@prestyj/cli 5.1.1 → 5.3.0

package/dist/core/agent-tools-allowlist.test.js

@@ -0,0 +1,72 @@
+import { describe, it, expect } from "vitest";
+import os from "node:os";
+import { parseAgentFile } from "./agents.js";
+import { createTools } from "../tools/index.js";
+// Mirror of AgentSession.isToolAllowed (private): with an allow-list, a tool
+// passes only when its exact name is listed (MCP server whitelisting is a
+// separate opt-in the subagent path doesn't use). Kept in lockstep with the
+// real filter so this test tracks production behavior.
+function filterToAllowed(toolNames, allowed) {
+    if (!allowed || allowed.length === 0)
+        return toolNames;
+    return toolNames.filter((name) => allowed.includes(name));
+}
+describe("agent tools frontmatter → allow-list enforcement", () => {
+    it("a `tools: read, grep` agent cannot call write, edit, or bash", async () => {
+        // The frontmatter is parsed into AgentDefinition.tools, which the subagent
+        // spawner forwards to the child as --tools and AgentSession enforces by
+        // filtering the registered tool set to those names.
+        const agent = parseAgentFile([
+            "---",
+            "name: reader",
+            "description: read-only",
+            "tools: read, grep",
+            "---",
+            "You read.",
+        ].join("\n"), "project");
+        expect(agent.tools).toEqual(["read", "grep"]);
+        const { tools, processManager, lspManager } = await createTools(os.tmpdir(), {
+            lspDiagnostics: false,
+        });
+        try {
+            const allNames = tools.map((t) => t.name);
+            // Sanity: the mutating tools DO exist in the unfiltered set — so the
+            // filter is what removes them, not their absence.
+            for (const mutating of ["write", "edit", "bash"]) {
+                expect(allNames).toContain(mutating);
+            }
+            const allowedNames = filterToAllowed(allNames, agent.tools);
+            // The mutating tools must NOT survive the agent's allow-list.
+            for (const banned of ["write", "edit", "bash"]) {
+                expect(allowedNames).not.toContain(banned);
+            }
+            // Exactly the declared read-only tools survive.
+            expect(allowedNames.sort()).toEqual(["grep", "read"]);
+        }
+        finally {
+            processManager.shutdownAll();
+            lspManager?.shutdownAll();
+        }
+    });
+    it("an agent with no `tools:` frontmatter keeps the full toolset (backward compatible)", async () => {
+        const agent = parseAgentFile(["---", "name: worker", "description: does anything", "---", "You do the work."].join("\n"), "project");
+        expect(agent.tools).toEqual([]);
+        const { tools, processManager, lspManager } = await createTools(os.tmpdir(), {
+            lspDiagnostics: false,
+        });
+        try {
+            const allNames = tools.map((t) => t.name);
+            // Empty/unset allow-list is a pass-through: the child keeps every tool.
+            const allowedNames = filterToAllowed(allNames, agent.tools);
+            expect(allowedNames).toEqual(allNames);
+            for (const tool of ["read", "write", "edit", "bash"]) {
+                expect(allowedNames).toContain(tool);
+            }
+        }
+        finally {
+            processManager.shutdownAll();
+            lspManager?.shutdownAll();
+        }
+    });
+});
+//# sourceMappingURL=agent-tools-allowlist.test.js.map

package/dist/core/agent-tools-allowlist.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools-allowlist.test.js","sourceRoot":"","sources":["../../src/core/agent-tools-allowlist.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,uDAAuD;AACvD,SAAS,eAAe,CAAC,SAAmB,EAAE,OAA6B;IACzE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,2EAA2E;QAC3E,wEAAwE;QACxE,oDAAoD;QACpD,MAAM,KAAK,GAAG,cAAc,CAC1B;YACE,KAAK;YACL,cAAc;YACd,wBAAwB;YACxB,mBAAmB;YACnB,KAAK;YACL,WAAW;SACZ,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,SAAS,CACV,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAE9C,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE;YAC3E,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1C,qEAAqE;YACrE,kDAAkD;YAClD,KAAK,MAAM,QAAQ,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;gBACjD,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACvC,CAAC;YAED,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAE5D,8DAA8D;YAC9D,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC/C,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;YACD,gDAAgD;YAChD,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,WAAW,EAAE,CAAC;YAC7B,UAAU,EAAE,WAAW,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,KAAK,GAAG,cAAc,CAC1B,CAAC,KAAK,EAAE,cAAc,EAAE,4BAA4B,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAC3F,SAAS,CACV,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAEhC,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE;YAC3E,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1C,wEAAwE;YACxE,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5D,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvC,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;gBACrD,MAAM,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,WAAW,EAAE,CAAC;YAC7B,UAAU,EAAE,WAAW,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/core/auth-providers.d.ts

