@orion-agents/orion-code 0.1.7 → 0.1.9

package/dist/ui/shared/text.js

@@ -1,12 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeTerminalLine = sanitizeTerminalLine;
 exports.stripAnsi = stripAnsi;
 exports.visualWidth = visualWidth;
 exports.padEndVisible = padEndVisible;
 exports.truncateVisible = truncateVisible;
-const ANSI_PATTERN = /\x1b\[[0-9;]*m/g;
+const style_1 = require("../../tui-core/style");
+/** Sanitize untrusted labels before adding renderer-owned ANSI styling. */
+function sanitizeTerminalLine(text) {
+    return (0, style_1.sanitizeTerminalText)(String(text)).replace(/\n/gu, ' ');
+}
 function stripAnsi(text) {
-    return text.replace(ANSI_PATTERN, '');
+    return (0, style_1.sanitizeTerminalText)(String(text));
 }
 function visualWidth(text) {
     let width = 0;
@@ -41,15 +46,18 @@ function truncateVisible(text, targetWidth) {
     return out + '…';
 }
 function isWideCodePoint(cp) {
-    return cp >= 0x1100 && (cp <= 0x115F || cp === 0x2329 || cp === 0x232A ||
-        (cp >= 0x2E80 && cp <= 0xA4CF && cp !== 0x303F) ||
-        (cp >= 0xAC00 && cp <= 0xD7A3) ||
-        (cp >= 0xF900 && cp <= 0xFAFF) ||
-        (cp >= 0xFE10 && cp <= 0xFE19) ||
-        (cp >= 0xFE30 && cp <= 0xFE6F) ||
-        (cp >= 0xFF01 && cp <= 0xFF60) ||
-        (cp >= 0xFFE0 && cp <= 0xFFE6) ||
-        (cp >= 0x20000 && cp <= 0x2FFFD) ||
-        (cp >= 0x30000 && cp <= 0x3FFFD));
+    return (cp >= 0x1100 &&
+        (cp <= 0x115f ||
+            cp === 0x2329 ||
+            cp === 0x232a ||
+            (cp >= 0x2e80 && cp <= 0xa4cf && cp !== 0x303f) ||
+            (cp >= 0xac00 && cp <= 0xd7a3) ||
+            (cp >= 0xf900 && cp <= 0xfaff) ||
+            (cp >= 0xfe10 && cp <= 0xfe19) ||
+            (cp >= 0xfe30 && cp <= 0xfe6f) ||
+            (cp >= 0xff01 && cp <= 0xff60) ||
+            (cp >= 0xffe0 && cp <= 0xffe6) ||
+            (cp >= 0x20000 && cp <= 0x2fffd) ||
+            (cp >= 0x30000 && cp <= 0x3fffd)));
 }
 //# sourceMappingURL=text.js.map

