@pentoshi/clai 2.0.61 → 3.0.0

package/dist/app/events/app-event.d.ts

@@ -0,0 +1,118 @@
+import type { SessionPlan } from "../../store/plan.js";
+/** Opaque/branded string ID so distinct ID kinds cannot be mixed by accident. */
+export type Brand<T, B extends string> = T & {
+    readonly __brand: B;
+};
+export type SessionId = Brand<string, "SessionId">;
+export type TurnId = Brand<string, "TurnId">;
+export type MessageId = Brand<string, "MessageId">;
+export type ToolCallId = Brand<string, "ToolCallId">;
+export type PlanId = Brand<string, "PlanId">;
+export type TaskId = Brand<string, "TaskId">;
+export declare const asSessionId: (value: string) => SessionId;
+export declare const asTurnId: (value: string) => TurnId;
+export declare const asMessageId: (value: string) => MessageId;
+export declare const asToolCallId: (value: string) => ToolCallId;
+export declare const asPlanId: (value: string) => PlanId;
+export declare const asTaskId: (value: string) => TaskId;
+/** Bumped only when the envelope shape changes in a non-additive way. */
+export declare const APP_EVENT_VERSION: 1;
+export interface AppEvent<TType extends string, TPayload> {
+    /** Globally unique id for this specific event occurrence. */
+    readonly id: string;
+    readonly version: typeof APP_EVENT_VERSION;
+    /** Monotonic, gap-free counter within a session, starting at 1. */
+    readonly sequence: number;
+    readonly sessionId: SessionId;
+    readonly turnId?: TurnId | undefined;
+    readonly timestamp: number;
+    readonly type: TType;
+    readonly payload: TPayload;
+}
+/**
+ * Tool output chunks are NOT concatenated into an unbounded string in the
+ * envelope. The payload carries a reference into the `OutputSpool` (keyed by
+ * tool-call id); components read a bounded tail on demand. See event-buffer.ts.
+ */
+export interface OutputChunkRef {
+    readonly toolCallId: ToolCallId;
+    /** Byte length of the chunk that was just spooled (for progress display). */
+    readonly chunkBytes: number;
+    /** Running total bytes spooled for this tool call after this chunk. */
+    readonly totalBytes: number;
+}
+export interface AppEventPayloads {
+    "turn-started": {
+        readonly prompt: string;
+    };
+    status: {
+        readonly text: string;
+        readonly step?: number | undefined;
+    };
+    "thinking-delta": {
+        readonly text: string;
+    };
+    "thinking-block": {
+        readonly messageId: MessageId;
+        readonly content: string;
+    };
+    "assistant-delta": {
+        readonly text: string;
+    };
+    "assistant-message": {
+        readonly messageId: MessageId;
+        readonly text: string;
+    };
+    notice: {
+        readonly level: "info" | "warn";
+        readonly text: string;
+    };
+    "tool-call": {
+        readonly toolCallId: ToolCallId;
+        readonly name: string;
+        readonly argsDisplay: string;
+    };
+    "tool-output": {
+        readonly ref: OutputChunkRef;
+    };
+    "tool-result": {
+        readonly toolCallId: ToolCallId;
+        readonly ok: boolean;
+        readonly exitCode?: number | undefined;
+        readonly summary: string;
+        readonly artifactPath?: string | undefined;
+    };
+    "tool-blocked": {
+        readonly toolCallId: ToolCallId;
+        readonly name: string;
+        readonly reason: string;
+    };
+    "plan-updated": {
+        readonly planId: PlanId;
+        readonly plan: SessionPlan;
+    };
+    "confirm-requested": {
+        readonly requestId: string;
+        readonly kind: "tool" | "pentest" | "reset" | "continue" | "plan" | "switch";
+        readonly prompt: string;
+    };
+    compacted: {
+        readonly summary: string;
+        readonly beforeTokens: number;
+        readonly afterTokens: number;
+    };
+    "turn-ended": {
+        readonly finalAnswer: string;
+        readonly steps: number;
+    };
+    "turn-aborted": Record<string, never>;
+    "turn-error": {
+        readonly message: string;
+    };
+}
+export type AppEventType = keyof AppEventPayloads;
+export type TypedAppEvent<K extends AppEventType = AppEventType> = K extends AppEventType ? AppEvent<K, AppEventPayloads[K]> : never;
+/** Any event in the app protocol, discriminated by `type`. */
+export type AnyAppEvent = TypedAppEvent;
+export declare function isDeltaEvent(type: AppEventType): boolean;
+export declare function isStructuralEvent(type: AppEventType): boolean;