@@ -1,4 +1,19 @@
 export type AuthMethod = "oauth" | "apikey";
+/**
+ * One API-key option for a provider that splits auth across multiple distinct
+ * endpoints/credentials (currently only Xiaomi: Token Plan vs. API Credits).
+ * Each variant stores under its own auth.json key so a user can hold both at
+ * once — the model registry picks which one a given model resolves via
+ * `getAuthStorageKeys()`.
+ */
+export interface ApiKeyVariant {
+    /** Storage key in auth.json (distinct from `value` when multiple variants exist). */
+    key: string;
+    /** Display label, e.g. "Token Plan" or "API Credits". */
+    label: string;
+    /** Base URL stored alongside this variant's credential. */
+    baseUrl?: string;
+}
 export interface AuthProviderMeta {
     /** Stable provider id (matches the gg-ai Provider union, plus storage keys). */
     value: string;
@@ -12,6 +27,12 @@ export interface AuthProviderMeta {
     apiKeyLabel?: string;
     /** Fixed base URL stored alongside an API key (e.g. Xiaomi's token plan). */
     apiKeyBaseUrl?: string;
+    /**
+     * When a provider's API-key auth splits across multiple endpoints, the
+     * choices to present (in order). The first variant is the default. Absent
+     * for every provider with a single API-key credential.
+     */
+    apiKeyVariants?: ApiKeyVariant[];
 }
 export declare const AUTH_PROVIDERS: AuthProviderMeta[];
 export declare function getAuthProvider(value: string): AuthProviderMeta | undefined;

package/dist/core/auth-providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-providers.d.ts","sourceRoot":"","sources":["../../src/core/auth-providers.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE5C,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,eAAO,MAAM,cAAc,EAAE,gBAAgB,EAqE5C,CAAC;AAEF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAE3E"}
+{"version":3,"file":"auth-providers.d.ts","sourceRoot":"","sources":["../../src/core/auth-providers.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE5C;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,qFAAqF;IACrF,GAAG,EAAE,MAAM,CAAC;IACZ,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;CAClC;AAED,eAAO,MAAM,cAAc,EAAE,gBAAgB,EAiF5C,CAAC;AAEF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAE3E"}

package/dist/core/auth-providers.js

@@ -2,11 +2,12 @@
 // authenticates. Mirrors the CLI's `ezcoder login` provider list (ui/login.tsx)
 // so the desktop app and the terminal stay in lockstep. The app fetches this
 // (plus live connection status) from the sidecar's /auth/status endpoint.
+import { XIAOMI_CREDITS_KEY } from "@prestyj/core";
 export const AUTH_PROVIDERS = [
     {
         value: "anthropic",
         label: "Anthropic",
-        description: "Claude Opus 4.8, Sonnet 4.6, Haiku 4.5",
+        description: "Claude Opus 4.8, Fable 5, Sonnet 5, Haiku 4.5",
         methods: ["oauth"],
     },
     {
@@ -45,10 +46,22 @@ export const AUTH_PROVIDERS = [
     {
         value: "xiaomi",
         label: "Xiaomi (MiMo)",
-        description: "MiMo-V2.5-Pro, MiMo-V2.5-Pro UltraSpeed, MiMo-V2.5",
+        description: "MiMo-V2.5-Pro, MiMo-V2.5-Pro-UltraSpeed, MiMo-V2.5 · Token Plan or API Credits",
         methods: ["apikey"],
         apiKeyLabel: "Xiaomi MiMo",
         apiKeyBaseUrl: "https://token-plan-sgp.xiaomimimo.com/v1",
+        apiKeyVariants: [
+            {
+                key: "xiaomi",
+                label: "Token Plan",
+                baseUrl: "https://token-plan-sgp.xiaomimimo.com/v1",
+            },
+            {
+                key: XIAOMI_CREDITS_KEY,
+                label: "API Credits (required for UltraSpeed)",
+                baseUrl: "https://api.xiaomimimo.com/v1",
+            },
+        ],
     },
     {
         value: "deepseek",