package/dist/ui/shared/text.js.map

@@ -1 +1 @@
-{"version":3,"file":"text.js","sourceRoot":"","sources":["../../../src/ui/shared/text.ts"],"names":[],"mappings":";;AAEA,8BAEC;AAED,kCAOC;AAED,sCAGC;AAED,0CAkBC;AAtCD,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAEvC,SAAgB,SAAS,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,WAAW,CAAC,IAAY;IACtC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,KAAK,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,aAAa,CAAC,IAAY,EAAE,WAAmB;IAC7D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY,EAAE,WAAmB;IAC/D,IAAI,WAAW,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,WAAW;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,WAAW,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IAEjC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,WAAW,GAAG,CAAC,CAAC;IAE9B,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,KAAK,GAAG,OAAO,GAAG,KAAK;YAAE,MAAM;QACnC,GAAG,IAAI,EAAE,CAAC;QACV,KAAK,IAAI,OAAO,CAAC;IACnB,CAAC;IAED,OAAO,GAAG,GAAG,GAAG,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,EAAU;IACjC,OAAO,EAAE,IAAI,MAAM,IAAI,CACrB,EAAE,IAAI,MAAM,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,MAAM;QAC9C,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,KAAK,MAAM,CAAC;QAC/C,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;QAC9B,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;QAC9B,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;QAC9B,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;QAC9B,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;QAC9B,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;QAC9B,CAAC,EAAE,IAAI,OAAO,IAAI,EAAE,IAAI,OAAO,CAAC;QAChC,CAAC,EAAE,IAAI,OAAO,IAAI,EAAE,IAAI,OAAO,CAAC,CACjC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"text.js","sourceRoot":"","sources":["../../../src/ui/shared/text.ts"],"names":[],"mappings":";;AAGA,oDAEC;AAED,8BAEC;AAED,kCAOC;AAED,sCAGC;AAED,0CAkBC;AA3CD,gDAA4D;AAE5D,2EAA2E;AAC3E,SAAgB,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAA,4BAAoB,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,SAAgB,SAAS,CAAC,IAAY;IACpC,OAAO,IAAA,4BAAoB,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAgB,WAAW,CAAC,IAAY;IACtC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,KAAK,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,aAAa,CAAC,IAAY,EAAE,WAAmB;IAC7D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY,EAAE,WAAmB;IAC/D,IAAI,WAAW,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,WAAW;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,WAAW,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IAEjC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,WAAW,GAAG,CAAC,CAAC;IAE9B,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,KAAK,GAAG,OAAO,GAAG,KAAK;YAAE,MAAM;QACnC,GAAG,IAAI,EAAE,CAAC;QACV,KAAK,IAAI,OAAO,CAAC;IACnB,CAAC;IAED,OAAO,GAAG,GAAG,GAAG,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,EAAU;IACjC,OAAO,CACL,EAAE,IAAI,MAAM;QACZ,CAAC,EAAE,IAAI,MAAM;YACX,EAAE,KAAK,MAAM;YACb,EAAE,KAAK,MAAM;YACb,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,KAAK,MAAM,CAAC;YAC/C,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;YAC9B,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;YAC9B,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;YAC9B,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;YAC9B,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;YAC9B,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;YAC9B,CAAC,EAAE,IAAI,OAAO,IAAI,EAAE,IAAI,OAAO,CAAC;YAChC,CAAC,EAAE,IAAI,OAAO,IAAI,EAAE,IAAI,OAAO,CAAC,CAAC,CACpC,CAAC;AACJ,CAAC"}

package/dist/ui/suggestions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"suggestions.d.ts","sourceRoot":"","sources":["../../src/ui/suggestions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAIjE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAoCrD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,IAAI,CAevC;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,GAAE,MAAW,GAAG,IAAI,CAO3E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C"}
+{"version":3,"file":"suggestions.d.ts","sourceRoot":"","sources":["../../src/ui/suggestions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAqBH;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAIjE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAsCrD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,IAAI,CAevC;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,GAAE,MAAW,GAAG,IAAI,CAO3E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C"}

package/dist/ui/suggestions.js

@@ -16,6 +16,7 @@ exports.showAllSuggestions = showAllSuggestions;
 exports.getSuggestionHeight = getSuggestionHeight;
 const chalk_1 = __importDefault(require("chalk"));
 const index_1 = require("../commands/index");
+const text_1 = require("./shared/text");
 // ============================================================================
 // 颜色常量
 // ============================================================================
@@ -57,15 +58,15 @@ function updateSuggestions(input) {
                 process.stdout.write(DIM('  Commands:\n'));
             }
             else {
-                process.stdout.write(DIM(`  Matching "${partial}":\n`));
+                process.stdout.write(DIM(`  Matching "${(0, text_1.sanitizeTerminalLine)(partial)}":\n`));
             }
             // 渲染每个匹配的命令
             matches.forEach(m => {
                 const cmd = (0, index_1.findCommand)(m);
                 if (cmd) {
-                    const hint = cmd.argumentHint ? ` ${cmd.argumentHint}` : '';
-                    const desc = cmd.description;
-                    process.stdout.write(`  ${ACCENT(`/${m}`)}${DIM(hint)} - ${INFO(desc)}\n`);
+                    const hint = cmd.argumentHint ? ` ${(0, text_1.sanitizeTerminalLine)(cmd.argumentHint)}` : '';
+                    const desc = (0, text_1.sanitizeTerminalLine)(cmd.description);
+                    process.stdout.write(`  ${ACCENT(`/${(0, text_1.sanitizeTerminalLine)(m)}`)}${DIM(hint)} - ${INFO(desc)}\n`);
                 }
             });
             suggestionAreaHeight = matches.length + 2; // +2 for title and blank line
@@ -100,8 +101,8 @@ function redrawInput(input, modeIndicator = '') {
     // 移动到行首并清除整行
     process.stdout.write('\r\x1b[2K');
     // 绘制 prompt 和输入
-    const prompt = ACCENT('❯ ') + DIM(modeIndicator);
-    process.stdout.write(prompt + input);
+    const prompt = ACCENT('❯ ') + DIM((0, text_1.sanitizeTerminalLine)(modeIndicator));
+    process.stdout.write(prompt + (0, text_1.sanitizeTerminalLine)(input));
 }
 /**
  * 显示所有命令建议（输入 "/" 时触发）

