@ordewell/core 0.4.11 → 0.4.13

package/dist/ApprovalPolicy-BVhGdECT.d.mts

@@ -0,0 +1,79 @@
+/**
+ * The planner's single approval seam. Every capability that reaches beyond the
+ * default read-only, in-workspace envelope — a path outside the workspace root,
+ * a shell command outside the auto-allowed set, a URL fetch — routes through
+ * one `request()` so the policy has exactly one owner (the same "one repair
+ * owner" shape as PlanRepair).
+ *
+ * Surfaces supply the human channel. VS Code answers with a modal; the web
+ * server currently has no prompt UI, so it denies unless the scope was
+ * pre-approved through config. Denial is always a visible, actionable tool
+ * result — never a silent success.
+ */
+type ApprovalKind = 'external_path' | 'shell_command' | 'url_fetch';
+interface ApprovalRequest {
+    kind: ApprovalKind;
+    /** The concrete thing being asked about: an absolute path, a command line, a URL. */
+    subject: string;
+    /**
+     * What a grant covers. Approving remembers this, not `subject`, so reading a
+     * second file from an already-approved directory does not prompt again.
+     */
+    scope: string;
+    /** One-line context for the prompt. */
+    detail?: string;
+}
+interface IApproval {
+    request(req: ApprovalRequest): Promise<boolean>;
+}
+/** Denies everything. The safe default when a surface wires no approval channel. */
+declare const DENY_ALL: IApproval;
+
+/**
+ * Decides whether one out-of-envelope capability may run, and remembers the
+ * answer for the rest of the session.
+ *
+ * Grants are keyed on {@link ApprovalRequest.scope}, never on the concrete
+ * subject: approving a read of `/tmp/foo/a.log` grants `/tmp/foo/*`, and
+ * approving `az group list` grants `az group`. Without that, a planner doing
+ * real research would prompt on every single call and the feature would be
+ * unusable.
+ *
+ * `mode` is the policy floor:
+ *   ask     consult the human channel; no channel means deny (headless, web)
+ *   allow   grant everything the tier system did not already refuse
+ *   deny    grant nothing beyond `preApproved`
+ *
+ * Note the ordering: `preApproved` is honored under every mode including
+ * `deny`, because it is an explicit operator decision rather than a default.
+ */
+type ApprovalMode = 'ask' | 'allow' | 'deny';
+interface ApprovalPolicyOptions {
+    mode?: ApprovalMode;
+    /** Scopes granted up front from config. A trailing `*` matches by prefix. */
+    preApproved?: string[];
+    /** The human channel. Absent means there is nobody to ask. */
+    ask?: (req: ApprovalRequest) => Promise<boolean>;
+    /** Called whenever a decision is reached, for surfacing in a UI or a log. */
+    onDecision?: (req: ApprovalRequest, granted: boolean, source: ApprovalSource) => void;
+}
+type ApprovalSource = 'pre-approved' | 'remembered' | 'mode' | 'asked' | 'no-channel';
+declare class ApprovalPolicy implements IApproval {
+    private readonly mode;
+    private readonly preApproved;
+    private readonly asker?;
+    private readonly onDecision?;
+    private readonly granted;
+    private readonly refused;
+    /** One in-flight ask per scope: a parallel tool round must not prompt twice for the same thing. */
+    private readonly inFlight;
+    private generation;
+    constructor(opts?: ApprovalPolicyOptions);
+    request(req: ApprovalRequest): Promise<boolean>;
+    /** Scopes the user has granted this session — for display and for persistence. */
+    grantedScopes(): string[];
+    /** Drop every session-scoped decision. Called on session reset. */
+    reset(): void;
+}
+
+export { type ApprovalKind as A, DENY_ALL as D, type IApproval as I, type ApprovalMode as a, ApprovalPolicy as b, type ApprovalPolicyOptions as c, type ApprovalRequest as d, type ApprovalSource as e };