package/dist/core/auth-providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-providers.js","sourceRoot":"","sources":["../../src/core/auth-providers.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,gFAAgF;AAChF,6EAA6E;AAC7E,0EAA0E;AAmB1E,MAAM,CAAC,MAAM,cAAc,GAAuB;IAChD;QACE,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,wCAAwC;QACrD,OAAO,EAAE,CAAC,OAAO,CAAC;KACnB;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,CAAC,OAAO,CAAC;KACnB;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,+BAA+B;QAC5C,OAAO,EAAE,CAAC,OAAO,CAAC;KACnB;IACD;QACE,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,8BAA8B;QAC3C,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC5B,WAAW,EAAE,UAAU;KACxB;IACD;QACE,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,MAAM;KACpB;IACD;QACE,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,SAAS;KACvB;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,oDAAoD;QACjE,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,aAAa;QAC1B,aAAa,EAAE,0CAA0C;KAC1D;IACD;QACE,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,2BAA2B;QACxC,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,UAAU;KACxB;IACD;QACE,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,QAAQ;KACtB;CACF,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;AACvD,CAAC"}
+{"version":3,"file":"auth-providers.js","sourceRoot":"","sources":["../../src/core/auth-providers.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,gFAAgF;AAChF,6EAA6E;AAC7E,0EAA0E;AAE1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAyCnD,MAAM,CAAC,MAAM,cAAc,GAAuB;IAChD;QACE,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,+CAA+C;QAC5D,OAAO,EAAE,CAAC,OAAO,CAAC;KACnB;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,CAAC,OAAO,CAAC;KACnB;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,+BAA+B;QAC5C,OAAO,EAAE,CAAC,OAAO,CAAC;KACnB;IACD;QACE,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,8BAA8B;QAC3C,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC5B,WAAW,EAAE,UAAU;KACxB;IACD;QACE,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,MAAM;KACpB;IACD;QACE,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,SAAS;KACvB;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,gFAAgF;QAC7F,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,aAAa;QAC1B,aAAa,EAAE,0CAA0C;QACzD,cAAc,EAAE;YACd;gBACE,GAAG,EAAE,QAAQ;gBACb,KAAK,EAAE,YAAY;gBACnB,OAAO,EAAE,0CAA0C;aACpD;YACD;gBACE,GAAG,EAAE,kBAAkB;gBACvB,KAAK,EAAE,uCAAuC;gBAC9C,OAAO,EAAE,+BAA+B;aACzC;SACF;KACF;IACD;QACE,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,2BAA2B;QACxC,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,UAAU;KACxB;IACD;QACE,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,QAAQ;KACtB;CACF,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;AACvD,CAAC"}

