@polderlabs/bizar 6.2.5 → 6.3.0

package/plugins/bizar/src/odin.ts

@@ -1,227 +0,0 @@
-/**
- * plugins/bizar/src/odin.ts
- *
- * v6.0.0 — Odin orchestrator module.
- *
- * Odin is the top-level user-facing agent in the Bizar Norse pantheon. It
- * receives a user prompt, decomposes it into 2–6 subtasks, and dispatches
- * them to teammates via the existing `bizar_spawn_team` tool.
- *
- * Decomposition is rule-based for v1 — pattern matches on task keywords
- * to suggest a team composition (researcher + implementer + reviewer, etc.).
- * v2 can replace this with an LLM-driven decomposer.
- *
- * Public API:
- *   decomposeTask(task) -> { subtasks[], roles[], estimatedAgents }
- *   buildOdinPrompt(task, decomposition) -> string
- */
-
-export interface OdinSubtask {
-  /** Short verb-led action description (e.g. "research auth libraries"). */
-  title: string;
-  /** Detailed prompt for the subtask agent. */
-  prompt: string;
-  /** Suggested agent role (odin, mimir, thor, heimdall, vidarr, forseti). */
-  role: string;
-  /** If true, this subtask blocks downstream subtasks. */
-  blocking?: boolean;
-}
-
-export interface OdinDecomposition {
-  subtasks: OdinSubtask[];
-  /** Total agent count (lead + subtask teammates). */
-  estimatedAgents: number;
-  /** Reasoning summary for the decomposition. */
-  rationale: string;
-}
-
-interface RoleTemplate {
-  role: string;
-  keywords: RegExp[];
-  description: string;
-}
-
-const ROLE_TEMPLATES: RoleTemplate[] = [
-  {
-    role: "mimir",
-    keywords: [/\bresearch\b/i, /\binvestigate\b/i, /\bexplore\b/i, /\bsurvey\b/i, /\banalyze\b/i, /\bunderstand\b/i, /\bdocs?\b/i],
-    description: "Research & knowledge synthesis",
-  },
-  {
-    role: "heimdall",
-    keywords: [/\bquick\b/i, /\bsimple\b/i, /\bsmall\b/i, /\btweak\b/i, /\bfix\b/i, /\btypo\b/i, /\brename\b/i],
-    description: "Small mechanical changes",
-  },
-  {
-    role: "thor",
-    keywords: [/\bimplement\b/i, /\bbuild\b/i, /\bcode\b/i, /\bfunction\b/i, /\bclass\b/i, /\bapi\b/i, /\bservice\b/i, /\bfeature\b/i],
-    description: "Implementation & coding",
-  },
-  {
-    role: "forseti",
-    keywords: [/\btest\b/i, /\bverify\b/i, /\bvalidate\b/i, /\bspec\b/i, /\bcoverage\b/i, /\bassert/i, /\bcheck\b/i],
-    description: "Verification & testing",
-  },
-  {
-    role: "vidarr",
-    keywords: [/\brefactor\b/i, /\barchitect\b/i, /\bdesign\b/i, /\bbig\b/i, /\bsystem\b/i, /\bcross.cutting\b/i, /\bperformance\b/i, /\bscale\b/i],
-    description: "Architecture & deep refactors",
-  },
-  {
-    role: "tyr",
-    keywords: [/\bdebug\b/i, /\bbug\b/i, /\bfix\b/i, /\binvestigate\b/i, /\broot cause\b/i],
-    description: "Hardest debugging tasks",
-  },
-  {
-    role: "frigg",
-    keywords: [/\bdocument\b/i, /\bwrite up\b/i, /\bREADME\b/i, /\bcomment\b/i, /\bguide\b/i],
-    description: "Documentation",
-  },
-  {
-    role: "baldr",
-    keywords: [/\bui\b/i, /\bdesign\b/i, /\bvisual\b/i, /\bstyle\b/i, /\bcss\b/i, /\banimation\b/i, /\bux\b/i, /\bfrontend\b/i],
-    description: "Frontend & UI work",
-  },
-];
-
-const DEFAULT_MAX_SUBTASKS = 4;
-const MIN_SUBTASKS = 2;
-
-/**
- * Heuristic sentence splitter — splits on `. `, `! `, `? `, `\n`, or `; `.
- * Filters out sentences shorter than 8 chars.