package/dist/app/events/app-event.js

@@ -0,0 +1,25 @@
+export const asSessionId = (value) => value;
+export const asTurnId = (value) => value;
+export const asMessageId = (value) => value;
+export const asToolCallId = (value) => value;
+export const asPlanId = (value) => value;
+export const asTaskId = (value) => value;
+/** Bumped only when the envelope shape changes in a non-additive way. */
+export const APP_EVENT_VERSION = 1;
+/**
+ * Structural events end a run of coalescible deltas. The TurnController flushes
+ * pending `assistant-delta`/`thinking-delta` text before emitting any of these
+ * so visible order is preserved (ARCHITECTURE.md "flush before structural
+ * events"). Deltas themselves are the only non-structural events.
+ */
+const DELTA_TYPES = new Set([
+    "assistant-delta",
+    "thinking-delta",
+]);
+export function isDeltaEvent(type) {
+    return DELTA_TYPES.has(type);
+}
+export function isStructuralEvent(type) {
+    return !DELTA_TYPES.has(type);
+}
+//# sourceMappingURL=app-event.js.map

package/dist/app/events/app-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-event.js","sourceRoot":"","sources":["../../../src/app/events/app-event.ts"],"names":[],"mappings":"AAkBA,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAa,EAAE,CAAC,KAAkB,CAAC;AAC5E,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAe,CAAC;AACnE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAa,EAAE,CAAC,KAAkB,CAAC;AAC5E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAc,EAAE,CAAC,KAAmB,CAAC;AAC/E,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAe,CAAC;AACnE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAe,CAAC;AAEnE,yEAAyE;AACzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAU,CAAC;AAoF5C;;;;;GAKG;AACH,MAAM,WAAW,GAA8B,IAAI,GAAG,CAAe;IACnE,iBAAiB;IACjB,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,UAAU,YAAY,CAAC,IAAkB;IAC7C,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAkB;IAClD,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC"}

package/dist/app/events/event-buffer.d.ts

@@ -0,0 +1,51 @@
+import type { OutputChunkRef, ToolCallId } from "./app-event.js";
+/**
+ * Text buffer for a single tool stream. By default it keeps **all** characters
+ * (no truncation) so Ctrl+O / click-to-open always shows the full body.
+ * Pass a finite `maxChars` only for tests or memory-sensitive adapters.
+ */
+export interface BoundedTextState {
+    readonly tail: string;
+    readonly totalBytes: number;
+    readonly droppedBytes: number;
+    readonly truncated: boolean;
+}
+export declare class BoundedText {
+    private readonly maxChars;
+    private tailBuf;
+    private total;
+    private dropped;
+    /**
+     * @param maxChars Finite positive cap keeps only the last N chars.
+     *   `Infinity` / `Number.POSITIVE_INFINITY` (default) keeps everything.
+     */
+    constructor(maxChars?: number);
+    append(chunk: string): void;
+    /** Replace the buffer with an authoritative full body (never truncated). */
+    replace(text: string): void;
+    get tail(): string;
+    get totalBytes(): number;
+    get droppedBytes(): number;
+    get truncated(): boolean;
+    snapshot(): BoundedTextState;
+}
+/**
+ * Per-tool-call output spool. Default is unbounded so the UI never loses
+ * bytes. Full artifacts are still written to disk for persistence/export.
+ */
+export declare class OutputSpool {
+    private readonly maxCharsPerTool;
+    private readonly byTool;
+    /** @param maxCharsPerTool Default Infinity — keep full output. */
+    constructor(maxCharsPerTool?: number);
+    append(toolCallId: ToolCallId, chunk: string): OutputChunkRef;
+    /**
+     * Set the full authoritative body after a tool finishes (replaces any live
+     * stream so the pager never shows a truncated mid-run preview).
+     */
+    replace(toolCallId: ToolCallId, text: string): OutputChunkRef;
+    tail(toolCallId: ToolCallId): string;
+    state(toolCallId: ToolCallId): BoundedTextState | undefined;
+    has(toolCallId: ToolCallId): boolean;
+    clear(): void;
+}

