, 10).join(\" \") : value;\n  const graphemes = automaticTitleGraphemes(wordBounded);\n  if (graphemes.length <= AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES) return wordBounded;\n\n  const prefix = graphemes.slice(0, AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES).join(\"\");\n  const lastWhitespace = prefix.search(/\\s+\\S*$/u);\n  return (lastWhitespace >= 16 ? prefix.slice(0, lastWhitespace) : prefix).trimEnd();\n}\n\n/**\n * Normalize a model/system-authored title before it reaches durable session\n * metadata. Human renames intentionally do not use this path.\n *\n * Returns null when the candidate is empty, only boilerplate, or appears to\n * contain a credential/opaque prompt value. Callers should retain the current\n * title (normally {@link AUTOMATIC_SESSION_TITLE_FALLBACK}) in that case.\n */\nexport function normalizeAutomaticSessionTitle(value: string): string | null {\n  const firstLine = withoutModelControlTokens(value)\n    .replace(/[\\u0000-\\u001f\\u007f-\\u009f]+/gu, \"\\n\")\n    .split(/\\n+/u)\n    .map((line) => line.trim())\n    .find(Boolean);\n  if (\n    !firstLine ||\n    !hasVisibleAutomaticTitleContent(firstLine) ||\n    containsSensitiveAutomaticSessionTitleValue(firstLine)\n  ) {\n    return null;\n  }\n\n  let title = trimAutomaticTitleEnd(\n    stripAutomaticTitleBoilerplate(firstLine).replace(/\\s+/gu, \" \"),\n  );\n  if (\n    !title ||\n    !hasVisibleAutomaticTitleContent(title) ||\n    containsSensitiveAutomaticSessionTitleValue(title)\n  ) {\n    return null;\n  }\n\n  title = trimAutomaticTitleEnd(boundAutomaticSessionTitle(title));\n  if (!title || !hasVisibleAutomaticTitleContent(title)) return null;\n  return title;\n}\n\nexport type SessionDisplayTitleInput = {\n  id?: string | null | undefined;\n  title?: string | null | undefined;\n  titleSource?: \"user\" | \"agent\" | null | undefined;\n  initialMessage?: string | null | undefined;\n  metadata?: Readonly<Record<string, unknown>> | undefined;\n};\n\nexport type SessionDisplayTitleOptions = {\n  /** Optional metadata fields to try before the opening-prompt preview. */\n  metadataKeys?: readonly string[] | undefined;\n};\n\n/**\n * Derive a bounded, sensitive-safe preview from the opening prompt.\n *\n * Unsafe leading lines are skipped instead of forcing the whole session back\n * to a generic label. This covers prompts that begin with a pasted URL or\n * identifier followed by an ordinary natural-language request on the next\n * line, without putting the rejected value into navigation surfaces.