@pellux/goodvibes-sdk 0.30.2 → 0.33.0

package/dist/platform/tools/repl/index.js

@@ -1,4 +1,4 @@
-import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import { dirname, join } from 'node:path';
 import ts from 'typescript';
 import { executeSandboxCommand } from '../../runtime/sandbox/backend.js';
@@ -7,29 +7,36 @@ import { SandboxSessionRegistry } from '../../runtime/sandbox/session-registry.j
 import { requireSurfaceRoot } from '../../runtime/surface-root.js';
 import { summarizeError } from '../../utils/error-display.js';
 import { REPL_TOOL_SCHEMA } from './schema.js';
+const REPL_ENV_ALLOWLIST = ['PATH', 'HOME', 'TMPDIR', 'TEMP', 'TMP', 'LANG'];
 function resolveHistoryPath(workspaceRoot, surfaceRoot) {
     return join(workspaceRoot, '.goodvibes', surfaceRoot, 'repl-history.json');
 }
-function createLocalExecPlan(workspaceRoot) {
-    return {
-        backend: 'local',
-        command: process.env.SHELL || 'bash',
-        args: ['-lc', 'true'],
-        workspaceRoot,
-        summary: 'local process exec',
-    };
+function createReplEnv(extra = {}) {
+    const env = {};
+    for (const key of REPL_ENV_ALLOWLIST) {
+        const value = process.env[key];
+        if (value !== undefined)
+            env[key] = value;
+    }
+    return { ...env, ...extra };
 }
-function loadHistory(historyPath) {
+function requireReplSandbox(launchPlan) {
+    if (!launchPlan || launchPlan.backend !== 'qemu') {
+        throw new Error('REPL eval requires an explicit QEMU sandbox backend; configure sandbox.vmBackend, sandbox.qemuImagePath, and sandbox.qemuExecWrapper before evaluating code.');
+    }
+    return launchPlan;
+}
+async function loadHistory(historyPath) {
     try {
-        return JSON.parse(readFileSync(historyPath, 'utf-8'));
+        return JSON.parse(await readFile(historyPath, 'utf-8'));
     }
     catch {
         return [];
     }
 }
-function saveHistory(historyPath, entries) {
-    mkdirSync(dirname(historyPath), { recursive: true });
-    writeFileSync(historyPath, `${JSON.stringify(entries, null, 2)}\n`, 'utf-8');
+async function saveHistory(historyPath, entries) {
+    await mkdir(dirname(historyPath), { recursive: true });
+    await writeFile(historyPath, `${JSON.stringify(entries, null, 2)}\n`, 'utf-8');
 }
 function mapRuntimeToSandboxProfile(runtime) {
     switch (runtime) {
@@ -41,6 +48,9 @@ function mapRuntimeToSandboxProfile(runtime) {
     }
 }
 async function evalJavaScriptInSandbox(expression, bindings, launchPlan, configManager, sandboxSessionRegistry, sessionId) {
+    if (launchPlan.backend !== 'qemu') {
+        throw new Error('evalJavaScriptInSandbox: refusing to run outside QEMU sandbox');
+    }
     const payload = JSON.stringify({ expression, bindings });
     const runner = `
 const payload = JSON.parse(process.env.GV_REPL_PAYLOAD ?? '{}');
@@ -54,17 +64,13 @@ process.stdout.write(typeof value === 'string' ? value : JSON.stringify(value));
     const result = sessionId
         ? sandboxSessionRegistry.execute(sessionId, process.execPath, ['-e', runner], configManager, {
             timeoutMs: 1000,
-            env: {
-                ...process.env,
-                GV_REPL_PAYLOAD: payload,
-            },
+            inheritHostEnv: false,
+            env: createReplEnv({ GV_REPL_PAYLOAD: payload }),
         })
         : executeSandboxCommand(launchPlan, process.execPath, ['-e', runner], {
             timeoutMs: 1000,
-            env: {
-                ...process.env,
-                GV_REPL_PAYLOAD: payload,
-            },
+            inheritHostEnv: false,
+            env: createReplEnv({ GV_REPL_PAYLOAD: payload }),
         });
     if (result.status !== 0) {
         throw new Error((result.stderr || result.stdout || 'JavaScript eval failed.').trim());
@@ -85,10 +91,14 @@ function evalPython(expression, workspaceRoot, configManager, sandboxSessionRegi
         ? sandboxSessionRegistry.execute(sessionId, 'python3', ['-I', '-S', '-c', `import json\nresult = (${expression})\nprint(json.dumps(result))`], configManager, {
             cwd: workspaceRoot,
             timeoutMs: 5000,
+            inheritHostEnv: false,
+            env: createReplEnv(),
         })
         : executeSandboxCommand(launchPlan, 'python3', ['-I', '-S', '-c', `import json\nresult = (${expression})\nprint(json.dumps(result))`], {
             cwd: workspaceRoot,
             timeoutMs: 5000,
+            inheritHostEnv: false,
+            env: createReplEnv(),
         });
     if (run.status !== 0) {
         throw new Error((run.stderr || run.stdout || 'Python eval failed.').trim());
@@ -110,17 +120,13 @@ process.stdout.write(JSON.stringify(rows));
     const result = sessionId
         ? sandboxSessionRegistry.execute(sessionId, process.execPath, ['-e', script], configManager, {
             timeoutMs: 5000,
-            env: {
-                ...process.env,
-                GV_REPL_PAYLOAD: payload,
-            },
+            inheritHostEnv: false,
+            env: createReplEnv({ GV_REPL_PAYLOAD: payload }),
         })
         : executeSandboxCommand(launchPlan, process.execPath, ['-e', script], {
             timeoutMs: 5000,