package/dist/ApprovalPolicy-BVhGdECT.d.ts

@@ -0,0 +1,79 @@
+/**
+ * The planner's single approval seam. Every capability that reaches beyond the
+ * default read-only, in-workspace envelope — a path outside the workspace root,
+ * a shell command outside the auto-allowed set, a URL fetch — routes through
+ * one `request()` so the policy has exactly one owner (the same "one repair
+ * owner" shape as PlanRepair).
+ *
+ * Surfaces supply the human channel. VS Code answers with a modal; the web
+ * server currently has no prompt UI, so it denies unless the scope was
+ * pre-approved through config. Denial is always a visible, actionable tool
+ * result — never a silent success.
+ */
+type ApprovalKind = 'external_path' | 'shell_command' | 'url_fetch';
+interface ApprovalRequest {
+    kind: ApprovalKind;
+    /** The concrete thing being asked about: an absolute path, a command line, a URL. */
+    subject: string;
+    /**
+     * What a grant covers. Approving remembers this, not `subject`, so reading a
+     * second file from an already-approved directory does not prompt again.
+     */
+    scope: string;
+    /** One-line context for the prompt. */
+    detail?: string;
+}
+interface IApproval {
+    request(req: ApprovalRequest): Promise<boolean>;
+}
+/** Denies everything. The safe default when a surface wires no approval channel. */
+declare const DENY_ALL: IApproval;
+
+/**
+ * Decides whether one out-of-envelope capability may run, and remembers the
+ * answer for the rest of the session.
+ *
+ * Grants are keyed on {@link ApprovalRequest.scope}, never on the concrete
+ * subject: approving a read of `/tmp/foo/a.log` grants `/tmp/foo/*`, and
+ * approving `az group list` grants `az group`. Without that, a planner doing
+ * real research would prompt on every single call and the feature would be
+ * unusable.
+ *
+ * `mode` is the policy floor:
+ *   ask     consult the human channel; no channel means deny (headless, web)
+ *   allow   grant everything the tier system did not already refuse
+ *   deny    grant nothing beyond `preApproved`
+ *
+ * Note the ordering: `preApproved` is honored under every mode including
+ * `deny`, because it is an explicit operator decision rather than a default.
+ */
+type ApprovalMode = 'ask' | 'allow' | 'deny';
+interface ApprovalPolicyOptions {
+    mode?: ApprovalMode;
+    /** Scopes granted up front from config. A trailing `*` matches by prefix. */
+    preApproved?: string[];
+    /** The human channel. Absent means there is nobody to ask. */
+    ask?: (req: ApprovalRequest) => Promise<boolean>;
+    /** Called whenever a decision is reached, for surfacing in a UI or a log. */
+    onDecision?: (req: ApprovalRequest, granted: boolean, source: ApprovalSource) => void;
+}
+type ApprovalSource = 'pre-approved' | 'remembered' | 'mode' | 'asked' | 'no-channel';
+declare class ApprovalPolicy implements IApproval {
+    private readonly mode;
+    private readonly preApproved;
+    private readonly asker?;
+    private readonly onDecision?;
+    private readonly granted;
+    private readonly refused;
+    /** One in-flight ask per scope: a parallel tool round must not prompt twice for the same thing. */
+    private readonly inFlight;
+    private generation;
+    constructor(opts?: ApprovalPolicyOptions);
+    request(req: ApprovalRequest): Promise<boolean>;
+    /** Scopes the user has granted this session — for display and for persistence. */
+    grantedScopes(): string[];
+    /** Drop every session-scoped decision. Called on session reset. */
+    reset(): void;
+}
+
+export { type ApprovalKind as A, DENY_ALL as D, type IApproval as I, type ApprovalMode as a, ApprovalPolicy as b, type ApprovalPolicyOptions as c, type ApprovalRequest as d, type ApprovalSource as e };

package/dist/{ITerminalRunner-BTaKZ659.d.mts → ITerminalRunner-D_RBDoHa.d.mts}

@@ -1,36 +1,6 @@
+import { I as IApproval, a as ApprovalMode } from './ApprovalPolicy-BVhGdECT.mjs';
 import { h as RunnerId } from './Task-cGrfYRXK.mjs';
 