\n */\nexport function deriveAutomaticSessionTitlePreview(value: unknown): string | null {\n  if (typeof value !== \"string\") return null;\n\n  const lines = value\n    .slice(0, PROMPT_PREVIEW_SCAN_MAX_CODE_UNITS)\n    .replace(/[\\u0000-\\u001f\\u007f-\\u009f]+/gu, \"\\n\")\n    .split(/\\n+/u);\n\n  for (const candidate of lines) {\n    const line = candidate.trim();\n    if (!line || containsSensitiveAutomaticSessionTitleValue(line)) continue;\n\n    const preview = boundAutomaticSessionTitle(line.replace(/\\s+/gu, \" \"))\n      .replace(/[\\s.!?,;:\\-–—]+$/u, \"\")\n      .trim();\n    if (preview) return preview;\n  }\n\n  return null;\n}\n\nfunction automaticSessionReferenceTitle(id: unknown): string {\n  const sessionId = typeof id === \"string\" ? id.trim() : \"\";\n  return SESSION_ID_PATTERN.test(sessionId)\n    ? `Conversation ${sessionId.slice(0, 13)}`\n    : AUTOMATIC_SESSION_TITLE_FALLBACK;\n}\n\n/**\n * Whether the durable title still represents the automatic-title pending state.\n * A user-authored title always wins, even when its literal value is the marker.\n */\nexport function sessionTitleIsPending(input: SessionDisplayTitleInput): boolean {\n  const title = input.title?.trim() ?? \"\";\n  return input.titleSource !== \"user\" && (!title || title === AUTOMATIC_SESSION_TITLE_FALLBACK);\n}\n\n/**\n * Derive the title a human-facing client should display for a session.\n *\n * A semantic agent title or human rename wins. While automatic naming is still\n * pending, clients show a short, sensitive-safe preview of the opening prompt.\n * If no safe prompt text exists, a UUID-derived reference keeps real sessions\n * distinguishable without exposing prompt bytes. The durable pending marker is\n * therefore an internal lifecycle value rather than the ordinary visible name.\n */\nexport function deriveSessionDisplayTitle(\n  input: SessionDisplayTitleInput,\n  options: SessionDisplayTitleOptions = {},\n): string {\n  const title = input.title?.trim() ?? \"\";\n  if (input.titleSource === \"user\") {\n    return title || automaticSessionReferenceTitle(input.id);\n  }\n  if (title && !sessionTitleIsPending(input)) {\n    const clean = cleanStoredSessionTitle(title, input.titleSource)?.trim();\n    if (clean) return clean;\n  }\n\n  for (const key of options.metadataKeys ?? []) {\n    const value = input.metadata?.[key];\n    if (typeof value === \"string\" && value.trim().length > 0) {\n      return value.trim();\n    }\n  }\n\n  return (\n    deriveAutomaticSessionTitlePreview(input.initialMessage) ??