package/dist/app/events/event-buffer.js

@@ -0,0 +1,109 @@
+export class BoundedText {
+    maxChars;
+    tailBuf = "";
+    total = 0;
+    dropped = 0;
+    /**
+     * @param maxChars Finite positive cap keeps only the last N chars.
+     *   `Infinity` / `Number.POSITIVE_INFINITY` (default) keeps everything.
+     */
+    constructor(maxChars = Number.POSITIVE_INFINITY) {
+        this.maxChars = maxChars;
+        if (!(this.maxChars > 0))
+            throw new RangeError("maxChars must be positive");
+    }
+    append(chunk) {
+        if (chunk.length === 0)
+            return;
+        this.total += Buffer.byteLength(chunk, "utf8");
+        const combined = this.tailBuf + chunk;
+        if (!Number.isFinite(this.maxChars) || combined.length <= this.maxChars) {
+            this.tailBuf = combined;
+            return;
+        }
+        const overflow = combined.length - this.maxChars;
+        this.dropped += Buffer.byteLength(combined.slice(0, overflow), "utf8");
+        this.tailBuf = combined.slice(overflow);
+    }
+    /** Replace the buffer with an authoritative full body (never truncated). */
+    replace(text) {
+        this.tailBuf = text;
+        this.total = Buffer.byteLength(text, "utf8");
+        this.dropped = 0;
+    }
+    get tail() {
+        return this.tailBuf;
+    }
+    get totalBytes() {
+        return this.total;
+    }
+    get droppedBytes() {
+        return this.dropped;
+    }
+    get truncated() {
+        return this.dropped > 0;
+    }
+    snapshot() {
+        return {
+            tail: this.tailBuf,
+            totalBytes: this.total,
+            droppedBytes: this.dropped,
+            truncated: this.dropped > 0,
+        };
+    }
+}
+/**
+ * Per-tool-call output spool. Default is unbounded so the UI never loses
+ * bytes. Full artifacts are still written to disk for persistence/export.
+ */
+export class OutputSpool {
+    maxCharsPerTool;
+    byTool = new Map();
+    /** @param maxCharsPerTool Default Infinity — keep full output. */
+    constructor(maxCharsPerTool = Number.POSITIVE_INFINITY) {
+        this.maxCharsPerTool = maxCharsPerTool;
+    }
+    append(toolCallId, chunk) {
+        let buffer = this.byTool.get(toolCallId);
+        if (!buffer) {
+            buffer = new BoundedText(this.maxCharsPerTool);
+            this.byTool.set(toolCallId, buffer);
+        }
+        buffer.append(chunk);
+        return {
+            toolCallId,
+            chunkBytes: Buffer.byteLength(chunk, "utf8"),
+            totalBytes: buffer.totalBytes,
+        };
+    }
+    /**
+     * Set the full authoritative body after a tool finishes (replaces any live
+     * stream so the pager never shows a truncated mid-run preview).
+     */
+    replace(toolCallId, text) {
+        let buffer = this.byTool.get(toolCallId);
+        if (!buffer) {
+            buffer = new BoundedText(this.maxCharsPerTool);
+            this.byTool.set(toolCallId, buffer);
+        }
+        buffer.replace(text);
+        return {
+            toolCallId,
+            chunkBytes: Buffer.byteLength(text, "utf8"),
+            totalBytes: buffer.totalBytes,
+        };
+    }
+    tail(toolCallId) {
+        return this.byTool.get(toolCallId)?.tail ?? "";
+    }
+    state(toolCallId) {
+        return this.byTool.get(toolCallId)?.snapshot();
+    }
+    has(toolCallId) {
+        return this.byTool.has(toolCallId);
+    }
+    clear() {
+        this.byTool.clear();
+    }
+}
+//# sourceMappingURL=event-buffer.js.map