-/**
- * The planner's single approval seam. Every capability that reaches beyond the
- * default read-only, in-workspace envelope — a path outside the workspace root,
- * a shell command outside the auto-allowed set, a URL fetch — routes through
- * one `request()` so the policy has exactly one owner (the same "one repair
- * owner" shape as PlanRepair).
- *
- * Surfaces supply the human channel. VS Code answers with a modal; the web
- * server currently has no prompt UI, so it denies unless the scope was
- * pre-approved through config. Denial is always a visible, actionable tool
- * result — never a silent success.
- */
-type ApprovalKind = 'external_path' | 'shell_command' | 'url_fetch';
-interface ApprovalRequest {
-    kind: ApprovalKind;
-    /** The concrete thing being asked about: an absolute path, a command line, a URL. */
-    subject: string;
-    /**
-     * What a grant covers. Approving remembers this, not `subject`, so reading a
-     * second file from an already-approved directory does not prompt again.
-     */
-    scope: string;
-    /** One-line context for the prompt. */
-    detail?: string;
-}
-interface IApproval {
-    request(req: ApprovalRequest): Promise<boolean>;
-}
-/** Denies everything. The safe default when a surface wires no approval channel. */
-declare const DENY_ALL: IApproval;
-
 interface ToolOutcome {
     success: boolean;
     output: string;
@@ -104,53 +74,6 @@ interface IFileSystem {
     setApproval?(approval: IApproval): void;
 }
 
-/**
- * Decides whether one out-of-envelope capability may run, and remembers the
- * answer for the rest of the session.
- *
- * Grants are keyed on {@link ApprovalRequest.scope}, never on the concrete
- * subject: approving a read of `/tmp/foo/a.log` grants `/tmp/foo/*`, and
- * approving `az group list` grants `az group`. Without that, a planner doing
- * real research would prompt on every single call and the feature would be
- * unusable.
- *
- * `mode` is the policy floor:
- *   ask     consult the human channel; no channel means deny (headless, web)
- *   allow   grant everything the tier system did not already refuse
- *   deny    grant nothing beyond `preApproved`
- *
- * Note the ordering: `preApproved` is honored under every mode including
- * `deny`, because it is an explicit operator decision rather than a default.
- */
-type ApprovalMode = 'ask' | 'allow' | 'deny';
-interface ApprovalPolicyOptions {
-    mode?: ApprovalMode;
-    /** Scopes granted up front from config. A trailing `*` matches by prefix. */
-    preApproved?: string[];
-    /** The human channel. Absent means there is nobody to ask. */
-    ask?: (req: ApprovalRequest) => Promise<boolean>;
-    /** Called whenever a decision is reached, for surfacing in a UI or a log. */
-    onDecision?: (req: ApprovalRequest, granted: boolean, source: ApprovalSource) => void;
-}
-type ApprovalSource = 'pre-approved' | 'remembered' | 'mode' | 'asked' | 'no-channel';
-declare class ApprovalPolicy implements IApproval {
-    private readonly mode;
-    private readonly preApproved;
-    private readonly asker?;
-    private readonly onDecision?;
-    private readonly granted;
-    private readonly refused;
-    /** One in-flight ask per scope: a parallel tool round must not prompt twice for the same thing. */
-    private readonly inFlight;
-    private generation;
-    constructor(opts?: ApprovalPolicyOptions);
-    request(req: ApprovalRequest): Promise<boolean>;
-    /** Scopes the user has granted this session — for display and for persistence. */
-    grantedScopes(): string[];
-    /** Drop every session-scoped decision. Called on session reset. */
-    reset(): void;
-}
-
 interface CatalogModel {
     id: string;
     name: string;
@@ -535,6 +458,12 @@ interface ITerminalSession {
     kill(): void;
     getOutput(): string;
     write(text: string): void;
+    /**
+     * Optional transport-level control channel: PTY resize requests for a session
+     * whose runner renders a TUI. Absent on transports without a resizable PTY
+     * (a plain piped subprocess); surfaces must feature-detect before calling.
+     */
+    writeControl?(text: string): void;
 }
 
 interface ITerminalRunner {
@@ -564,4 +493,4 @@ interface ITerminalRunner {
     activeCount: number;
 }
 