- */
-function splitSentences(text: string): string[] {
-  return text
-    .split(/(?<=[.!?])\s+|\n|;\s+/)
-    .map((s) => s.trim())
-    .filter((s) => s.length >= 8);
-}
-
-/**
- * Pick the best role for a sentence based on keyword matches.
- */
-function pickRole(sentence: string): string {
-  let bestRole = "thor";
-  let bestScore = 0;
-  for (const t of ROLE_TEMPLATES) {
-    let score = 0;
-    for (const re of t.keywords) {
-      const m = sentence.match(re);
-      if (m) score += m[0].length;
-    }
-    if (score > bestScore) {
-      bestScore = score;
-      bestRole = t.role;
-    }
-  }
-  return bestRole;
-}
-
-/**
- * Decompose a user task into 2-6 subtasks with assigned roles.
- */
-export function decomposeTask(task: string, maxSubtasks: number = DEFAULT_MAX_SUBTASKS): OdinDecomposition {
-  const trimmed = task.trim();
-  if (!trimmed) {
-    return { subtasks: [], estimatedAgents: 0, rationale: "Empty task." };
-  }
-
-  let sentences = splitSentences(trimmed);
-
-  // Special case: split on " and " / " then " if it gives us enough parts.
-  if (sentences.length < MIN_SUBTASKS) {
-    const lower = trimmed.toLowerCase();
-    const hasAnd = /\b and \b/i.test(lower) || /,\s*and\b/i.test(lower);
-    const hasThen = /\b then \b/i.test(lower);
-    if (hasAnd || hasThen) {
-      const parts = trimmed.split(/\b(?:and|then)\b/i).map((s) => s.trim()).filter(Boolean);
-      if (parts.length >= MIN_SUBTASKS) sentences = parts;
-    }
-  }
-
-  // Too few → default 2-step plan.
-  if (sentences.length < MIN_SUBTASKS) {
-    return {
-      subtasks: [
-        {
-          title: "Research the problem space",
-          prompt: `Research the following task and report back with findings + a recommended approach:\n\n${trimmed}`,
-          role: "mimir",
-          blocking: true,
-        },
-        {
-          title: "Implement the solution",
-          prompt: `Given the research findings above, implement the requested change:\n\n${trimmed}\n\nApply coding conventions from the existing codebase.`,
-          role: "thor",
-        },
-      ],
-      estimatedAgents: 3,
-      rationale: "Single-sentence task — defaulted to research + implement.",
-    };
-  }
-
-  // Too many → cap at maxSubtasks by merging adjacent same-role sentences.
-  if (sentences.length > maxSubtasks) {
-    const grouped: { role: string; sentences: string[] }[] = [];
-    for (const s of sentences) {
-      const role = pickRole(s);
-      const last = grouped[grouped.length - 1];
-      // Merge into the previous group if same role AND we're already at/over
-      // the half-way mark (so we don't waste group slots on adjacent same-role
-      // pairs early — only consolidate once we have headroom pressure).
-      if (last && last.role === role && grouped.length >= Math.ceil(maxSubtasks / 2)) {
-        last.sentences.push(s);
-      } else {
-        grouped.push({ role, sentences: [s] });
-      }
-    }
-    while (grouped.length > maxSubtasks) {
-      const dropIdx = Math.floor(grouped.length / 2);
-      grouped.splice(dropIdx, 1);
-    }
-    sentences = grouped.map((g) => `${g.sentences.join(" ")}`);
-  }
-
-  const subtasks: OdinSubtask[] = sentences.map((s, i) => {
-    const role = pickRole(s);
-    return {
-      title: s.length > 60 ? `${s.slice(0, 57)}…` : s,
-      prompt: `${s}\n\nThis is subtask ${i + 1} of ${sentences.length} of the larger task: ${trimmed}`,
-      role,
-      blocking: i === 0,
-    };
-  });
-
-  return {
-    subtasks,
-    estimatedAgents: subtasks.length + 1,
-    rationale: `Decomposed into ${subtasks.length} subtasks. Roles: ${subtasks.map((s) => s.role).join(", ")}.`,
-  };
-}
-
-/**
- * Build the Odin system prompt for the spawn_team tool call.