\n    automaticSessionReferenceTitle(input.id)\n  );\n}\n"],"mappings":";AACO,IAAM,+BAA+B;AAOrC,IAAM,wCAAwC;AAO9C,IAAM,mCAAmC;AAKzC,IAAM,qCAAqC;AAElD,IAAM,qBACJ;AAEF,IAAI;AAEJ,IAAM,iCAAiC;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,+BAA+B;AACrC,IAAM,6BAA6B;AAEnC,IAAM,oCACJ;AAEF,IAAM,oCAAoC;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,0BAA0B,oBAAI,IAAI;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMD,IAAM,qCAAqC,oBAAI,IAAI;AAAA,EACjD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,sCACJ;AAEF,IAAM,kCACJ;AAEF,IAAM,oCAAoC,oBAAI,IAAI;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,4CAA4C;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,yCAAyC;AAAA,EAC7C,CAAC,OAAO,KAAK;AAAA,EACb,CAAC,UAAU,KAAK;AAAA,EAChB,CAAC,UAAU,OAAO,IAAI;AAAA,EACtB,CAAC,QAAQ,KAAK;AAAA,EACd,CAAC,WAAW,KAAK;AAAA,EACjB,CAAC,UAAU,KAAK;AAClB;AAEA,SAAS,cAAc,OAA0B,QAAoC;AACnF,MAAI,MAAM,SAAS,OAAO,OAAQ,QAAO;AACzC,QAAM,SAAS,MAAM,SAAS,OAAO;AACrC,SAAO,OAAO,MAAM,CAAC,MAAM,UAAU,MAAM,SAAS,KAAK,MAAM,IAAI;AACrE;AAEA,SAAS,4BAA4B,OAAwB;AAC3D,aAAW,SAAS,MAAM,SAAS,mCAAmC,GAAG;AACvE,UAAM,MAAM,MAAM,CAAC,KAAK,MAAM,CAAC;AAC/B,QAAI,CAAC,IAAK;AACV,UAAM,QAAQ,IACX,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,yBAAyB,OAAO,EACxC,YAAY,EACZ,MAAM,YAAY,EAClB,OAAO,OAAO;AACjB,UAAM,OAAO,MAAM,GAAG,EAAE;AACxB,QAAI,QAAQ,kCAAkC,IAAI,IAAI,EAAG,QAAO;AAChE,QAAI,QAAQ,0CAA0C,KAAK,CAAC,WAAW,KAAK,SAAS,MAAM,CAAC,GAAG;AAC7F,aAAO;AAAA,IACT;AACA,QAAI,uCAAuC,KAAK,CAAC,WAAW,cAAc,OAAO,MAAM,CAAC,GAAG;AACzF,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,OAAwB;AACjD,aAAW,SAAS,MAAM,SAAS,4BAA4B,GAAG;AAIhE,QAAI,CAAC,2BAA2B,KAAK,MAAM,CAAC,CAAC,EAAG,QAAO;AAAA,EACzD;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,WAA4B;AAC1D,MAAI,SAAS,KAAK,SAAS,EAAG,QAAO;AACrC,QAAM,CAAC,WAAW,GAAG,YAAY,IAAI,UAAU,MAAM,GAAG;AACxD,MAAI,CAAC,aAAa,aAAa,WAAW,KAAK,aAAa,KAAK,CAAC,YAAY,CAAC,OAAO,GAAG;AACvF,WAAO;AAAA,EACT;AACA,MACE,CAAC,mCAAmC,IAAI,SAAS,KACjD,aAAa,KAAK,CAAC,YAAY,CAAC,yBAAyB,KAAK,OAAO,CAAC,GACtE;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,OAAwB;AACrD,MAAI,kCAAkC,KAAK,CAAC,YAAY,QAAQ,KAAK,KAAK,CAAC,EAAG,QAAO;AAErF,aAAW,SAAS,MAAM,SAAS,iCAAiC,GAAG;AACrE,UAAM,YAAY,MAAM,CAAC;AACzB,QAAI,UAAU,YAAY,EAAE,WAAW,MAAM,EAAG,QAAO;AACvD,QAAI,CAAC,SAAS,KAAK,SAAS,EAAG;AAE/B,UAAM,YAAY,UAAU,MAAM,UAAU,CAAC,EAAE,CAAC,KAAK;AACrD,UAAM,WAAW,UAAU,QAAQ,cAAc,EAAE;AACnD,UAAM,SAAS,SAAS,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,YAAY;AACvD,QAAI,UAAU,wBAAwB,IAAI,MAAM,EAAG;AACnD,