package/dist/core/autopilot-cycle.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Autopilot cycle — the review→prompt→review loop as pure orchestration logic.
+ *
+ * The sidecar wires the real dependencies (nolanAuto session, runAgent, SSE
+ * broadcast); this module owns the loop's control flow so every exit path is
+ * unit-testable without booting the sidecar: verdict handling, the round cap,
+ * cancellation between steps, review failure, and the mid-cycle plan-mode hold
+ * (an injected run calling enter_plan/exit_plan must halt the loop — Nolan can
+ * never inject a prompt into a read-only plan-mode session or answer a pending
+ * plan-review modal on the user's behalf).
+ */
+import type { AutopilotVerdict } from "./autopilot-verdict.js";
+/** Reason shown in the Nolan bubble when an injected run enters plan mode
+ *  mid-cycle — the loop halts and hands the decision to the user. */
+export declare const AUTOPILOT_PLAN_HOLD_REASON = "EZ Coder submitted a plan for your review. Approve or reject it yourself; autopilot won't decide that for you.";
+/** SSE frame types the cycle can emit (matched by the webview). */
+export type AutopilotCycleEmit = {
+    type: "autopilot_done";
+    data: Record<string, never>;
+} | {
+    type: "autopilot_ignored";
+    data: Record<string, never>;
+} | {
+    type: "autopilot_human";
+    data: {
+        reason: string;
+    };
+} | {
+    type: "autopilot_capped";
+    data: {
+        rounds: number;
+    };
+};
+export interface AutopilotCycleDeps {
+    /** Hard cap on review→prompt rounds per user turn (loop safety). */
+    maxRounds: number;
+    /** True once /cancel fires — checked between every step. */
+    isCancelled: () => boolean;
+    /** Live plan-mode state of the BUILD session. */
+    isPlanMode: () => boolean;
+    /** Wipe the reviewer's history so each user turn starts cheap (within one
+     *  cycle the review messages persist so Nolan remembers what he asked). */
+    resetReviewer: () => Promise<void>;
+    /** Run one review; resolves to the parsed verdict or null on failure
+     *  (failure is already surfaced by the sidecar as autopilot_error). */
+    review: () => Promise<AutopilotVerdict | null>;
+    /** Feed a PROMPT verdict's body to EZ Coder as an injected run. */
+    runPrompt: (body: string) => Promise<void>;
+    /** Called BEFORE runPrompt: record the injected body (digest labeling) and
+     *  broadcast the autopilot_prompted marker. */
+    onInjected: (body: string, round: number) => void;
+    /** Broadcast one of the cycle's terminal SSE frames. */
+    emit: (event: AutopilotCycleEmit) => void;
+}
+/**
+ * Drive one full autopilot cycle for a finished user turn. Every exit is
+ * explicit:
+ *  - cancelled            → silent stop (the /cancel path already broadcast)
+ *  - plan mode mid-cycle  → autopilot_human with the plan-hold reason
+ *  - review failed (null) → silent stop (autopilot_error already broadcast)
+ *  - ALL_CLEAR            → autopilot_done
+ *  - IGNORE               → autopilot_ignored (renders nothing)
+ *  - HUMAN                → autopilot_human
+ *  - rounds exhausted     → autopilot_capped
+ */
+export declare function driveAutopilotCycle(deps: AutopilotCycleDeps): Promise<void>;
+//# sourceMappingURL=autopilot-cycle.d.ts.map

package/dist/core/autopilot-cycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autopilot-cycle.d.ts","sourceRoot":"","sources":["../../src/core/autopilot-cycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D;qEACqE;AACrE,eAAO,MAAM,0BAA0B,mHAC2E,CAAC;AAEnH,mEAAmE;AACnE,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAE3D,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,WAAW,EAAE,MAAM,OAAO,CAAC;IAC3B,iDAAiD;IACjD,UAAU,EAAE,MAAM,OAAO,CAAC;IAC1B;+EAC2E;IAC3E,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC;2EACuE;IACvE,MAAM,EAAE,MAAM,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAC/C,mEAAmE;IACnE,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C;mDAC+C;IAC/C,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClD,wDAAwD;IACxD,IAAI,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;CAC3C;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BjF"}