- */
-export function buildOdinPrompt(task: string, decomposition: OdinDecomposition): string {
-  const lines: string[] = [
-    "You are Odin, the lead agent of a Bizar agent team.",
-    "",
-    `## Mission`,
-    task,
-    "",
-    `## Subtasks`,
-    ...decomposition.subtasks.map(
-      (s, i) => `${i + 1}. **${s.title}** (${s.role}${s.blocking ? ", blocking" : ""})\n   ${s.prompt}`,
-    ),
-    "",
-    `## Coordination`,
-    "- Coordinate via TeamSendMessage.",
-    "- Wait for blocking subtasks before dispatching downstream ones.",
-    "- Aggregate results into a final report when all subtasks complete.",
-    "",
-    `## Rationale`,
-    decomposition.rationale,
-  ];
-  return lines.join("\n");
-}

package/plugins/bizar/src/options.ts

@@ -1,470 +0,0 @@
-/**
- * Options — plugin option validation, clamping, and secret-dir refusal.
- *
- * Spec requirements satisfied here:
- *   - §6.1 — plugin option shape (defaults listed below).
- *   - §6.2 — clamping rules. The plugin NEVER throws on bad config.
- *   - §6.3 — threshold/window constraint (`loopThresholdBlock <= loopWindowSize + 2`).
- *   - §6.4 — secret-directory refusal. The plugin refuses to start if `logDir`
- *     or `stateDir` resolves inside `~/.ssh/`, `~/.gnupg/`, `~/.aws/`, or
- *     `~/.kube/`. Matching uses the spec's exact algorithm: `path.resolve`
- *     on both sides, then test equality OR `startsWith(resolved + path.sep)`.
- *     The `+ path.sep` is critical — without it, `~/.ssh-foo` would falsely
- *     match the `~/.ssh` prefix.
- *   - §6.5 — environment-variable overrides (`BIZAR_DISABLE`,
- *     `BIZAR_DISABLE_LOOP`, `BIZAR_DISABLE_LOG`, `BIZAR_LOG_LEVEL`,
- *     `BIZAR_SERVE_PORT`, `BIZAR_MAX_CONCURRENT_INSTANCES`,
- *     `BIZAR_SERVE_DISABLE`, `BIZAR_BACKGROUND_TOOL_CALL_CAP`,
- *     `BIZAR_BACKGROUND_SKIP_PERMISSIONS`,
- *     `BIZAR_STALL_TIMEOUT_MS`, `BIZAR_THINKING_LOOP_TIMEOUT_MS`,
- *     `BIZAR_MAX_INTERVENTIONS`, `BIZAR_MAX_CONSECUTIVE_MISTAKES`).
- *     Env vars are read once at init; mid-session changes are ignored.
- */
-
-import path from "node:path";
-import os from "node:os";
-
-/** Raw plugin options as they appear in `cline.json` (before clamping). */
-export interface RawOptions {
-  loopThresholdWarn?: unknown;
-  loopThresholdEscalate?: unknown;
-  loopThresholdBlock?: unknown;
-  loopWindowSize?: unknown;
-  logDir?: unknown;
-  stateDir?: unknown;
-  logRotationBytes?: unknown;
-  servePort?: unknown;
-  maxConcurrentInstances?: unknown;
-  serveDisabled?: unknown;
-  backgroundToolCallCap?: unknown;
-  backgroundSkipPermissions?: unknown;
-  httpTimeoutMs?: unknown;
-  // v0.3.0 — stall and thinking-loop protection
-  backgroundStallTimeoutMs?: unknown;
-  backgroundThinkingLoopTimeoutMs?: unknown;
-  backgroundMaxInterventions?: unknown;
-  // v0.3.1 — ClineRuntime execution surface
-  /**
-   * Override Cline's `execution.maxConsecutiveMistakes` (CLI default 3;
-   * SDK default 6). Bizar ships 6 by default and additionally wires the
-   * `onConsecutiveMistakeLimitReached` recovery callback so a single
-   * bad turn doesn't abort the session. Range [3, 20]; out-of-range
-   * values are clamped and a note is emitted.
-   */
-  clineruntimeMaxConsecutiveMistakes?: unknown;
-}
-
-/**
- * Normalized options — the output of `normalizeOptions`. Every field has a
- * safe, valid value. The loop guard and logger consume this shape.