-            env: {
-                ...process.env,
-                GV_REPL_PAYLOAD: payload,
-            },
+            inheritHostEnv: false,
+            env: createReplEnv({ GV_REPL_PAYLOAD: payload }),
         });
     if (result.status !== 0) {
         throw new Error((result.stderr || result.stdout || 'SQL eval failed.').trim());
@@ -144,17 +150,13 @@ process.stdout.write(JSON.stringify({
     const result = sessionId
         ? sandboxSessionRegistry.execute(sessionId, process.execPath, ['-e', script], configManager, {
             timeoutMs: 2000,
-            env: {
-                ...process.env,
-                GV_REPL_PAYLOAD: payload,
-            },
+            inheritHostEnv: false,
+            env: createReplEnv({ GV_REPL_PAYLOAD: payload }),
         })
         : executeSandboxCommand(launchPlan, process.execPath, ['-e', script], {
             timeoutMs: 2000,
-            env: {
-                ...process.env,
-                GV_REPL_PAYLOAD: payload,
-            },
+            inheritHostEnv: false,
+            env: createReplEnv({ GV_REPL_PAYLOAD: payload }),
         });
     if (result.status !== 0) {
         throw new Error((result.stderr || result.stdout || 'GraphQL eval failed.').trim());
@@ -180,8 +182,7 @@ export function createReplTool(configManager, sandboxSessionRegistry, options) {
                 return { success: false, error: 'repl requires workspaceRoot.' };
             }
             const historyPath = resolveHistoryPath(input.workspaceRoot, surfaceRoot);
-            const history = loadHistory(historyPath);
-            const localExecPlan = createLocalExecPlan(input.workspaceRoot);
+            const history = await loadHistory(historyPath);
             if (input.mode === 'history') {
                 return { success: true, output: JSON.stringify({ count: history.length, history }) };
             }
@@ -190,25 +191,26 @@ export function createReplTool(configManager, sandboxSessionRegistry, options) {
             const runtime = input.runtime ?? 'javascript';
             const sandboxSession = await sandboxSessionRegistry.start(mapRuntimeToSandboxProfile(runtime), `repl:${runtime}`, configManager);
             try {
+                const launchPlan = requireReplSandbox(sandboxSession.launchPlan);
                 let rendered = '';
                 switch (runtime) {
                     case 'javascript':
-                        rendered = await evalJavaScriptInSandbox(input.expression, input.bindings ?? {}, sandboxSession.launchPlan ?? localExecPlan, configManager, sandboxSessionRegistry, sandboxSession.id);
+                        rendered = await evalJavaScriptInSandbox(input.expression, input.bindings ?? {}, launchPlan, configManager, sandboxSessionRegistry, sandboxSession.id);
                         break;
                     case 'typescript':
-                        rendered = await evalTypeScript(input.expression, input.bindings ?? {}, configManager, sandboxSessionRegistry, sandboxSession.launchPlan ?? localExecPlan, sandboxSession.id);
+                        rendered = await evalTypeScript(input.expression, input.bindings ?? {}, configManager, sandboxSessionRegistry, launchPlan, sandboxSession.id);
                         break;
                     case 'python':
-                        rendered = evalPython(input.expression, input.workspaceRoot, configManager, sandboxSessionRegistry, sandboxSession.launchPlan ?? localExecPlan, sandboxSession.id);
+                        rendered = evalPython(input.expression, input.workspaceRoot, configManager, sandboxSessionRegistry, launchPlan, sandboxSession.id);
                         break;
                     case 'sql':
-                        rendered = await evalSql(input.expression, configManager, sandboxSessionRegistry, sandboxSession.launchPlan ?? localExecPlan, sandboxSession.id);
+                        rendered = await evalSql(input.expression, configManager, sandboxSessionRegistry, launchPlan, sandboxSession.id);
                         break;
                     case 'graphql':
-                        rendered = evalGraphql(input.expression, configManager, sandboxSessionRegistry, sandboxSession.launchPlan ?? localExecPlan, sandboxSession.id);
+                        rendered = evalGraphql(input.expression, configManager, sandboxSessionRegistry, launchPlan, sandboxSession.id);
                         break;
                 }
-                saveHistory(historyPath, [...history, {
+                await saveHistory(historyPath, [...history, {
                         ts: Date.now(),
                         runtime,
                         expression: input.expression,
@@ -220,7 +222,7 @@ export function createReplTool(configManager, sandboxSessionRegistry, options) {
                 return { success: true, output: rendered };
             }
             catch (error) {
-                saveHistory(historyPath, [...history, {
+                await saveHistory(historyPath, [...history, {
                         ts: Date.now(),
                         runtime,
                         expression: input.expression,