-export { type AiProvider as A, type ProviderModelsResult as B, type CatalogModel as C, DENY_ALL as D, type ResolveContext as E, type FetchAllProviderModelsOptions as F, GREP_DEFAULT_HEAD_LIMIT as G, type RunnerInvocation as H, type IApproval as I, type RunnerPluginManifest as J, RunnerRegistry as K, collectProviderCredentials as L, ModelCatalog as M, enabledRunners as N, ORCHESTRATOR_SHORTCUTS as O, type PluginCloneFn as P, fetchAllProviderModels as Q, type ReadFileOpts as R, SEARCH_EXCLUSIONS as S, type ToolOutcome as T, isReservedRunnerName as U, knownModelId as V, resolveModelShortcut as W, resolveProvider as X, toOrchestratorOptions as Y, type AllProviderModels as a, type ApprovalKind as b, type ApprovalMode as c, ApprovalPolicy as d, type ApprovalPolicyOptions as e, type ApprovalRequest as f, type ApprovalSource as g, type DiscoveryCommand as h, type FindSymbolOptions as i, type GlobOptions as j, type GrepOptions as k, type GrepOutputMode as l, type IConfig as m, type IFileSystem as n, type IPluginStore as o, type ITerminalRunner as p, type ITerminalSession as q, type ModelShortcut as r, type OrchestratorOption as s, type PluginEntry as t, type PluginFeatures as u, type PluginMode as v, type PluginModelDiscovery as w, type PluginRunnerDef as x, type ProviderCredentialSource as y, type ProviderModelLists as z };
+export { type AiProvider as A, isReservedRunnerName as B, type CatalogModel as C, type DiscoveryCommand as D, knownModelId as E, type FetchAllProviderModelsOptions as F, GREP_DEFAULT_HEAD_LIMIT as G, resolveModelShortcut as H, type IConfig as I, resolveProvider as J, toOrchestratorOptions as K, ModelCatalog as M, ORCHESTRATOR_SHORTCUTS as O, type PluginCloneFn as P, type ReadFileOpts as R, SEARCH_EXCLUSIONS as S, type ToolOutcome as T, type AllProviderModels as a, type FindSymbolOptions as b, type GlobOptions as c, type GrepOptions as d, type GrepOutputMode as e, type IFileSystem as f, type IPluginStore as g, type ITerminalRunner as h, type ITerminalSession as i, type ModelShortcut as j, type OrchestratorOption as k, type PluginEntry as l, type PluginFeatures as m, type PluginMode as n, type PluginModelDiscovery as o, type PluginRunnerDef as p, type ProviderCredentialSource as q, type ProviderModelLists as r, type ProviderModelsResult as s, type ResolveContext as t, type RunnerInvocation as u, type RunnerPluginManifest as v, RunnerRegistry as w, collectProviderCredentials as x, enabledRunners as y, fetchAllProviderModels as z };

package/dist/{ITerminalRunner-DVwORcV9.d.ts → ITerminalRunner-DqAs12sy.d.ts}

@@ -1,36 +1,6 @@
+import { I as IApproval, a as ApprovalMode } from './ApprovalPolicy-BVhGdECT.js';
 import { h as RunnerId } from './Task-cGrfYRXK.js';
 
-/**
- * The planner's single approval seam. Every capability that reaches beyond the
- * default read-only, in-workspace envelope — a path outside the workspace root,
- * a shell command outside the auto-allowed set, a URL fetch — routes through
- * one `request()` so the policy has exactly one owner (the same "one repair
- * owner" shape as PlanRepair).
- *
- * Surfaces supply the human channel. VS Code answers with a modal; the web
- * server currently has no prompt UI, so it denies unless the scope was
- * pre-approved through config. Denial is always a visible, actionable tool
- * result — never a silent success.
- */
-type ApprovalKind = 'external_path' | 'shell_command' | 'url_fetch';
-interface ApprovalRequest {
-    kind: ApprovalKind;
-    /** The concrete thing being asked about: an absolute path, a command line, a URL. */
-    subject: string;
-    /**
-     * What a grant covers. Approving remembers this, not `subject`, so reading a
-     * second file from an already-approved directory does not prompt again.
-     */
-    scope: string;
-    /** One-line context for the prompt. */
-    detail?: string;
-}
-interface IApproval {
-    request(req: ApprovalRequest): Promise<boolean>;
-}
-/** Denies everything. The safe default when a surface wires no approval channel. */
-declare const DENY_ALL: IApproval;
-
 interface ToolOutcome {
     success: boolean;
     output: string;
@@ -104,53 +74,6 @@ interface IFileSystem {
     setApproval?(approval: IApproval): void;
 }
 