- */
-export interface NormalizedOptions {
-  loopThresholdWarn: number;
-  loopThresholdEscalate: number;
-  loopThresholdBlock: number;
-  loopWindowSize: number;
-  logDir: string;
-  stateDir: string;
-  logRotationBytes: number;
-  servePort: number;
-  maxConcurrentInstances: number;
-  serveDisabled: boolean;
-  backgroundToolCallCap: number;
-  backgroundSkipPermissions: boolean;
-  httpTimeoutMs: number;
-  // v0.3.0 — stall and thinking-loop protection
-  /** ms without any SSE event before a non-terminal instance is aborted as stalled (default 180000 = 3 min, range [10000, 600000]). */
-  backgroundStallTimeoutMs: number;
-  /** ms without any tool/text part before a `running` instance is flagged as a thinking loop (default 300000 = 5 min, range [30000, 900000]). */
-  backgroundThinkingLoopTimeoutMs: number;
-  /** max number of research interventions sent before forcing an abort (default 1, range [1, 3]). */
-  backgroundMaxInterventions: number;
-  // v0.3.1 — ClineRuntime execution surface
-  /** Override Cline's `execution.maxConsecutiveMistakes` (default 6, range [3, 20]). */
-  clineruntimeMaxConsecutiveMistakes: number;
-}
-
-/** Environment-variable override flags. */
-export interface EnvFlags {
-  disable: boolean;
-  disableLoop: boolean;
-  disableLog: boolean;
-}
-
-/** Default values per spec §6.1 / §8. */
-export const DEFAULT_OPTIONS: NormalizedOptions = {
-  loopThresholdWarn: 5,
-  loopThresholdEscalate: 8,
-  loopThresholdBlock: 12,
-  loopWindowSize: 10,
-  logDir: "~/.cache/bizar/logs",
-  stateDir: "~/.cache/bizar",
-  logRotationBytes: 10_485_760, // 10 MB
-  servePort: 0,                    // 0 = random OS-assigned port (§1.1)
-  maxConcurrentInstances: 8,       // §8
-  serveDisabled: false,            // §8
-  backgroundToolCallCap: 500,      // §8 / §6.2
-  backgroundSkipPermissions: false, // §8 / §6.4
-  httpTimeoutMs: 30_000,           // §2.3 / §8
-  // v0.3.0 — stall and thinking-loop protection
-  backgroundStallTimeoutMs: 180_000,        // 3 min
-  backgroundThinkingLoopTimeoutMs: 300_000, // 5 min
-  backgroundMaxInterventions: 1,
-  // v0.3.1 — ClineRuntime execution surface
-  // SDK default `??6`; CLI overrides to 3. We pick 10 so several
-  // malformed tool calls don't kill the session; the recovery
-  // callback (mistake-recovery.ts) gives the model guidance on the
-  // way back. v6.2.4 — bumped from 6 → 10 because the Cline CLI's
-  // --retries default of 3 was previously overriding this entirely.
-  // Now `buildExecution` uses Math.max(plugin_default, caller_value)
-  // so this acts as a FLOOR, not a default.
-  clineruntimeMaxConsecutiveMistakes: 10,
-};
-
-const SECRET_DIRS: readonly string[] = [
-  "~/.ssh",
-  "~/.gnupg",
-  "~/.aws",
-  "~/.kube",
-] as const;
-
-/**
- * Expand a leading `~` to the user's home directory. The spec's default
- * paths use `~/.cache/bizar`; we honor that.
- */
-export function expandHome(p: string): string {
-  if (p === "~") return os.homedir();
-  if (p.startsWith("~/") || p.startsWith("~\\")) {
-    return path.join(os.homedir(), p.slice(2));
-  }
-  return p;
-}
-
-/**
- * Spec §6.4 matching algorithm. Returns the secret-dir kind that `target`
- * matches (e.g. `~/.ssh`), or `null` if `target` is safe.