package/dist/core/autopilot-cycle.js

@@ -0,0 +1,50 @@
+/** Reason shown in the Nolan bubble when an injected run enters plan mode
+ *  mid-cycle — the loop halts and hands the decision to the user. */
+export const AUTOPILOT_PLAN_HOLD_REASON = "EZ Coder submitted a plan for your review. Approve or reject it yourself; autopilot won't decide that for you.";
+/**
+ * Drive one full autopilot cycle for a finished user turn. Every exit is
+ * explicit:
+ *  - cancelled            → silent stop (the /cancel path already broadcast)
+ *  - plan mode mid-cycle  → autopilot_human with the plan-hold reason
+ *  - review failed (null) → silent stop (autopilot_error already broadcast)
+ *  - ALL_CLEAR            → autopilot_done
+ *  - IGNORE               → autopilot_ignored (renders nothing)
+ *  - HUMAN                → autopilot_human
+ *  - rounds exhausted     → autopilot_capped
+ */
+export async function driveAutopilotCycle(deps) {
+    if (deps.isCancelled())
+        return;
+    await deps.resetReviewer();
+    for (let round = 1; round <= deps.maxRounds; round++) {
+        if (deps.isCancelled())
+            return;
+        // The gate blocks a plan-mode turn up front, so hitting this means an
+        // injected run entered plan mode mid-cycle: halt and hand it to the user.
+        if (deps.isPlanMode()) {
+            deps.emit({ type: "autopilot_human", data: { reason: AUTOPILOT_PLAN_HOLD_REASON } });
+            return;
+        }
+        const verdict = await deps.review();
+        if (!verdict || deps.isCancelled())
+            return;
+        if (verdict.kind === "all_clear") {
+            deps.emit({ type: "autopilot_done", data: {} });
+            return;
+        }
+        if (verdict.kind === "ignore") {
+            deps.emit({ type: "autopilot_ignored", data: {} });
+            return;
+        }
+        if (verdict.kind === "human") {
+            deps.emit({ type: "autopilot_human", data: { reason: verdict.reason } });
+            return;
+        }
+        deps.onInjected(verdict.body, round);
+        await deps.runPrompt(verdict.body);
+        if (deps.isCancelled())
+            return;
+    }
+    deps.emit({ type: "autopilot_capped", data: { rounds: deps.maxRounds } });
+}
+//# sourceMappingURL=autopilot-cycle.js.map

package/dist/core/autopilot-cycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autopilot-cycle.js","sourceRoot":"","sources":["../../src/core/autopilot-cycle.ts"],"names":[],"mappings":"AAaA;qEACqE;AACrE,MAAM,CAAC,MAAM,0BAA0B,GACrC,gHAAgH,CAAC;AA+BnH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAwB;IAChE,IAAI,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO;IAC/B,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO;QAC/B,sEAAsE;QACtE,0EAA0E;QAC1E,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAAE,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO;QAC3C,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO;IACjC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC"}

package/dist/core/autopilot-cycle.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=autopilot-cycle.test.d.ts.map

package/dist/core/autopilot-cycle.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autopilot-cycle.test.d.ts","sourceRoot":"","sources":["../../src/core/autopilot-cycle.test.ts"],"names":[],"mappings":""}