package/dist/platform/tools/repl/schema.d.ts

@@ -2,8 +2,8 @@ import type { ToolDefinition } from '../../types/tools.js';
 export declare const REPL_TOOL_SCHEMA: ToolDefinition;
 export interface ReplToolInput {
     readonly mode: 'eval' | 'history';
-    readonly runtime?: 'javascript' | 'typescript' | 'python' | 'sql' | 'graphql';
-    readonly expression?: string;
-    readonly bindings?: Record<string, unknown>;
+    readonly runtime?: 'javascript' | 'typescript' | 'python' | 'sql' | 'graphql' | undefined;
+    readonly expression?: string | undefined;
+    readonly bindings?: Record<string, unknown> | undefined;
 }
 //# sourceMappingURL=schema.d.ts.map

package/dist/platform/tools/repl/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/platform/tools/repl/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,eAAO,MAAM,gBAAgB,EAAE,cAc9B,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;IAC9E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/platform/tools/repl/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,eAAO,MAAM,gBAAgB,EAAE,cAc9B,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAC;IAC1F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACzD"}

package/dist/platform/tools/shared/auto-heal.d.ts

@@ -7,7 +7,8 @@
  *   3. ToolLLM: LLM-assisted fix with error context
  *
  * Design constraints:
- *   - Never throws — returns {healed: false, content: originalContent} on any failure
+ *   - Returns {healed: false, content: originalContent} with warnings whenever
+ *     repair cannot safely produce validated replacement content
  *   - Each stage checks if errors are resolved before proceeding to the next
  *   - Uses Bun.which() to detect available tools at runtime
  */
@@ -17,7 +18,8 @@ import type { ToolLLM } from '../../config/tool-llm.js';
 export interface HealResult {
     healed: boolean;
     content: string;
-    method?: 'formatter' | 'linter' | 'llm';
+    method?: 'formatter' | 'linter' | 'llm' | undefined;
+    warnings?: string[] | undefined;
 }
 /**
  * AutoHealer — attempts to fix content with validation errors via a staged pipeline.