- *
- *   resolvedTarget === resolvedSecret                     → equal
- *   resolvedTarget.startsWith(resolvedSecret + sep)      → strict descendant
- */
-export function findSecretDirMatch(target: string): string | null {
-  const resolvedTarget = path.resolve(expandHome(target));
-  for (const secret of SECRET_DIRS) {
-    const resolvedSecret = path.resolve(expandHome(secret));
-    if (resolvedTarget === resolvedSecret) return secret;
-    if (resolvedTarget.startsWith(resolvedSecret + path.sep)) return secret;
-  }
-  return null;
-}
-
-/** Coerce an unknown value to a finite integer, or return `undefined`. */
-function toFiniteInt(value: unknown): number | undefined {
-  if (typeof value === "number" && Number.isFinite(value)) {
-    return Math.floor(value);
-  }
-  if (typeof value === "string" && value.trim() !== "") {
-    const n = Number(value);
-    if (Number.isFinite(n)) return Math.floor(n);
-  }
-  return undefined;
-}
-
-/** Coerce to a string path; return `undefined` if the value is not a string. */
-function toStringPath(value: unknown): string | undefined {
-  if (typeof value === "string" && value !== "") return value;
-  return undefined;
-}
-
-/**
- * Apply the clamping rules from spec §6.2. Returns the normalized options
- * and a list of "clamp notes" — human-readable strings describing each
- * non-default normalization applied. The caller is expected to log these
- * via `client.app.log` at warn level (spec §6.2: "After clamping, log a
- * `client.app.log` warning if any non-default normalization was applied").
- */
-export function normalizeOptions(raw: RawOptions | undefined): {
-  options: NormalizedOptions;
-  notes: string[];
-} {
-  const notes: string[] = [];
-  const r = raw ?? {};
-
-  // --- Numeric thresholds (§6.2) ---
-  const rawWarn = toFiniteInt(r.loopThresholdWarn);
-  const rawEscalate = toFiniteInt(r.loopThresholdEscalate);
-  const rawBlock = toFiniteInt(r.loopThresholdBlock);
-
-  let warn = rawWarn !== undefined ? Math.max(1, rawWarn) : DEFAULT_OPTIONS.loopThresholdWarn;
-  let escalate = rawEscalate !== undefined ? Math.max(1, rawEscalate) : DEFAULT_OPTIONS.loopThresholdEscalate;
-  let block = rawBlock !== undefined ? Math.max(1, rawBlock) : DEFAULT_OPTIONS.loopThresholdBlock;
-
-  if (rawWarn !== undefined && rawWarn < 1) {
-    notes.push(`loopThresholdWarn ${rawWarn} clamped to 1`);
-  } else if (rawWarn === undefined) {
-    notes.push(`loopThresholdWarn defaulted to ${warn}`);
-  }
-
-  // --- Ordering: warn < escalate < block (§6.2) ---
-  if (warn >= escalate) {
-    const newEscalate = warn + 1;
-    notes.push(`loopThresholdEscalate adjusted from ${escalate} to ${newEscalate} (must be > loopThresholdWarn)`);
-    escalate = newEscalate;
-  }
-  if (escalate >= block) {
-    const newBlock = escalate + 1;
-    notes.push(`loopThresholdBlock adjusted from ${block} to ${newBlock} (must be > loopThresholdEscalate)`);
-    block = newBlock;
-  }
-
-  // --- Window size (§6.2: clamped to [3, 50]) ---
-  const rawWindow = toFiniteInt(r.loopWindowSize);
-  let window: number;
-  if (rawWindow === undefined) {
-    window = DEFAULT_OPTIONS.loopWindowSize;
-  } else if (rawWindow < 3) {
-    window = 3;
-    notes.push(`loopWindowSize ${rawWindow} clamped to 3 (minimum)`);
-  } else if (rawWindow > 50) {
-    window = 50;
-    notes.push(`loopWindowSize ${rawWindow} clamped to 50 (maximum)`);
-  } else {
-    window = rawWindow;
-  }
-
-  // --- Threshold/window constraint (§6.3) ---
-  if (block > window + 2) {
-    const newBlock = window + 2;
-    notes.push(
-      `loopThresholdBlock ${block} adjusted to ${newBlock} (must be <= loopWindowSize + 2)`,
-    );
-    block = newBlock;
-  }
-
-  // --- logRotationBytes (§6.2: minimum 1024) ---
-  const rawBytes = toFiniteInt(r.logRotationBytes);
-  let bytes: number;