QAAI,uBAAuB,SAAS,EAAG;AACvC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,IAAM,4BACJ;AAEF,IAAM,gCAAgC;AACtC,IAAM,2BAA2B;AAEjC,IAAM,sBACJ;AAEF,IAAM,+BAA+B;AAAA;AAAA;AAAA,EAGnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,6BAA6B,OAAuB;AAM3D,SAAO,MACJ,UAAU,MAAM,EAChB,QAAQ,+BAA+B,EAAE,EACzC,QAAQ,0BAA0B,EAAE;AACzC;AAEA,SAAS,gCAAgC,OAAwB;AAC/D,SAAO,6BAA6B,KAAK,EAAE,KAAK,EAAE,SAAS;AAC7D;AAQO,SAAS,4CAA4C,OAAwB;AAClF,QAAM,iBAAiB,6BAA6B,KAAK;AAEzD,MAAI,+BAA+B,KAAK,CAAC,YAAY,QAAQ,KAAK,cAAc,CAAC,EAAG,QAAO;AAC3F,MAAI,kBAAkB,cAAc,EAAG,QAAO;AAC9C,MAAI,sBAAsB,cAAc,EAAG,QAAO;AAClD,MAAI,gCAAgC,KAAK,cAAc,EAAG,QAAO;AACjE,MAAI,4BAA4B,cAAc,EAAG,QAAO;AACxD,MAAI,0BAA0B,KAAK,cAAc,EAAG,QAAO;AAC3D,SAAO;AACT;AAEA,SAAS,+BAA+B,OAAuB;AAC7D,MAAI,QAAQ;AACZ,WAAS,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG;AACtC,UAAM,SAAS;AACf,YAAQ,MACL,QAAQ,yCAAyC,EAAE,EACnD,QAAQ,qBAAqB,EAAE;AAClC,eAAW,WAAW,8BAA8B;AAClD,cAAQ,MAAM,QAAQ,SAAS,EAAE;AAAA,IACnC;AACA,YAAQ,MAAM,KAAK;AACnB,QAAI,UAAU,OAAQ;AAAA,EACxB;AACA,SAAO;AACT;AAEA,IAAM,uCAAuC;AAI7C,IAAM,yBAAyB,oBAAI,IAA2B;AAAA,EAC5D,CAAC,KAAK,IAAI;AAAA,EACV,CAAC,KAAK,IAAI;AAAA,EACV,CAAC,KAAK,IAAI;AAAA,EACV,CAAC,KAAK,IAAI;AAAA,EACV,CAAC,UAAK,QAAG;AAAA,EACT,CAAC,UAAK,QAAG;AAAA,EACT,CAAC,QAAK,MAAG;AACX,CAAC;AAQD,SAAS,sBAAsB,OAAuB;AACpD,MAAI,QAAQ;AACZ,WAAS,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG;AACtC,UAAM,SAAS;AACf,YAAQ,MAAM,QAAQ,sCAAsC,EAAE;AAC9D,UAAM,OAAO,MAAM,GAAG,EAAE;AACxB,UAAM,UAAU,SAAS,SAAY,SAAY,uBAAuB,IAAI,IAAI;AAChF,QAAI,SAAS,UAAa,YAAY,QAAW;AAC/C,UAAI,OAAO;AACX,aAAO,KAAK,SAAS,IAAI,EAAG,QAAO,KAAK,MAAM,GAAG,CAAC,KAAK,MAAM;AAC7D,UAAI,CAAC,KAAK,SAAS,IAAI,MAAM,YAAY,QAAQ,CAAC,KAAK,SAAS,OAAO,IAAI;AACzE,gBAAQ;AAAA,MACV;AAAA,IACF;AACA,QAAI,UAAU,OAAQ;AAAA,EACxB;AACA,SAAO,MAAM,KAAK;AACpB;AAEA,SAAS,wBAAwB,OAAyB;AACxD,MAAI,mBAAmB,QAAW;AAChC,qBACE,OAAO,KAAK,cAAc,aACtB,IAAI,KAAK,UAAU,QAAW,EAAE,aAAa,WAAW,CAAC,IACzD;AAAA,EACR;AACA,MAAI,gBAAgB;AAClB,WAAO,MAAM,KAAK,eAAe,QAAQ,KAAK,GAAG,CAAC,SAAS,KAAK,OAAO;AAAA,EACzE;AAKA,QAAM,YAAsB,CAAC;AAC7B,aAAW,SAAS,OAAO;AACzB,UAAM,QAAQ,UAAU,GAAG,EAAE;AAC7B,QACE,UACC,kDAAkD,KAAK,KAAK,KAC3D,UAAU,YACV,MAAM,SAAS,QAAQ,IACzB;AACA,gBAAU,UAAU,SAAS,CAAC,IAAI,GAAG,KAAK,GAAG,KAAK;AAAA,IACpD,OAAO;AACL,gBAAU,KAAK,KAAK;AAAA,IACtB;AAAA,EACF;AACA,SAAO;AACT;AAOA,IAAM,sBAAsB;AAE5B,SAAS,0BAA0B,OAAuB;AACxD,SAAO,MAAM,QAAQ,qBAAqB,IAAI;AAChD;AAQO,SAAS,wBACd,OACA,aACe;AACf,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,MAAI,gBAAgB,OAAQ,QAAO;AACnC,QAAM,WAAW,0BAA0B,KAAK;AAChD,MAAI,aAAa,MAAO,QAAO;AAC/B,SACE,SACG,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