package/dist/platform/tools/shared/auto-heal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auto-heal.d.ts","sourceRoot":"","sources":["../../../../src/platform/tools/shared/auto-heal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAIxD,sCAAsC;AACtC,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,KAAK,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,qBAAa,UAAU;IAEnB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,EACzC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;IAGjD;;;;;;;OAOG;IACG,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IA8CpF;;OAEG;YACW,aAAa;IAmD3B;;OAEG;YACW,UAAU;IAqCxB;;OAEG;YACW,OAAO;IAsDrB;;;;;OAKG;YACW,eAAe;CA0B9B"}
+{"version":3,"file":"auto-heal.d.ts","sourceRoot":"","sources":["../../../../src/platform/tools/shared/auto-heal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAIxD,sCAAsC;AACtC,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CACjC;AAOD;;;;;;;GAOG;AACH,qBAAa,UAAU;IAEnB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,EACzC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;IAGjD;;;;;;;OAOG;IACG,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAkDpF;;OAEG;YACW,aAAa;IA0D3B;;OAEG;YACW,UAAU;IA2CxB;;OAEG;YACW,OAAO;IA8DrB;;;;;OAKG;YACW,eAAe;CA0B9B"}

package/dist/platform/tools/shared/auto-heal.js

@@ -7,7 +7,8 @@
  *   3. ToolLLM: LLM-assisted fix with error context
  *
  * Design constraints:
- *   - Never throws — returns {healed: false, content: originalContent} on any failure
+ *   - Returns {healed: false, content: originalContent} with warnings whenever
+ *     repair cannot safely produce validated replacement content
  *   - Each stage checks if errors are resolved before proceeding to the next
  *   - Uses Bun.which() to detect available tools at runtime
  */
@@ -17,6 +18,10 @@ import { join, extname } from 'node:path';
 import { randomBytes } from 'node:crypto';
 import { logger } from '../../utils/logger.js';
 import { summarizeError } from '../../utils/error-display.js';
+function addWarning(warnings, message, error) {
+    const warning = error === undefined ? message : `${message}: ${summarizeError(error)}`;
+    warnings.push(warning);
+}
 /**
  * AutoHealer — attempts to fix content with validation errors via a staged pipeline.
  *
@@ -41,6 +46,7 @@ export class AutoHealer {
      * @returns            Heal result — healed=true means content was fixed.
      */
     async heal(filePath, content, errors) {
+        const warnings = [];
         try {
             // Config gate: only run when tools.autoHeal is enabled
             if (!this.configManager.get('tools.autoHeal')) {
@@ -51,20 +57,24 @@ export class AutoHealer {
             }
             const ext = extname(filePath) || '.txt';
             const tmpFile = join(tmpdir(), `auto-heal-${randomBytes(6).toString('hex')}${ext}`);
+            let result = { healed: false, content };
             try {
                 // Stage 1: Formatter
-                const formatterResult = await this._tryFormatter(tmpFile, content, errors);
+                const formatterResult = await this._tryFormatter(tmpFile, content, errors, warnings);
                 if (formatterResult.healed) {
-                    return formatterResult;
+                    result = formatterResult;
                 }
-                // Stage 2: Linter fix
-                const linterResult = await this._tryLinter(tmpFile, formatterResult.content, errors);
-                if (linterResult.healed) {
-                    return linterResult;
+                else {
+                    // Stage 2: Linter fix
+                    const linterResult = await this._tryLinter(tmpFile, formatterResult.content, errors, warnings);
+                    if (linterResult.healed) {
+                        result = linterResult;
+                    }
+                    else {
+                        // Stage 3: ToolLLM
+                        result = await this._tryLLM(filePath, linterResult.content, errors, warnings);
+                    }
                 }
-                // Stage 3: ToolLLM
-                const llmResult = await this._tryLLM(filePath, linterResult.content, errors);
-                return llmResult;
             }
             finally {
                 // Clean up temp file
@@ -73,20 +83,22 @@ export class AutoHealer {
                         unlinkSync(tmpFile);
                     }
                 }
-                catch {
-                    // Ignore cleanup errors
+                catch (cleanupErr) {
+                    addWarning(warnings, `Auto-heal cleanup failed for temporary file '${tmpFile}'`, cleanupErr);
                 }
             }
+            return warnings.length > 0 ? { ...result, warnings } : result;
         }
         catch (err) {
-            logger.debug('AutoHealer.heal: unexpected error (non-fatal)', { error: summarizeError(err) });
-            return { healed: false, content };
+            logger.warn('AutoHealer.heal: unexpected error', { error: summarizeError(err) });
+            addWarning(warnings, 'Auto-heal failed unexpectedly', err);
+            return { healed: false, content, warnings };
         }
     }
     /**
      * Stage 1: Try formatting with prettier or biome.
      */
-    async _tryFormatter(tmpFile, content, errors) {
+    async _tryFormatter(tmpFile, content, errors, warnings) {
         try {
             const prettier = Bun.which('prettier');
             const biome = Bun.which('biome');
@@ -108,6 +120,7 @@ export class AutoHealer {
             }
             if (proc.exitCode !== 0) {
                 logger.debug('AutoHealer: formatter exited non-zero, skipping stage 1');