-  if (rawBytes === undefined) {
-    bytes = DEFAULT_OPTIONS.logRotationBytes;
-  } else if (rawBytes < 1024) {
-    bytes = 1024;
-    notes.push(`logRotationBytes ${rawBytes} clamped to 1024 (minimum)`);
-  } else {
-    bytes = rawBytes;
-  }
-
-  // --- Background agent options (§6.5 / §8) ---
-  // servePort: default 0 (random); env BIZAR_SERVE_PORT overrides
-  const rawServePort = toFiniteInt(r.servePort);
-  const envServePort = toFiniteInt(process.env.BIZAR_SERVE_PORT);
-  const servePort = rawServePort !== undefined
-    ? (rawServePort < 0 ? (notes.push(`servePort ${rawServePort} clamped to 0 (minimum)`), 0) : rawServePort)
-    : envServePort !== undefined
-      ? envServePort
-      : DEFAULT_OPTIONS.servePort;
-
-  // maxConcurrentInstances: default 8, max 32 (§6.5)
-  const rawMaxInstances = toFiniteInt(r.maxConcurrentInstances);
-  const envMaxInstances = toFiniteInt(process.env.BIZAR_MAX_CONCURRENT_INSTANCES);
-  let maxConcurrentInstances: number;
-  if (rawMaxInstances !== undefined) {
-    maxConcurrentInstances = Math.min(Math.max(1, rawMaxInstances), 32);
-    if (rawMaxInstances !== maxConcurrentInstances) {
-      notes.push(`maxConcurrentInstances ${rawMaxInstances} clamped to ${maxConcurrentInstances} (range [1, 32])`);
-    }
-  } else if (envMaxInstances !== undefined) {
-    maxConcurrentInstances = Math.min(Math.max(1, envMaxInstances), 32);
-    if (envMaxInstances !== maxConcurrentInstances) {
-      notes.push(`maxConcurrentInstances ${envMaxInstances} (env) clamped to ${maxConcurrentInstances} (range [1, 32])`);
-    }
-  } else {
-    maxConcurrentInstances = DEFAULT_OPTIONS.maxConcurrentInstances;
-  }
-
-  // serveDisabled: default false; env BIZAR_SERVE_DISABLE=1 sets true (§8)
-  const serveDisabled = process.env.BIZAR_SERVE_DISABLE === "1"
-    ? true
-    : (r.serveDisabled === true || r.serveDisabled === "true");
-
-  // backgroundToolCallCap: default 500, max 5000 (§6.5)
-  const rawToolCap = toFiniteInt(r.backgroundToolCallCap);
-  const envToolCap = toFiniteInt(process.env.BIZAR_BACKGROUND_TOOL_CALL_CAP);
-  let backgroundToolCallCap: number;
-  if (rawToolCap !== undefined) {
-    backgroundToolCallCap = Math.min(Math.max(1, rawToolCap), 5000);
-    if (rawToolCap !== backgroundToolCallCap) {
-      notes.push(`backgroundToolCallCap ${rawToolCap} clamped to ${backgroundToolCallCap} (range [1, 5000])`);
-    }
-  } else if (envToolCap !== undefined) {
-    backgroundToolCallCap = Math.min(Math.max(1, envToolCap), 5000);
-    if (envToolCap !== backgroundToolCallCap) {
-      notes.push(`backgroundToolCallCap ${envToolCap} (env) clamped to ${backgroundToolCallCap} (range [1, 5000])`);
-    }
-  } else {
-    backgroundToolCallCap = DEFAULT_OPTIONS.backgroundToolCallCap;
-  }
-
-  // backgroundSkipPermissions: default false; env BIZAR_BACKGROUND_SKIP_PERMISSIONS=1 sets true (§6.4)
-  const backgroundSkipPermissions = process.env.BIZAR_BACKGROUND_SKIP_PERMISSIONS === "1"
-    ? true
-    : (r.backgroundSkipPermissions === true || r.backgroundSkipPermissions === "true");
-
-  // httpTimeoutMs: default 30000, range [5000, 120000] (§2.3)
-  const rawHttpTimeout = toFiniteInt(r.httpTimeoutMs);
-  const envHttpTimeout = toFiniteInt(process.env.BIZAR_HTTP_TIMEOUT_MS);
-  let httpTimeoutMs: number;
-  if (rawHttpTimeout !== undefined) {
-    httpTimeoutMs = Math.min(Math.max(5000, rawHttpTimeout), 120_000);
-    if (rawHttpTimeout !== httpTimeoutMs) {
-      notes.push(`httpTimeoutMs ${rawHttpTimeout} clamped to ${httpTimeoutMs} (range [5000, 120000])`);
-    }
-  } else if (envHttpTimeout !== undefined) {
-    httpTimeoutMs = Math.min(Math.max(5000, envHttpTimeout), 120_000);
-    if (envHttpTimeout !== httpTimeoutMs) {
-      notes.push(`httpTimeoutMs ${envHttpTimeout} (env) clamped to ${httpTimeoutMs} (range [5000, 120000])`);