package/dist/ui/suggestions.js.map

@@ -1 +1 @@
-{"version":3,"file":"suggestions.js","sourceRoot":"","sources":["../../src/ui/suggestions.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;AAyBH,0DAIC;AAMD,8CAoCC;AAKD,4CAeC;AAOD,kCAOC;AAKD,gDAEC;AAKD,kDAEC;AArHD,kDAA0B;AAC1B,6CAAiE;AAEjE,+EAA+E;AAC/E,OAAO;AACP,+EAA+E;AAE/E,MAAM,MAAM,GAAG,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACpC,MAAM,GAAG,GAAG,eAAK,CAAC,GAAG,CAAC;AACtB,MAAM,IAAI,GAAG,eAAK,CAAC,IAAI,CAAC;AAExB,+EAA+E;AAC/E,OAAO;AACP,+EAA+E;AAE/E,mBAAmB;AACnB,IAAI,oBAAoB,GAAG,CAAC,CAAC;AAE7B;;;;GAIG;AACH,SAAgB,uBAAuB,CAAC,OAAe;IACrD,MAAM,KAAK,GAAG,IAAA,uBAAe,GAAE,CAAC;IAChC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;IAClD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,KAAa;IAC7C,gBAAgB,EAAE,CAAC;IAEnB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAEjD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,SAAS;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/B,SAAS;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAE3B,SAAS;YACT,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,OAAO,MAAM,CAAC,CAAC,CAAC;YAC1D,CAAC;YAED,YAAY;YACZ,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;gBAClB,MAAM,GAAG,GAAG,IAAA,mBAAW,EAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC;oBAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7E,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,oBAAoB,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,8BAA8B;YAEzE,SAAS;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB;IAC9B,IAAI,oBAAoB,GAAG,CAAC,EAAE,CAAC;QAC7B,SAAS;QACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE/B,aAAa;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,oBAAoB,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAE,OAAO;YACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;QAC1C,CAAC;QAED,QAAQ;QACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,oBAAoB,GAAG,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CAAC,KAAa,EAAE,gBAAwB,EAAE;IACnE,aAAa;IACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAElC,gBAAgB;IAChB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB;IAChC,iBAAiB,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB;IACjC,OAAO,oBAAoB,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"suggestions.js","sourceRoot":"","sources":["../../src/ui/suggestions.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;AA0BH,0DAIC;AAMD,8CAsCC;AAKD,4CAeC;AAOD,kCAOC;AAKD,gDAEC;AAKD,kDAEC;AAxHD,kDAA0B;AAC1B,6CAAiE;AACjE,wCAAqD;AAErD,+EAA+E;AAC/E,OAAO;AACP,+EAA+E;AAE/E,MAAM,MAAM,GAAG,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACpC,MAAM,GAAG,GAAG,eAAK,CAAC,GAAG,CAAC;AACtB,MAAM,IAAI,GAAG,eAAK,CAAC,IAAI,CAAC;AAExB,+EAA+E;AAC/E,OAAO;AACP,+EAA+E;AAE/E,mBAAmB;AACnB,IAAI,oBAAoB,GAAG,CAAC,CAAC;AAE7B;;;;GAIG;AACH,SAAgB,uBAAuB,CAAC,OAAe;IACrD,MAAM,KAAK,GAAG,IAAA,uBAAe,GAAE,CAAC;IAChC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;IAClD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,KAAa;IAC7C,gBAAgB,EAAE,CAAC;IAEnB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAEjD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,SAAS;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/B,SAAS;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAE3B,SAAS;YACT,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,IAAA,2BAAoB,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAChF,CAAC;YAED,YAAY;YACZ,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;gBAClB,MAAM,GAAG,GAAG,IAAA,mBAAW,EAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,IAAA,2BAAoB,EAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClF,MAAM,IAAI,GAAG,IAAA,2BAAoB,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,MAAM,CAAC,IAAI,IAAA,2BAAoB,EAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAC3E,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,oBAAoB,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,8BAA8B;YAEzE,SAAS;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB;IAC9B,IAAI,oBAAoB,GAAG,CAAC,EAAE,CAAC;QAC7B,SAAS;QACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE/B,aAAa;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,oBAAoB,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;YACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;QAC1C,CAAC;QAED,QAAQ;QACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,oBAAoB,GAAG,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CAAC,KAAa,EAAE,gBAAwB,EAAE;IACnE,aAAa;IACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAElC,gBAAgB;IAChB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAA,2BAAoB,EAAC,aAAa,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,IAAA,2BAAoB,EAAC,KAAK,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB;IAChC,iBAAiB,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB;IACjC,OAAO,oBAAoB,CAAC;AAC9B,CAAC"}