package/dist/core/autopilot-cycle.test.js

@@ -0,0 +1,179 @@
+import { describe, it, expect, vi } from "vitest";
+import { driveAutopilotCycle, AUTOPILOT_PLAN_HOLD_REASON, } from "./autopilot-cycle.js";
+/** Build a full deps object with sane defaults; tests override what they probe.
+ *  `verdicts` is consumed in order; running out returns null (review failure). */
+function makeDeps(verdicts, overrides = {}) {
+    const emitted = [];
+    const injected = [];
+    const ran = [];
+    const queue = [...verdicts];
+    const deps = {
+        maxRounds: 3,
+        isCancelled: () => false,
+        isPlanMode: () => false,
+        resetReviewer: vi.fn(async () => { }),
+        review: vi.fn(async () => queue.shift() ?? null),
+        runPrompt: async (body) => {
+            ran.push(body);
+        },
+        onInjected: (body, round) => {
+            injected.push({ body, round });
+        },
+        emit: (event) => {
+            emitted.push(event);
+        },
+        ...overrides,
+    };
+    // Overrides may swap the vi.fn defaults for plain functions; every test that
+    // asserts on mock calls passes a vi.fn itself, so the cast is safe.
+    return Object.assign(deps, { emitted, injected, ran });
+}
+describe("driveAutopilotCycle", () => {
+    it("ALL_CLEAR → autopilot_done, no injected run", async () => {
+        const deps = makeDeps([{ kind: "all_clear" }]);
+        await driveAutopilotCycle(deps);
+        expect(deps.emitted).toEqual([{ type: "autopilot_done", data: {} }]);
+        expect(deps.ran).toEqual([]);
+        expect(deps.resetReviewer).toHaveBeenCalledTimes(1);
+    });
+    it("IGNORE → autopilot_ignored, no injected run", async () => {
+        const deps = makeDeps([{ kind: "ignore" }]);
+        await driveAutopilotCycle(deps);
+        expect(deps.emitted).toEqual([{ type: "autopilot_ignored", data: {} }]);
+        expect(deps.ran).toEqual([]);
+    });
+    it("HUMAN → autopilot_human with the verdict's reason", async () => {
+        const deps = makeDeps([{ kind: "human", reason: "ambiguous requirement" }]);
+        await driveAutopilotCycle(deps);
+        expect(deps.emitted).toEqual([
+            { type: "autopilot_human", data: { reason: "ambiguous requirement" } },
+        ]);
+        expect(deps.ran).toEqual([]);
+    });
+    it("PROMPT → records the injection BEFORE running, then re-reviews", async () => {
+        const order = [];
+        const deps = makeDeps([{ kind: "prompt", body: "fix the test" }, { kind: "all_clear" }], {
+            onInjected: (body) => order.push(`injected:${body}`),
+            runPrompt: async (body) => {
+                order.push(`ran:${body}`);
+            },
+        });
+        await driveAutopilotCycle(deps);
+        // onInjected must precede runPrompt — the digest labeling depends on the
+        // body being recorded before the injected run's messages exist.
+        expect(order).toEqual(["injected:fix the test", "ran:fix the test"]);
+        expect(deps.emitted).toEqual([{ type: "autopilot_done", data: {} }]);
+        expect(deps.review).toHaveBeenCalledTimes(2);
+    });
+    it("caps at maxRounds PROMPT verdicts → autopilot_capped", async () => {
+        const deps = makeDeps([
+            { kind: "prompt", body: "fix 1" },
+            { kind: "prompt", body: "fix 2" },
+            { kind: "prompt", body: "fix 3" },
+            // Would be round 4 — must never be reached.
+            { kind: "prompt", body: "fix 4" },
+        ]);
+        await driveAutopilotCycle(deps);
+        expect(deps.ran).toEqual(["fix 1", "fix 2", "fix 3"]);
+        expect(deps.emitted).toEqual([{ type: "autopilot_capped", data: { rounds: 3 } }]);
+        expect(deps.review).toHaveBeenCalledTimes(3);
+    });
+    it("review failure (null) → silent stop, nothing injected", async () => {
+        const deps = makeDeps([null]);
+        await driveAutopilotCycle(deps);
+        expect(deps.emitted).toEqual([]);
+        expect(deps.ran).toEqual([]);
+    });
+    it("cancelled before start → nothing runs, reviewer untouched", async () => {