-/**
- * Decides whether one out-of-envelope capability may run, and remembers the
- * answer for the rest of the session.
- *
- * Grants are keyed on {@link ApprovalRequest.scope}, never on the concrete
- * subject: approving a read of `/tmp/foo/a.log` grants `/tmp/foo/*`, and
- * approving `az group list` grants `az group`. Without that, a planner doing
- * real research would prompt on every single call and the feature would be
- * unusable.
- *
- * `mode` is the policy floor:
- *   ask     consult the human channel; no channel means deny (headless, web)
- *   allow   grant everything the tier system did not already refuse
- *   deny    grant nothing beyond `preApproved`
- *
- * Note the ordering: `preApproved` is honored under every mode including
- * `deny`, because it is an explicit operator decision rather than a default.
- */
-type ApprovalMode = 'ask' | 'allow' | 'deny';
-interface ApprovalPolicyOptions {
-    mode?: ApprovalMode;
-    /** Scopes granted up front from config. A trailing `*` matches by prefix. */
-    preApproved?: string[];
-    /** The human channel. Absent means there is nobody to ask. */
-    ask?: (req: ApprovalRequest) => Promise<boolean>;
-    /** Called whenever a decision is reached, for surfacing in a UI or a log. */
-    onDecision?: (req: ApprovalRequest, granted: boolean, source: ApprovalSource) => void;
-}
-type ApprovalSource = 'pre-approved' | 'remembered' | 'mode' | 'asked' | 'no-channel';
-declare class ApprovalPolicy implements IApproval {
-    private readonly mode;
-    private readonly preApproved;
-    private readonly asker?;
-    private readonly onDecision?;
-    private readonly granted;
-    private readonly refused;
-    /** One in-flight ask per scope: a parallel tool round must not prompt twice for the same thing. */
-    private readonly inFlight;
-    private generation;
-    constructor(opts?: ApprovalPolicyOptions);
-    request(req: ApprovalRequest): Promise<boolean>;
-    /** Scopes the user has granted this session — for display and for persistence. */
-    grantedScopes(): string[];
-    /** Drop every session-scoped decision. Called on session reset. */
-    reset(): void;
-}
-
 interface CatalogModel {
     id: string;
     name: string;
@@ -535,6 +458,12 @@ interface ITerminalSession {
     kill(): void;
     getOutput(): string;
     write(text: string): void;
+    /**
+     * Optional transport-level control channel: PTY resize requests for a session
+     * whose runner renders a TUI. Absent on transports without a resizable PTY
+     * (a plain piped subprocess); surfaces must feature-detect before calling.
+     */
+    writeControl?(text: string): void;
 }
 
 interface ITerminalRunner {
@@ -564,4 +493,4 @@ interface ITerminalRunner {
     activeCount: number;
 }
 
-export { type AiProvider as A, type ProviderModelsResult as B, type CatalogModel as C, DENY_ALL as D, type ResolveContext as E, type FetchAllProviderModelsOptions as F, GREP_DEFAULT_HEAD_LIMIT as G, type RunnerInvocation as H, type IApproval as I, type RunnerPluginManifest as J, RunnerRegistry as K, collectProviderCredentials as L, ModelCatalog as M, enabledRunners as N, ORCHESTRATOR_SHORTCUTS as O, type PluginCloneFn as P, fetchAllProviderModels as Q, type ReadFileOpts as R, SEARCH_EXCLUSIONS as S, type ToolOutcome as T, isReservedRunnerName as U, knownModelId as V, resolveModelShortcut as W, resolveProvider as X, toOrchestratorOptions as Y, type AllProviderModels as a, type ApprovalKind as b, type ApprovalMode as c, ApprovalPolicy as d, type ApprovalPolicyOptions as e, type ApprovalRequest as f, type ApprovalSource as g, type DiscoveryCommand as h, type FindSymbolOptions as i, type GlobOptions as j, type GrepOptions as k, type GrepOutputMode as l, type IConfig as m, type IFileSystem as n, type IPluginStore as o, type ITerminalRunner as p, type ITerminalSession as q, type ModelShortcut as r, type OrchestratorOption as s, type PluginEntry as t, type PluginFeatures as u, type PluginMode as v, type PluginModelDiscovery as w, type PluginRunnerDef as x, type ProviderCredentialSource as y, type ProviderModelLists as z };
+export { type AiProvider as A, isReservedRunnerName as B, type CatalogModel as C, type DiscoveryCommand as D, knownModelId as E, type FetchAllProviderModelsOptions as F, GREP_DEFAULT_HEAD_LIMIT as G, resolveModelShortcut as H, type IConfig as I, resolveProvider as J, toOrchestratorOptions as K, ModelCatalog as M, ORCHESTRATOR_SHORTCUTS as O, type PluginCloneFn as P, type ReadFileOpts as R, SEARCH_EXCLUSIONS as S, type ToolOutcome as T, type AllProviderModels as a, type FindSymbolOptions as b, type GlobOptions as c, type GrepOptions as d, type GrepOutputMode as e, type IFileSystem as f, type IPluginStore as g, type ITerminalRunner as h, type ITerminalSession as i, type ModelShortcut as j, type OrchestratorOption as k, type PluginEntry as l, type PluginFeatures as m, type PluginMode as n, type PluginModelDiscovery as o, type PluginRunnerDef as p, type ProviderCredentialSource as q, type ProviderModelLists as r, type ProviderModelsResult as s, type ResolveContext as t, type RunnerInvocation as u, type RunnerPluginManifest as v, RunnerRegistry as w, collectProviderCredentials as x, enabledRunners as y, fetchAllProviderModels as z };