package/docs/migration/v0.1.8-to-v0.1.9.md

@@ -0,0 +1,60 @@
+# Orion Code v0.1.8 → v0.1.9 migration and rollback
+
+Status: release-candidate guidance. Update release receipts before treating v0.1.9 as published.
+
+## What changes
+
+- TaskContract V3 is an additive contract stored inside the existing HarnessState V2 sidecar.
+  Legacy string criteria remain readable and normalize deterministically to stable criterion IDs.
+- Compact Checkpoint V1 remains readable. v0.1.9 writes Checkpoint V2 with source and replacement
+  hashes, semantic candidate receipts, target-headroom validation, and Harness/Goal bindings.
+- The canonical session transcript remains append-only. Compact replaces only the model-visible
+  projection, so an invalid or stale checkpoint can fall back to the transcript without replaying
+  external side effects.
+- Legacy Goal continuation counters remain readable as telemetry, but no longer terminate a
+  progressing Goal after five continuations. Explicit resource budgets, no-progress, provider,
+  permission, abort, and evidence gates remain active.
+- Deprecated subagent turn fields remain accepted for one compatibility window and translate to
+  request/tool budgets.
+
+## Before upgrading
+
+1. Stop active Orion CLI processes so session sidecars are quiescent.
+2. Record the installed version with `orion --version`.
+3. Make a recoverable backup of `~/.orion-code` using a copy or snapshot tool appropriate for the
+   machine. Keep file permissions intact and do not commit the directory.
+4. Run `orion doctor` on v0.1.8 and resolve storage/native dependency errors first.
+
+Install the immutable candidate only after its npm receipt exists:
+
+```bash
+npm install -g @orion-agents/orion-code@0.1.9
+orion --version
+orion doctor
+```
+
+## First resume on v0.1.9
+
+- Resume a non-critical session first and inspect `/context explain`.
+- A valid V1 checkpoint is accepted. The next successful compact writes V2.
+- A stale, corrupt, source-mismatched, Harness-mismatched, or Goal-mismatched V2 checkpoint is not
+  installed. Orion keeps the canonical transcript and reports an actionable diagnostic.
+- Do not delete `.candidate`, `.previous`, `.lock`, or `.recovery` files while an Orion process is
+  running. Use the explicit storage repair flow after confirming no process owns them.
+
+## Rollback
+
+The executable can be rolled back without deleting session data:
+
+```bash
+npm install -g @orion-agents/orion-code@0.1.8
+orion --version
+```
+
+v0.1.8 does not understand V2 Compact sidecars. It can still read the canonical transcript, but it
+may ignore the latest model projection and V3-only criterion metadata. For the cleanest rollback,
+stop Orion, restore the pre-upgrade `~/.orion-code` backup, then resume. Never copy only the compact
+pointer without its session meta, transcript, Harness, and Goal sidecars.
+
+If rollback was caused by a data mismatch, preserve the v0.1.9 backup and diagnostic output for
+audit; do not repeatedly compact or resume the affected session until the mismatch is understood.