-    }
-  } else {
-    httpTimeoutMs = DEFAULT_OPTIONS.httpTimeoutMs;
-  }
-
-  // --- v0.3.0 stall and thinking-loop protection -------------------------
-
-  // backgroundStallTimeoutMs: default 180000, range [10000, 600000] (10s..10min)
-  const rawStallTimeout = toFiniteInt(r.backgroundStallTimeoutMs);
-  const envStallTimeout = toFiniteInt(process.env.BIZAR_STALL_TIMEOUT_MS);
-  let backgroundStallTimeoutMs: number;
-  if (rawStallTimeout !== undefined) {
-    backgroundStallTimeoutMs = Math.min(Math.max(10_000, rawStallTimeout), 600_000);
-    if (rawStallTimeout !== backgroundStallTimeoutMs) {
-      notes.push(`backgroundStallTimeoutMs ${rawStallTimeout} clamped to ${backgroundStallTimeoutMs} (range [10000, 600000])`);
-    }
-  } else if (envStallTimeout !== undefined) {
-    backgroundStallTimeoutMs = Math.min(Math.max(10_000, envStallTimeout), 600_000);
-    if (envStallTimeout !== backgroundStallTimeoutMs) {
-      notes.push(`backgroundStallTimeoutMs ${envStallTimeout} (env) clamped to ${backgroundStallTimeoutMs} (range [10000, 600000])`);
-    }
-  } else {
-    backgroundStallTimeoutMs = DEFAULT_OPTIONS.backgroundStallTimeoutMs;
-  }
-
-  // backgroundThinkingLoopTimeoutMs: default 300000, range [30000, 900000] (30s..15min)
-  const rawThinkingTimeout = toFiniteInt(r.backgroundThinkingLoopTimeoutMs);
-  const envThinkingTimeout = toFiniteInt(process.env.BIZAR_THINKING_LOOP_TIMEOUT_MS);
-  let backgroundThinkingLoopTimeoutMs: number;
-  if (rawThinkingTimeout !== undefined) {
-    backgroundThinkingLoopTimeoutMs = Math.min(Math.max(30_000, rawThinkingTimeout), 900_000);
-    if (rawThinkingTimeout !== backgroundThinkingLoopTimeoutMs) {
-      notes.push(`backgroundThinkingLoopTimeoutMs ${rawThinkingTimeout} clamped to ${backgroundThinkingLoopTimeoutMs} (range [30000, 900000])`);
-    }
-  } else if (envThinkingTimeout !== undefined) {
-    backgroundThinkingLoopTimeoutMs = Math.min(Math.max(30_000, envThinkingTimeout), 900_000);
-    if (envThinkingTimeout !== backgroundThinkingLoopTimeoutMs) {
-      notes.push(`backgroundThinkingLoopTimeoutMs ${envThinkingTimeout} (env) clamped to ${backgroundThinkingLoopTimeoutMs} (range [30000, 900000])`);
-    }
-  } else {
-    backgroundThinkingLoopTimeoutMs = DEFAULT_OPTIONS.backgroundThinkingLoopTimeoutMs;
-  }
-
-  // backgroundMaxInterventions: default 1, range [1, 3]
-  const rawMaxInterventions = toFiniteInt(r.backgroundMaxInterventions);
-  const envMaxInterventions = toFiniteInt(process.env.BIZAR_MAX_INTERVENTIONS);
-  let backgroundMaxInterventions: number;
-  if (rawMaxInterventions !== undefined) {
-    backgroundMaxInterventions = Math.min(Math.max(1, rawMaxInterventions), 3);
-    if (rawMaxInterventions !== backgroundMaxInterventions) {
-      notes.push(`backgroundMaxInterventions ${rawMaxInterventions} clamped to ${backgroundMaxInterventions} (range [1, 3])`);
-    }
-  } else if (envMaxInterventions !== undefined) {
-    backgroundMaxInterventions = Math.min(Math.max(1, envMaxInterventions), 3);
-    if (envMaxInterventions !== backgroundMaxInterventions) {
-      notes.push(`backgroundMaxInterventions ${envMaxInterventions} (env) clamped to ${backgroundMaxInterventions} (range [1, 3])`);
-    }
-  } else {
-    backgroundMaxInterventions = DEFAULT_OPTIONS.backgroundMaxInterventions;
-  }
-
-  // --- v0.3.1 ClineRuntime execution surface -------------------------------
-
-  // clineruntimeMaxConsecutiveMistakes: default 10, range [3, 20]
-  // v6.2.4 — bumped from 6 to 10. CLI default is 3 which aborts
-  // sessions on the FIRST 3 malformed tool calls (editor { new_text:
-  // undefined }, run_commands exit code != 0, ask_question { options:
-  // null }, …). With the v6.2.4 buildExecution fix (Math.max floor),
-  // our higher default now always wins on plain `cline` invocations.