package/dist/app/events/event-buffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-buffer.js","sourceRoot":"","sources":["../../../src/app/events/event-buffer.ts"],"names":[],"mappings":"AAcA,MAAM,OAAO,WAAW;IASO;IARrB,OAAO,GAAG,EAAE,CAAC;IACb,KAAK,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,CAAC,CAAC;IAEpB;;;OAGG;IACH,YAA6B,WAAmB,MAAM,CAAC,iBAAiB;QAA3C,aAAQ,GAAR,QAAQ,CAAmC;QACtE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,2BAA2B,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC/B,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxE,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;YACxB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC;QACjD,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,4EAA4E;IAC5E,OAAO,CAAC,IAAY;QAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,QAAQ;QACN,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,UAAU,EAAE,IAAI,CAAC,KAAK;YACtB,YAAY,EAAE,IAAI,CAAC,OAAO;YAC1B,SAAS,EAAE,IAAI,CAAC,OAAO,GAAG,CAAC;SAC5B,CAAC;IACJ,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,WAAW;IAIO;IAHZ,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE7D,kEAAkE;IAClE,YAA6B,kBAAkB,MAAM,CAAC,iBAAiB;QAA1C,oBAAe,GAAf,eAAe,CAA2B;IAAG,CAAC;IAE3E,MAAM,CAAC,UAAsB,EAAE,KAAa;QAC1C,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO;YACL,UAAU;YACV,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;YAC5C,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,UAAsB,EAAE,IAAY;QAC1C,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO;YACL,UAAU;YACV,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;YAC3C,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAsB;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,UAAsB;QAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC;IACjD,CAAC;IAED,GAAG,CAAC,UAAsB;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF"}

package/dist/app/events/sequencer.d.ts

@@ -0,0 +1,32 @@
+import { type AppEvent, type AppEventPayloads, type AppEventType, type MessageId, type SessionId, type TurnId } from "./app-event.js";
+/** Injectable time source so replay tests are deterministic. */
+export interface Clock {
+    now(): number;
+}
+export declare const systemClock: Clock;
+/**
+ * Mints envelope ids and domain ids that lack a natural stable id (assistant
+ * messages, thinking blocks). Tool-call ids come from the agent and are reused
+ * verbatim. Injectable so tests can assert deterministic replay output.
+ */
+export interface IdFactory {
+    event(): string;
+    message(): MessageId;
+}
+export declare function createCountingIdFactory(prefix?: string): IdFactory;
+export declare function createRandomIdFactory(): IdFactory;
+/**
+ * Assigns a monotonic, gap-free `sequence` per session and wraps a typed
+ * payload in the `AppEvent` envelope. One sequencer instance owns one session.
+ */
+export declare class EventSequencer {
+    readonly ids: IdFactory;
+    private readonly clock;
+    private seq;
+    private sessionId;
+    constructor(sessionId: SessionId, ids?: IdFactory, clock?: Clock);
+    get current(): number;
+    /** Start a fresh sequence (e.g. after /new remints the session id). */
+    rebind(sessionId: SessionId): void;
+    build<K extends AppEventType>(type: K, payload: AppEventPayloads[K], turnId?: TurnId | undefined): AppEvent<K, AppEventPayloads[K]>;
+}

package/dist/app/events/sequencer.js

@@ -0,0 +1,55 @@
+import { randomUUID } from "node:crypto";
+import { APP_EVENT_VERSION, asMessageId, } from "./app-event.js";
+export const systemClock = { now: () => Date.now() };
+export function createCountingIdFactory(prefix = "") {
+    let events = 0;
+    let messages = 0;
+    return {
+        event: () => `${prefix}evt-${(++events).toString(36)}`,
+        message: () => asMessageId(`${prefix}msg-${(++messages).toString(36)}`),
+    };
+}
+export function createRandomIdFactory() {
+    return {
+        event: () => randomUUID(),
+        message: () => asMessageId(randomUUID()),
+    };
+}
+/**
+ * Assigns a monotonic, gap-free `sequence` per session and wraps a typed
+ * payload in the `AppEvent` envelope. One sequencer instance owns one session.
+ */
+export class EventSequencer {
+    ids;
+    clock;
+    seq = 0;
+    sessionId;
+    constructor(sessionId, ids = createRandomIdFactory(), clock = systemClock) {
+        this.ids = ids;
+        this.clock = clock;
+        this.sessionId = sessionId;
+    }
+    get current() {
+        return this.seq;
+    }
+    /** Start a fresh sequence (e.g. after /new remints the session id). */
+    rebind(sessionId) {
+        this.sessionId = sessionId;
+        this.seq = 0;
+    }
+    build(type, payload, turnId) {
+        this.seq += 1;
+        const base = {
+            id: this.ids.event(),
+            version: APP_EVENT_VERSION,
+            sequence: this.seq,
+            sessionId: this.sessionId,
+            timestamp: this.clock.now(),
+            type,
+            payload,
+        };
+        const event = turnId === undefined ? base : { ...base, turnId };
+        return event;
+    }
+}
+//# sourceMappingURL=sequencer.js.map