package/dist/{chunk-DNNZGH3I.mjs → chunk-YTJ7EOV6.mjs}

@@ -841,6 +841,59 @@ function classifyOutcome(success, output) {
   return "success";
 }
 
+// src/services/SessionMessage.ts
+function serializeTask(t) {
+  return {
+    id: t.id,
+    order: t.order,
+    title: t.title,
+    type: t.type,
+    description: t.description,
+    dependencies: t.dependencies || [],
+    assignedRunner: t.assignedRunner,
+    assignedModel: t.assignedModel || null,
+    taskMode: t.taskMode || "build",
+    prompt: t.prompt || null,
+    subtasks: (t.subtasks || []).map(serializeTask),
+    userSteps: t.userSteps || void 0,
+    thinkingEffort: t.thinkingEffort || void 0,
+    autonomy: t.autonomy || void 0,
+    sliceType: t.sliceType || void 0,
+    userStoriesCovered: t.userStoriesCovered || void 0
+  };
+}
+function serializeTaskStatus(t, idleSince = null) {
+  return {
+    id: t.id,
+    status: t.status,
+    verdict: t.verdict ? { outcome: t.verdict.outcome, reason: t.verdict.reason, checks: t.verdict.checks || [] } : null,
+    idleSince
+  };
+}
+function serializePlan(plan) {
+  return {
+    tasks: plan.tasks.map(serializeTask),
+    runners: plan.runners,
+    generatedAt: plan.generatedAt,
+    conversationHistory: plan.conversationHistory,
+    prdMarkdown: plan.prdMarkdown,
+    queuedMessages: plan.queuedMessages
+  };
+}
+function executionSummary(tasks) {
+  return {
+    total: tasks.length,
+    completed: tasks.filter((t) => t.status === "completed").length,
+    failed: tasks.filter((t) => t.status === "failed").length
+  };
+}
+var CHECKPOINT_TRUNCATE_LENGTH = 120;
+function truncateCheckpointSummary(summary) {
+  const firstLine = summary.split("\n")[0].trim();
+  if (firstLine.length <= CHECKPOINT_TRUNCATE_LENGTH) return firstLine;
+  return firstLine.slice(0, CHECKPOINT_TRUNCATE_LENGTH - 1) + "\u2026";
+}
+
 export {
   effectiveAllowlist,
   filterModelsForPrompt,
@@ -857,6 +910,12 @@ export {
   canSplitTask,
   applyTaskOps,
   summarizeToolCall,
-  classifyOutcome
+  classifyOutcome,
+  serializeTask,
+  serializeTaskStatus,
+  serializePlan,
+  executionSummary,
+  CHECKPOINT_TRUNCATE_LENGTH,
+  truncateCheckpointSummary
 };
-//# sourceMappingURL=chunk-DNNZGH3I.mjs.map
+//# sourceMappingURL=chunk-YTJ7EOV6.mjs.map