+                addWarning(warnings, 'Auto-heal formatter exited non-zero; continuing to later repair stages');
                 return { healed: false, content };
             }
             const formatted = readFileSync(tmpFile, 'utf-8');
@@ -116,7 +129,7 @@ export class AutoHealer {
                 return { healed: false, content };
             }
             // Check if errors appear resolved (heuristic: no syntax errors after format)
-            const resolved = await this._errorsResolved(tmpFile, errors);
+            const resolved = await this._errorsResolved(tmpFile, errors, warnings);
             if (resolved) {
                 logger.debug('AutoHealer: errors resolved by formatter');
                 return { healed: true, content: formatted, method: 'formatter' };
@@ -125,14 +138,15 @@ export class AutoHealer {
             return { healed: false, content: formatted };
         }
         catch (err) {
-            logger.debug('AutoHealer: formatter stage failed (non-fatal)', { error: summarizeError(err) });
+            logger.warn('AutoHealer: formatter stage failed', { error: summarizeError(err) });
+            addWarning(warnings, 'Auto-heal formatter stage failed; continuing to later repair stages', err);
             return { healed: false, content };
         }
     }
     /**
      * Stage 2: Try linter fix with eslint.
      */
-    async _tryLinter(tmpFile, content, errors) {
+    async _tryLinter(tmpFile, content, errors, warnings) {
         try {
             const eslint = Bun.which('eslint');
             if (!eslint) {
@@ -150,7 +164,7 @@ export class AutoHealer {
             if (fixed === content) {
                 return { healed: false, content };
             }
-            const resolved = await this._errorsResolved(tmpFile, errors);
+            const resolved = await this._errorsResolved(tmpFile, errors, warnings);
             if (resolved) {
                 logger.debug('AutoHealer: errors resolved by linter');
                 return { healed: true, content: fixed, method: 'linter' };
@@ -158,14 +172,15 @@ export class AutoHealer {
             return { healed: false, content: fixed };
         }
         catch (err) {
-            logger.debug('AutoHealer: linter stage failed (non-fatal)', { error: summarizeError(err) });
+            logger.warn('AutoHealer: linter stage failed', { error: summarizeError(err) });
+            addWarning(warnings, 'Auto-heal linter stage failed; continuing to LLM repair', err);
             return { healed: false, content };
         }
     }
     /**
      * Stage 3: Try ToolLLM with error context.
      */
-    async _tryLLM(filePath, content, errors) {
+    async _tryLLM(filePath, content, errors, warnings) {
         try {
             const errorList = errors.map((e, i) => `${i + 1}. ${e}`).join('\n');
             const prompt = [
@@ -189,15 +204,17 @@ export class AutoHealer {
             });
             if (!response || response.trim() === '') {
                 logger.debug('AutoHealer: LLM returned empty response');
+                addWarning(warnings, 'Auto-heal LLM returned an empty response');
                 return { healed: false, content };
             }
             // Verify the LLM fix actually resolves errors
             const llmTmpFile = join(tmpdir(), `auto-heal-llm-${randomBytes(6).toString('hex')}${extname(filePath) || '.txt'}`);
             try {
                 writeFileSync(llmTmpFile, response, 'utf-8');
-                const resolved = await this._errorsResolved(llmTmpFile, errors);
+                const resolved = await this._errorsResolved(llmTmpFile, errors, warnings);
                 if (!resolved) {
                     logger.debug('AutoHealer: LLM response did not resolve errors');
+                    addWarning(warnings, 'Auto-heal LLM response did not resolve validation errors');
                     return { healed: false, content };
                 }
             }
@@ -206,15 +223,16 @@ export class AutoHealer {
                     if (existsSync(llmTmpFile))
                         unlinkSync(llmTmpFile);
                 }
-                catch {
-                    // Ignore cleanup errors
+                catch (cleanupErr) {
+                    addWarning(warnings, `Auto-heal cleanup failed for temporary LLM file '${llmTmpFile}'`, cleanupErr);
                 }
             }
             logger.debug('AutoHealer: errors resolved by LLM');
             return { healed: true, content: response, method: 'llm' };
         }
         catch (err) {
-            logger.debug('AutoHealer: LLM stage failed (non-fatal)', { error: summarizeError(err) });
+            logger.warn('AutoHealer: LLM stage failed', { error: summarizeError(err) });
+            addWarning(warnings, 'Auto-heal LLM stage failed', err);
             return { healed: false, content };
         }
     }
@@ -224,7 +242,7 @@ export class AutoHealer {
      * For JS/TS files: uses Bun's built-in transpiler to check for syntax errors.
      * For other files: assumes resolved if formatter/linter succeeded (conservative).
      */
-    async _errorsResolved(tmpFile, _errors) {
+    async _errorsResolved(tmpFile, _errors, warnings) {
         try {
             const ext = extname(tmpFile).toLowerCase();
             const isJsTs = ['.js', '.ts', '.jsx', '.tsx', '.mjs', '.cjs'].includes(ext);
@@ -244,9 +262,9 @@ export class AutoHealer {
                 return false;
             }
         }
-        catch {
-            // If we can't check, optimistically assume resolved
-            return true;
+        catch (err) {
+            addWarning(warnings, `Auto-heal could not verify repaired content in '${tmpFile}'`, err);
+            return false;
         }
     }
 }