,KAAK,OAAO,KAAK;AAExB;AAGO,SAAS,2BAA2B,OAAuB;AAChE,QAAM,QAAQ,MAAM,MAAM,MAAM;AAChC,QAAM,cAAc,MAAM,SAAS,KAAK,MAAM,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,IAAI;AACvE,QAAM,YAAY,wBAAwB,WAAW;AACrD,MAAI,UAAU,UAAU,sCAAuC,QAAO;AAEtE,QAAM,SAAS,UAAU,MAAM,GAAG,qCAAqC,EAAE,KAAK,EAAE;AAChF,QAAM,iBAAiB,OAAO,OAAO,UAAU;AAC/C,UAAQ,kBAAkB,KAAK,OAAO,MAAM,GAAG,cAAc,IAAI,QAAQ,QAAQ;AACnF;AAUO,SAAS,+BAA+B,OAA8B;AAC3E,QAAM,YAAY,0BAA0B,KAAK,EAC9C,QAAQ,mCAAmC,IAAI,EAC/C,MAAM,MAAM,EACZ,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,KAAK,OAAO;AACf,MACE,CAAC,aACD,CAAC,gCAAgC,SAAS,KAC1C,4CAA4C,SAAS,GACrD;AACA,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ;AAAA,IACV,+BAA+B,SAAS,EAAE,QAAQ,SAAS,GAAG;AAAA,EAChE;AACA,MACE,CAAC,SACD,CAAC,gCAAgC,KAAK,KACtC,4CAA4C,KAAK,GACjD;AACA,WAAO;AAAA,EACT;AAEA,UAAQ,sBAAsB,2BAA2B,KAAK,CAAC;AAC/D,MAAI,CAAC,SAAS,CAAC,gCAAgC,KAAK,EAAG,QAAO;AAC9D,SAAO;AACT;AAuBO,SAAS,mCAAmC,OAA+B;AAChF,MAAI,OAAO,UAAU,SAAU,QAAO;AAEtC,QAAM,QAAQ,MACX,MAAM,GAAG,kCAAkC,EAC3C,QAAQ,mCAAmC,IAAI,EAC/C,MAAM,MAAM;AAEf,aAAW,aAAa,OAAO;AAC7B,UAAM,OAAO,UAAU,KAAK;AAC5B,QAAI,CAAC,QAAQ,4CAA4C,IAAI,EAAG;AAEhE,UAAM,UAAU,2BAA2B,KAAK,QAAQ,SAAS,GAAG,CAAC,EAClE,QAAQ,qBAAqB,EAAE,EAC/B,KAAK;AACR,QAAI,QAAS,QAAO;AAAA,EACtB;AAEA,SAAO;AACT;AAEA,SAAS,+BAA+B,IAAqB;AAC3D,QAAM,YAAY,OAAO,OAAO,WAAW,GAAG,KAAK,IAAI;AACvD,SAAO,mBAAmB,KAAK,SAAS,IACpC,gBAAgB,UAAU,MAAM,GAAG,EAAE,CAAC,KACtC;AACN;AAMO,SAAS,sBAAsB,OAA0C;AAC9E,QAAM,QAAQ,MAAM,OAAO,KAAK,KAAK;AACrC,SAAO,MAAM,gBAAgB,WAAW,CAAC,SAAS,UAAU;AAC9D;AAWO,SAAS,0BACd,OACA,UAAsC,CAAC,GAC/B;AACR,QAAM,QAAQ,MAAM,OAAO,KAAK,KAAK;AACrC,MAAI,MAAM,gBAAgB,QAAQ;AAChC,WAAO,SAAS,+BAA+B,MAAM,EAAE;AAAA,EACzD;AACA,MAAI,SAAS,CAAC,sBAAsB,KAAK,GAAG;AAC1C,UAAM,QAAQ,wBAAwB,OAAO,MAAM,WAAW,GAAG,KAAK;AACtE,QAAI,MAAO,QAAO;AAAA,EACpB;AAEA,aAAW,OAAO,QAAQ,gBAAgB,CAAC,GAAG;AAC5C,UAAM,QAAQ,MAAM,WAAW,GAAG;AAClC,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,GAAG;AACxD,aAAO,MAAM,KAAK;AAAA,IACpB;AAAA,EACF;AAEA,SACE,mCAAmC,MAAM,cAAc,KACvD,+BAA+B,MAAM,EAAE;AAE3C;","names":[]}

package/dist/{chunk-YRKRZ6OF.js → chunk-TOOJIBJC.js}

@@ -5,7 +5,7 @@ import {
   fnv1a64,
   positiveSafeInteger,
   strictUtf8
-} from "./chunk-MYBZRDTY.js";
+} from "./chunk-WQI7VNN4.js";
 
 // src/editable-artifact-causal-frontier.ts
 var EDITABLE_ARTIFACT_CAUSAL_FRONTIER_VERSION = 1;
@@ -131,4 +131,4 @@ export {
   decodeEditableArtifactCausalFrontier,
   assertCanonicalEditableArtifactCausalFrontierBytes
 };
-//# sourceMappingURL=chunk-YRKRZ6OF.js.map
+//# sourceMappingURL=chunk-TOOJIBJC.js.map