package/dist/app/events/sequencer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sequencer.js","sourceRoot":"","sources":["../../../src/app/events/sequencer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,iBAAiB,EACjB,WAAW,GAOZ,MAAM,gBAAgB,CAAC;AAOxB,MAAM,CAAC,MAAM,WAAW,GAAU,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;AAY5D,MAAM,UAAU,uBAAuB,CAAC,MAAM,GAAG,EAAE;IACjD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO;QACL,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;QACtD,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QACzB,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;KACzC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,cAAc;IAMd;IACQ;IANX,GAAG,GAAG,CAAC,CAAC;IACR,SAAS,CAAY;IAE7B,YACE,SAAoB,EACX,MAAiB,qBAAqB,EAAE,EAChC,QAAe,WAAW;QADlC,QAAG,GAAH,GAAG,CAAqC;QAChC,UAAK,GAAL,KAAK,CAAqB;QAE3C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,uEAAuE;IACvE,MAAM,CAAC,SAAoB;QACzB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;IACf,CAAC;IAED,KAAK,CACH,IAAO,EACP,OAA4B,EAC5B,MAA2B;QAE3B,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,GAAG;YACX,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE;YACpB,OAAO,EAAE,iBAAiB;YAC1B,QAAQ,EAAE,IAAI,CAAC,GAAG;YAClB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3B,IAAI;YACJ,OAAO;SACR,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC;QAChE,OAAO,KAAyC,CAAC;IACnD,CAAC;CACF"}

package/dist/app/ports/agent-port.d.ts

@@ -0,0 +1,29 @@
+import type { ChatImage, ChatMessage, ProviderId } from "../../types.js";
+import type { AgentEvent } from "../../agent/events.js";
+import type { SessionPolicy } from "../../agent/session-policy.js";
+import type { ConfirmationPort } from "./confirm-port.js";
+import type { SecretPort } from "./secret-port.js";
+export interface RunTurnRequest {
+    readonly prompt: string;
+    readonly provider?: ProviderId | undefined;
+    readonly model?: string | undefined;
+    readonly history?: readonly ChatMessage[] | undefined;
+    readonly images?: readonly ChatImage[] | undefined;
+    readonly autoConfirm?: boolean | undefined;
+    readonly maxSteps?: number | undefined;
+}
+export interface RunTurnHandlers {
+    readonly onEvent: (event: AgentEvent) => void;
+    readonly onMessages?: ((messages: ChatMessage[]) => void) | undefined;
+    readonly signal?: AbortSignal | undefined;
+    readonly confirm?: ConfirmationPort | undefined;
+    readonly requestSecret?: SecretPort["request"] | undefined;
+    readonly session?: SessionPolicy | undefined;
+}
+/**
+ * The one agent implementation, consumed through structured events (CORE-001).
+ * `runTurn` resolves with the final answer; events flow through `onEvent`.
+ */
+export interface AgentPort {
+    runTurn(request: RunTurnRequest, handlers: RunTurnHandlers): Promise<string>;
+}

package/dist/app/ports/agent-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent-port.js.map

package/dist/app/ports/agent-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-port.js","sourceRoot":"","sources":["../../../src/app/ports/agent-port.ts"],"names":[],"mappings":""}