-  // The harness wires a recovery callback that keeps the session alive on
-  // recoverable mistakes, so we only need a slightly-larger ceiling.
-  const rawMaxConsecutive = toFiniteInt(r.clineruntimeMaxConsecutiveMistakes);
-  const envMaxConsecutive = toFiniteInt(process.env.BIZAR_MAX_CONSECUTIVE_MISTAKES);
-  let clineruntimeMaxConsecutiveMistakes: number;
-  if (rawMaxConsecutive !== undefined) {
-    clineruntimeMaxConsecutiveMistakes = Math.min(Math.max(3, rawMaxConsecutive), 20);
-    if (rawMaxConsecutive !== clineruntimeMaxConsecutiveMistakes) {
-      notes.push(`clineruntimeMaxConsecutiveMistakes ${rawMaxConsecutive} clamped to ${clineruntimeMaxConsecutiveMistakes} (range [3, 20])`);
-    }
-  } else if (envMaxConsecutive !== undefined) {
-    clineruntimeMaxConsecutiveMistakes = Math.min(Math.max(3, envMaxConsecutive), 20);
-    if (envMaxConsecutive !== clineruntimeMaxConsecutiveMistakes) {
-      notes.push(`clineruntimeMaxConsecutiveMistakes ${envMaxConsecutive} (env) clamped to ${clineruntimeMaxConsecutiveMistakes} (range [3, 20])`);
-    }
-  } else {
-    clineruntimeMaxConsecutiveMistakes = DEFAULT_OPTIONS.clineruntimeMaxConsecutiveMistakes;
-  }
-
-  // --- Paths (§6.1 defaults) ---
-  const logDir = toStringPath(r.logDir) ?? DEFAULT_OPTIONS.logDir;
-  const stateDir = toStringPath(r.stateDir) ?? DEFAULT_OPTIONS.stateDir;
-
-  return {
-    options: {
-      loopThresholdWarn: warn,
-      loopThresholdEscalate: escalate,
-      loopThresholdBlock: block,
-      loopWindowSize: window,
-      logDir,
-      stateDir,
-      logRotationBytes: bytes,
-      servePort,
-      maxConcurrentInstances,
-      serveDisabled,
-      backgroundToolCallCap,
-      backgroundSkipPermissions,
-      httpTimeoutMs,
-      backgroundStallTimeoutMs,
-      backgroundThinkingLoopTimeoutMs,
-      backgroundMaxInterventions,
-      clineruntimeMaxConsecutiveMistakes,
-    },
-    notes,
-  };
-}
-
-/**
- * Read environment-variable override flags per spec §6.5. Read once at
- * plugin init. Mid-session changes are ignored.
- */
-export function readEnvFlags(): EnvFlags {
-  return {
-    disable: process.env.BIZAR_DISABLE === "1",
-    disableLoop: process.env.BIZAR_DISABLE_LOOP === "1",
-    disableLog: process.env.BIZAR_DISABLE_LOG === "1",
-  };
-}
-
-/**
- * Spec §6.4: refuse to start if `logDir` or `stateDir` is inside a secret
- * directory. Returns the offending path and the matched secret kind, or
- * `null` if both paths are safe.
- */
-export function findOffendingPath(options: NormalizedOptions): {
-  path: string;
-  kind: string;
-} | null {
-  const logMatch = findSecretDirMatch(options.logDir);
-  if (logMatch !== null) {
-    return { path: path.resolve(expandHome(options.logDir)), kind: logMatch };
-  }
-  const stateMatch = findSecretDirMatch(options.stateDir);
-  if (stateMatch !== null) {
-    return { path: path.resolve(expandHome(options.stateDir)), kind: stateMatch };
-  }
-  return null;
-}