package/dist/platform/tools/shared/overflow.d.ts

@@ -8,11 +8,11 @@ export declare const DEFAULT_MAX_CHARS = 50000;
  */
 export interface RetentionPolicyConfig {
     /** Maximum age of a spill entry in milliseconds. Default: 1 hour. */
-    maxAgeMs?: number;
+    maxAgeMs?: number | undefined;
     /** Maximum number of retained entries. Default: unlimited. */
-    maxCount?: number;
+    maxCount?: number | undefined;
     /** Maximum total size of retained entries in bytes. Default: unlimited. */
-    maxSizeBytes?: number;
+    maxSizeBytes?: number | undefined;
 }
 /**
  * SpillEntry — a single overflow/spill record as seen by the backend.
@@ -50,13 +50,13 @@ export interface SpillBackend {
 export interface OverflowResult {
     content: string;
     /** Typed ref: `file:path`, `ledger:key`, or `diagnostics:key`. */
-    overflowRef?: string;
+    overflowRef?: string | undefined;
     /** Backend type that stored the overflow content. */
-    spillBackend?: SpillBackendType;
+    spillBackend?: SpillBackendType | undefined;
 }
 export interface OverflowOptions {
-    maxChars?: number;
-    label?: string;
+    maxChars?: number | undefined;
+    label?: string | undefined;
 }
 /**
  * FileBackend — spills overflow content to `.goodvibes/.overflow/` on disk.
@@ -98,22 +98,22 @@ export declare class DiagnosticsBackend implements SpillBackend {
     list(): SpillEntry[];
 }
 /**
- * Create a spill backend by type. Defaults to `'file'`.
+ * Create a spill backend by type.
  */
 export declare function createSpillBackend(type?: SpillBackendType, baseDir?: string): SpillBackend;
 export interface OverflowHandlerConfig {
     /**
      * Which backend to use. Defaults to `'file'`.
      */
-    spillBackend?: SpillBackendType;
+    spillBackend?: SpillBackendType | undefined;
     /** Base directory for FileBackend. */
-    baseDir?: string;
+    baseDir?: string | undefined;
     /** Retention policy applied during cleanup(). */
-    retention?: RetentionPolicyConfig;
+    retention?: RetentionPolicyConfig | undefined;
     /** Inject a custom backend directly (takes precedence over spillBackend). */
-    backend?: SpillBackend;
+    backend?: SpillBackend | undefined;
     /** Feature flags gate alternate spill backends when supplied by SDK runtime services. */
-    featureFlags?: FeatureFlagReader;
+    featureFlags?: FeatureFlagReader | undefined;
 }
 /**
  * Handles large tool output by delegating overflow content to a pluggable