package/dist/app/ports/clipboard-port.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Clipboard access (SEL-006). Copy requires user-visible selected text; the
+ * real OSC 52 / native-clipboard adapter lands with the renderer in Phase 6.
+ * The app-layer default is in-memory so nothing writes terminal bytes here.
+ */
+export interface ClipboardPort {
+    writeText(text: string): Promise<void>;
+    readText?(): Promise<string | undefined>;
+}

package/dist/app/ports/clipboard-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=clipboard-port.js.map

package/dist/app/ports/clipboard-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard-port.js","sourceRoot":"","sources":["../../../src/app/ports/clipboard-port.ts"],"names":[],"mappings":""}

package/dist/app/ports/confirm-port.d.ts

@@ -0,0 +1,17 @@
+import type { ToolCall } from "../../types.js";
+/**
+ * Typed async confirmation surface (CORE-002). The UI implements this; the
+ * agent never reads the terminal directly. Structurally identical to the
+ * legacy `ConfirmPort` in src/agent, so a v2 implementation is accepted by
+ * `runAgentLoop` without adaptation. Optional methods let minimal ports omit
+ * flows they never trigger.
+ */
+export interface ConfirmationPort {
+    confirmTool(call: ToolCall): Promise<boolean>;
+    confirmPentest(): Promise<boolean>;
+    confirmContinue?(steps: number): Promise<boolean>;
+    confirmAgentSwitch?(info: {
+        reason: string;
+        tools: string[];
+    }): Promise<boolean>;
+}

package/dist/app/ports/confirm-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=confirm-port.js.map

package/dist/app/ports/confirm-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm-port.js","sourceRoot":"","sources":["../../../src/app/ports/confirm-port.ts"],"names":[],"mappings":""}

package/dist/app/ports/jobs-port.d.ts

@@ -0,0 +1,18 @@
+import type { BackgroundJob } from "../../tools/jobs.js";
+import type { ToolResult } from "../../types.js";
+export type { BackgroundJob };
+/**
+ * Background job control (CORE-004, F-004). Jobs survive UI rerenders because
+ * they live in the core job manager; the UI only observes and commands them.
+ */
+export interface JobsPort {
+    list(): ToolResult;
+    running(): BackgroundJob[];
+    get(id: string): BackgroundJob | undefined;
+    tail(id: string, bytes?: number): Promise<ToolResult>;
+    stop(id: string): ToolResult;
+    start(command: string, options?: {
+        cwd?: string | undefined;
+        name?: string | undefined;
+    }): Promise<ToolResult>;
+}

package/dist/app/ports/jobs-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=jobs-port.js.map

package/dist/app/ports/jobs-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs-port.js","sourceRoot":"","sources":["../../../src/app/ports/jobs-port.ts"],"names":[],"mappings":""}

package/dist/app/ports/persistence-port.d.ts

@@ -0,0 +1,21 @@
+import type { ChatMessage } from "../../types.js";
+import type { SessionPlan } from "../../store/plan.js";
+import type { TranscriptItem } from "../../tui/state.js";
+export interface SaveSessionOptions {
+    /** When set, upsert this session id (continuous autosave) instead of minting a new row. */
+    readonly sessionId?: string | undefined;
+    /** Optional display name. */
+    readonly name?: string | undefined;
+    /** Classic-shaped visual transcript for full /history restore. */
+    readonly transcript?: readonly TranscriptItem[] | undefined;
+}
+/**
+ * Session/plan persistence (CORE-005, F-008). Kept narrow so controllers depend
+ * on behavior, not on the SQLite/JSONL storage details in src/store.
+ */
+export interface PersistencePort {
+    saveSession(messages: readonly ChatMessage[], options?: SaveSessionOptions): Promise<void>;
+    loadPlan(sessionId: string): Promise<SessionPlan | undefined>;
+    savePlan(plan: SessionPlan): Promise<void>;
+    deletePlan(sessionId: string): Promise<void>;
+}

package/dist/app/ports/persistence-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=persistence-port.js.map

package/dist/app/ports/persistence-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence-port.js","sourceRoot":"","sources":["../../../src/app/ports/persistence-port.ts"],"names":[],"mappings":""}