+        const deps = makeDeps([{ kind: "all_clear" }], { isCancelled: () => true });
+        await driveAutopilotCycle(deps);
+        expect(deps.resetReviewer).not.toHaveBeenCalled();
+        expect(deps.review).not.toHaveBeenCalled();
+        expect(deps.emitted).toEqual([]);
+    });
+    it("cancel landing during the review discards the verdict", async () => {
+        let cancelled = false;
+        const deps = makeDeps([], {
+            review: vi.fn(async () => {
+                cancelled = true; // /cancel fires while Nolan is reviewing
+                return { kind: "prompt", body: "fix it" };
+            }),
+            isCancelled: () => cancelled,
+        });
+        await driveAutopilotCycle(deps);
+        expect(deps.ran).toEqual([]);
+        expect(deps.emitted).toEqual([]);
+    });
+    it("cancel landing during an injected run stops before the next review", async () => {
+        let cancelled = false;
+        const deps = makeDeps([{ kind: "prompt", body: "fix it" }, { kind: "all_clear" }], {
+            runPrompt: async () => {
+                cancelled = true; // /cancel fires mid-injected-run
+            },
+            isCancelled: () => cancelled,
+        });
+        await driveAutopilotCycle(deps);
+        expect(deps.review).toHaveBeenCalledTimes(1);
+        expect(deps.emitted).toEqual([]);
+    });
+    it("plan mode at cycle start → autopilot_human plan hold, no review", async () => {
+        const deps = makeDeps([{ kind: "all_clear" }], { isPlanMode: () => true });
+        await driveAutopilotCycle(deps);
+        expect(deps.review).not.toHaveBeenCalled();
+        expect(deps.emitted).toEqual([
+            { type: "autopilot_human", data: { reason: AUTOPILOT_PLAN_HOLD_REASON } },
+        ]);
+    });
+    it("injected run entering plan mode halts the loop before the next review", async () => {
+        let planMode = false;
+        const ran = [];
+        const deps = makeDeps([
+            { kind: "prompt", body: "restructure the module" },
+            // Would be reviewed in round 2 — must never be reached.
+            { kind: "prompt", body: "another fix" },
+        ], {
+            runPrompt: async (body) => {
+                ran.push(body);
+                planMode = true; // EZ Coder called enter_plan/exit_plan during the run
+            },
+            isPlanMode: () => planMode,
+        });
+        await driveAutopilotCycle(deps);
+        expect(ran).toEqual(["restructure the module"]);
+        expect(deps.review).toHaveBeenCalledTimes(1);
+        expect(deps.emitted).toEqual([
+            { type: "autopilot_human", data: { reason: AUTOPILOT_PLAN_HOLD_REASON } },
+        ]);
+    });
+    it("multi-round: prompt → prompt → all_clear runs both fixes then finishes", async () => {
+        const deps = makeDeps([
+            { kind: "prompt", body: "fix 1" },
+            { kind: "prompt", body: "fix 2" },
+            { kind: "all_clear" },
+        ]);
+        await driveAutopilotCycle(deps);
+        expect(deps.ran).toEqual(["fix 1", "fix 2"]);
+        expect(deps.injected.map((i) => i.round)).toEqual([1, 2]);
+        expect(deps.emitted).toEqual([{ type: "autopilot_done", data: {} }]);
+    });
+    it("resets the reviewer exactly once per cycle, before any review", async () => {
+        const order = [];
+        const deps = makeDeps([{ kind: "prompt", body: "fix" }, { kind: "all_clear" }], {
+            resetReviewer: vi.fn(async () => {
+                order.push("reset");
+            }),
+            runPrompt: async () => {
+                order.push("run");
+            },
+        });
+        // Wrap review to trace ordering while preserving queue behavior.
+        const innerReview = deps.review;
+        deps.review = vi.fn(async () => {
+            order.push("review");
+            return innerReview();
+        });
+        await driveAutopilotCycle(deps);
+        expect(order).toEqual(["reset", "review", "run", "review"]);
+    });
+});
+//# sourceMappingURL=autopilot-cycle.test.js.map