package/dist/platform/tools/shared/overflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"overflow.d.ts","sourceRoot":"","sources":["../../../../src/platform/tools/shared/overflow.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAK9E,eAAO,MAAM,iBAAiB,QAAS,CAAC;AAKxC;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAUD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,mEAAmE;IACnE,EAAE,EAAE,MAAM,CAAC;IACX,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,WAAW,EAAE,gBAAgB,CAAC;CAC/B;AAED,sDAAsD;AACtD,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,QAAQ,GAAG,aAAa,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAC5D,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC9C,IAAI,IAAI,UAAU,EAAE,CAAC;CACtB;AAID,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,YAAY,CAAC,EAAE,gBAAgB,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID;;GAEG;AACH,qBAAa,WAAY,YAAW,YAAY;IAC9C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,OAAO,EAAE,MAAM;IAI3B,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,SAAS;IAOjB,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAwB3D,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAc/B,OAAO,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,IAAI;IAsD7C,0GAA0G;IAC1G,IAAI,IAAI,UAAU,EAAE;CAmCrB;AAID;;;GAGG;AACH,qBAAa,aAAc,YAAW,YAAY;IAChD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAY;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsC;IAE9D,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAW3D,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAE/B,OAAO,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,IAAI;IAmB7C,IAAI,IAAI,UAAU,EAAE;CACrB;AAID;;;GAGG;AACH,qBAAa,kBAAmB,YAAW,YAAY;IACrD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqF;IAEzG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAQ3D,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAEhC,OAAO,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,IAAI;IAqB7C,IAAI,IAAI,UAAU,EAAE;CAGrB;AAID;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,gBAAyB,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,YAAY,CAalG;AAID,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,6EAA6E;IAC7E,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,yFAAyF;IACzF,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAID;;;;;;;;;;GAUG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;gBAEtC,MAAM,GAAE,qBAA0B;IAW9C,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,QAAQ;IAShB;;;;OAIG;IACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,cAAc;IAoClE;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,IAAI;IAI7C,6DAA6D;IAC7D,IAAI,IAAI,UAAU,EAAE;IAIpB,sCAAsC;IACtC,IAAI,WAAW,IAAI,gBAAgB,CAElC;CACF;AAID;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,qBAAqB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAIjH"}
+{"version":3,"file":"overflow.d.ts","sourceRoot":"","sources":["../../../../src/platform/tools/shared/overflow.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAK9E,eAAO,MAAM,iBAAiB,QAAS,CAAC;AAKxC;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAUD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,mEAAmE;IACnE,EAAE,EAAE,MAAM,CAAC;IACX,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,WAAW,EAAE,gBAAgB,CAAC;CAC/B;AAED,sDAAsD;AACtD,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,QAAQ,GAAG,aAAa,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAC5D,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC9C,IAAI,IAAI,UAAU,EAAE,CAAC;CACtB;AAID,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,qDAAqD;IACrD,YAAY,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;CAC7C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAID;;GAEG;AACH,qBAAa,WAAY,YAAW,YAAY;IAC9C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,OAAO,EAAE,MAAM;IAI3B,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,SAAS;IAOjB,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAwB3D,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAc/B,OAAO,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,IAAI;IAsD7C,0GAA0G;IAC1G,IAAI,IAAI,UAAU,EAAE;CAmCrB;AAID;;;GAGG;AACH,qBAAa,aAAc,YAAW,YAAY;IAChD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAY;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsC;IAE9D,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAW3D,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAE/B,OAAO,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,IAAI;IAmB7C,IAAI,IAAI,UAAU,EAAE;CACrB;AAID;;;GAGG;AACH,qBAAa,kBAAmB,YAAW,YAAY;IACrD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqF;IAEzG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAQ3D,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAEhC,OAAO,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,IAAI;IAsB7C,IAAI,IAAI,UAAU,EAAE;CAGrB;AAID;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,gBAAyB,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,YAAY,CAUlG;AAID,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,YAAY,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC5C,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,iDAAiD;IACjD,SAAS,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;IAC9C,6EAA6E;IAC7E,OAAO,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACnC,yFAAyF;IACzF,YAAY,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CAC9C;AAID;;;;;;;;;;GAUG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;gBAEtC,MAAM,GAAE,qBAA0B;IAW9C,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,QAAQ;IAShB;;;;OAIG;IACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,cAAc;IAoClE;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,IAAI;IAI7C,6DAA6D;IAC7D,IAAI,IAAI,UAAU,EAAE;IAIpB,sCAAsC;IACtC,IAAI,WAAW,IAAI,gBAAgB,CAElC;CACF;AAID;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,qBAAqB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAIjH"}