package/dist/app/ports/secret-port.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Masked secret entry (CORE-002, INPUT-009). Secret values are typed
+ * separately from generic event payloads and never enter the transcript, logs,
+ * history, or clipboard without explicit user action.
+ */
+export interface SecretRequest {
+    readonly title: string;
+    readonly prompt: string;
+}
+export interface SecretPort {
+    request(request: SecretRequest): Promise<string | undefined>;
+}

package/dist/app/ports/secret-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=secret-port.js.map

package/dist/app/ports/secret-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-port.js","sourceRoot":"","sources":["../../../src/app/ports/secret-port.ts"],"names":[],"mappings":""}

package/dist/app/ports/terminal-port.d.ts

@@ -0,0 +1,18 @@
+export type ColorMode = "truecolor" | "256" | "16" | "none";
+/**
+ * Terminal capability report (COMPAT-001, A11Y-001). Action defaults are
+ * semantic, not byte-sequence promises: `canDistinguishShiftEnter` tells the
+ * action layer whether Shift+Enter is a usable newline binding or whether the
+ * advertised Alt/Option+Enter fallback must be shown instead.
+ */
+export interface TerminalCapabilities {
+    readonly columns: number;
+    readonly rows: number;
+    readonly colorMode: ColorMode;
+    readonly isTTY: boolean;
+    readonly canDistinguishShiftEnter: boolean;
+    readonly supportsOsc52: boolean;
+}
+export interface TerminalPort {
+    capabilities(): TerminalCapabilities;
+}

package/dist/app/ports/terminal-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=terminal-port.js.map

package/dist/app/ports/terminal-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-port.js","sourceRoot":"","sources":["../../../src/app/ports/terminal-port.ts"],"names":[],"mappings":""}

package/dist/app/ports/updates-port.d.ts

@@ -0,0 +1,12 @@
+export interface UpdateStatus {
+    readonly currentVersion: string;
+    readonly latestVersion?: string | undefined;
+    readonly updateAvailable: boolean;
+}
+/**
+ * Update check (F-012 adjacent, `/update`). Kept as a port so the check runs
+ * without corrupting TUI output and can be faked in tests.
+ */
+export interface UpdatesPort {
+    check(): Promise<UpdateStatus>;
+}

package/dist/app/ports/updates-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=updates-port.js.map

package/dist/app/ports/updates-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updates-port.js","sourceRoot":"","sources":["../../../src/app/ports/updates-port.ts"],"names":[],"mappings":""}

package/dist/commands/doctor.js

@@ -5,6 +5,8 @@ import { getConfig, getConfigPath } from '../store/config.js';
 import { getHistoryPath } from '../store/history.js';
 import { getFallbackKeysPath, probeKeychain } from '../store/keys.js';
 import { loadScope, isScopeActive, getScopePath } from '../store/scope.js';
+import { canUseTui } from '../tui/can-use-tui.js';
+import { describeUiDefault, resolveUiChoice, } from '../tui-v2/bootstrap/ui-selection.js';
 import { printProviderKeys } from './providers.js';
 const pentestTools = [
     'nmap', 'nikto', 'sqlmap', 'gobuster', 'ffuf', 'hydra', 'masscan',
@@ -21,6 +23,13 @@ export async function runDoctor() {
     console.log(`CWD: ${system.cwd}`);
     console.log(`Config: ${getConfigPath()}`);
     console.log(`History: ${getHistoryPath()}`);
+    const tuiGate = canUseTui();
+    const resolvedUi = resolveUiChoice({});
+    console.log(`UI default: ${describeUiDefault()}`);
+    console.log(`UI resolved now: ${resolvedUi}` +
+        (process.env.CLAI_UI ? chalk.dim(` (CLAI_UI=${process.env.CLAI_UI})`) : ''));
+    console.log(`UI host: ${tuiGate.ok ? chalk.green('ok for full-screen TUI') : chalk.yellow(`unavailable — ${tuiGate.reason}`)}`);
+    console.log(chalk.dim('  full-screen: clai  ·  line REPL: clai --classic | --ui=legacy'));
     const keychain = await probeKeychain();
     if (keychain.available) {
         console.log(`Keychain: ${chalk.green('available')} (OS keystore)`);