package/docs/plan/v0.1.9-release-checklist.md

@@ -0,0 +1,64 @@
+# v0.1.9 release checklist
+
+Status: `candidate`; immutable source SHA and delivery receipts are filled only after the relevant
+action succeeds.
+
+## Identity and scope
+
+- [x] `package.json` and `npm-shrinkwrap.json` both identify `0.1.9`.
+- [ ] `node scripts/release/release-check.js --expected-version 0.1.9` passes on the exact RC SHA.
+- [x] Original user-owned dirty documentation is excluded from the release commit.
+- [x] CHANGELOG, README files, migration guide, goals, architecture benchmark, and this checklist
+      describe the same candidate state.
+
+## Issue and workstream receipts
+
+- [x] #206: independent usage-ledger lock, invalid-number fail-closed behavior, lock timeout
+      diagnostic, and real multi-process replay test.
+- [x] #207: canonical containment, symlink/non-regular rejection, descriptor revalidation,
+      replacement-race regression, and redacted errors.
+- [x] #161: explicit decision is `next` candidate only unless the user separately authorizes
+      `latest`; keep the issue open while stable promotion remains pending.
+- [x] Semantic Compact: ten-round invariant retention, tool-group integrity, bounded focus,
+      provider fallback, model-switch preflight, stale-CAS rejection, crash rollback, restart/resume.
+- [x] Autonomous Stop: request/Goal/subagent StopDecision parity, 21+ real Goal continuations,
+      no-progress pause, resource pause, abort/shutdown, and Print no-ghost behavior.
+- [x] HarnessKernel: TaskContract V3, criterion evidence graph, capability versions, deterministic
+      serialization, atomic prompt budgets, opaque evidence rejection, and explain output.
+
+## Source gates
+
+- [x] `npm run lint`
+- [x] `npm run build`
+- [x] `npm test -- --runInBand`
+- [x] `npm run test:coverage -- --runInBand`; total coverage does not regress and new core modules
+      meet the documented branch target.
+- [ ] `npm run prepublishOnly`
+- [x] `git diff --check`
+- [ ] worktree clean at the release SHA
+
+## Runtime and compatibility matrix
+
+- [x] Node 20: clean install, build, full serial Jest, native DB probe, version/help.
+- [x] Node 22: clean install, build, full serial Jest, native DB probe, version/help.
+- [x] Node 24: clean install, build, full serial Jest, native DB probe, version/help.
+- [x] TUI BUILD/PLAN/AUTO/Goal smoke.
+- [x] Terminal, Print text/JSONL, Research, resume/Goal, and Compact lifecycle smoke.
+- [ ] Exact `npm pack` tarball installs into an empty prefix and runs version/help/doctor plus a
+      compact/resume smoke.
+
+## Delivery receipts
+
+| Receipt               | Expected evidence                         | Result                           |
+| --------------------- | ----------------------------------------- | -------------------------------- |
+| Source SHA            | immutable commit on `v0.1.9`              | pending                          |
+| Pull request          | URL, head SHA, CI conclusion              | pending                          |
+| Git tag               | separately authorized `v0.1.9` target     | not authorized by this checklist |
+| GitHub Release        | separately authorized release URL         | not authorized by this checklist |
+| npm immutable version | `@orion-agents/orion-code@0.1.9` readback | pending                          |
+| npm `next`            | dist-tag readback equals `0.1.9`          | pending                          |
+| npm `latest`          | separate explicit authorization           | keep at `0.1.4`                  |
+
+Rollback: do not infer one receipt from another. If npm publication fails, leave `next` on the
+last verified version. Follow [the migration guide](../migration/v0.1.8-to-v0.1.9.md) for
+data-compatible executable rollback.

package/docs/readme.md

@@ -0,0 +1,27 @@
+# Orion Code Documentation
+
+## Directory ownership
+
+- [`architecture/`](architecture/repository-layout.md) — current component ownership, dependency
+  direction, and product/runtime contracts.
+- [`goals/`](goals/orion-code-项目级目标.md) — durable product goals and Goal evidence/recovery
+  guidance.
+- [`plan/`](plan/v0.1.9-plan.md) — active execution plans, current release gates, and future roadmap.
+- [`archive/releases/v0.1.x/`](archive/releases/v0.1.x/README.md) — immutable historical plans,
+  audits, freeze boundaries, and release receipts.
+- `test/` — maintained manual test references that do not belong in the Jest suite.
+- [`orion.example.json`](orion.example.json) — current providers+models configuration example.
+- [`zed-acp-integration.md`](zed-acp-integration.md) — Zed ACP integration guidance.
+
+The repository release history is canonical in [`CHANGELOG.md`](../CHANGELOG.md). Active plans may
+link into the archive, but historical evidence is not moved back into `plan/` merely to satisfy an
+old relative path.
+
+## v0.1.9 release set
+
+- [Autonomous agent plan](plan/v0.1.9-plan.md)
+- [Mature-agent Compact benchmark](architecture/compact-benchmark.md)
+- [Health ledger](plan/v0.1.9-health-ledger.md)
+- [Release checklist](plan/v0.1.9-release-checklist.md)
+- [Migration and rollback](migration/v0.1.8-to-v0.1.9.md)
+- [Durable product goal](goals/v0.1.9-autonomous-agent-goal.md)