package/dist/core/autopilot-cycle.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autopilot-cycle.test.js","sourceRoot":"","sources":["../../src/core/autopilot-cycle.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EACL,mBAAmB,EACnB,0BAA0B,GAG3B,MAAM,sBAAsB,CAAC;AAG9B;kFACkF;AAClF,SAAS,QAAQ,CACf,QAAwC,EACxC,YAAyC,EAAE;IAQ3C,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,MAAM,QAAQ,GAA2C,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG;QACX,SAAS,EAAE,CAAC;QACZ,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK;QACxB,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK;QACvB,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;QACpC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC;QAChD,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;YAChC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;QACD,UAAU,EAAE,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE;YAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,EAAE,CAAC,KAAyB,EAAE,EAAE;YAClC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,GAAG,SAAS;KACb,CAAC;IACF,6EAA6E;IAC7E,oEAAoE;IACpE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAMpD,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;QAC5E,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;YAC3B,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE;SACvE,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE;YACvF,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;YACpD,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACxB,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAC5B,CAAC;SACF,CAAC,CAAC;QACH,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,yEAAyE;QACzE,gEAAgE;QAChE,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,IAAI,GAAG,QAAQ,CAAC;YACpB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE;YACjC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE;YACjC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE;YACjC,4CAA4C;YAC5C,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE;YACxB,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;gBACvB,SAAS,GAAG,IAAI,CAAC,CAAC,yCAAyC;gBAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAsB,CAAC;YAChE,CAAC,CAAC;YACF,WAAW,EAAE,GAAG,EAAE,CAAC,SAAS;SAC7B,CAAC,CAAC;QACH,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE;YACjF,SAAS,EAAE,KAAK,IAAI,EAAE;gBACpB,SAAS,GAAG,IAAI,CAAC,CAAC,iCAAiC;YACrD,CAAC;YACD,WAAW,EAAE,GAAG,EAAE,CAAC,SAAS;SAC7B,CAAC,CAAC;QACH,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;YAC3B,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAAE;SAC1E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,QAAQ,CACnB;YACE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,wBAAwB,EAAE;YAClD,wDAAwD;YACxD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE;SACxC,EACD;YACE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACxB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACf,QAAQ,GAAG,IAAI,CAAC,CAAC,sDAAsD;YACzE,CAAC;YACD,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ;SAC3B,CACF,CAAC;QACF,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;YAC3B,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAAE;SAC1E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,IAAI,GAAG,QAAQ,CAAC;YACpB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE;YACjC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE;YACjC,EAAE,IAAI,EAAE,WAAW,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE;YAC9E,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;gBAC9B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC,CAAC;YACF,SAAS,EAAE,KAAK,IAAI,EAAE;gBACpB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;SACF,CAAC,CAAC;QACH,iEAAiE;QACjE,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;YAC7B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrB,OAAO,WAAW,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/core/autopilot-gate.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Autopilot gate — pure decision logic for whether Nolan's auto-review cycle may
+ * start after a finished EZ Coder turn.
+ *
+ * Autopilot must NOT review every turn. The concrete leak cases this gate
+ * closes (each has a matching unit test in autopilot-gate.test.ts):
+ *
+ * - Workflow slash commands (`/compare`, `/bullet-proof`, `/expand`, custom
+ *   `.ezcoder/commands/*.md`) end with reports or A/B/C choices that are reserved
+ *   for the USER. Nolan reviewing them reads "findings" as "something real is
+ *   wrong" and injects fix prompts the user never approved.
+ * - Registry commands (`/help`, `/session`, unknown `/foo`) and failed runs
+ *   add no assistant work at all — a review would judge the PREVIOUS turn
+ *   again (Nolan's cycle memory is wiped per turn) and can flip a settled
+ *   ALL_CLEAR into a fresh PROMPT.
+ * - A turn that ended in plan mode has a pending Accept/Reject modal; Nolan must
+ *   never inject a prompt into a read-only plan-mode session.
+ *
+ * Kept pure + dependency-light so it's unit-testable without booting the
+ * sidecar (which runs `main()` at import time).
+ */
+/** A workflow (prompt-template) command: built-in PROMPT_COMMANDS or a custom
+ *  `.ezcoder/commands/*.md` entry. `prompt` is the full template body the command
+ *  expands to when run. */
+export interface WorkflowCommandSpec {
+    name: string;
+    aliases?: readonly string[];
+    prompt: string;
+}
+/** The exact separator AgentSession.prompt() inserts between a command's
+ *  template and the user's extra args (see agent-session.ts prompt expansion).
+ *  Must stay byte-identical or expanded-command detection silently breaks. */
+export declare const USER_INSTRUCTIONS_HEADER = "\n\n## User Instructions\n\n";
+/**
+ * True when `text` invokes a known workflow command (first token, name or
+ * alias, case-insensitive). Registry/UI commands and unknown `/foo` return
+ * false — those add no assistant work and are caught by the
+ * `no-assistant-output` gate instead.
+ */
+export declare function isWorkflowCommandText(text: string, commands: readonly WorkflowCommandSpec[]): boolean;
+/**
+ * Match a transcript user-message body back to the workflow command it was
+ * expanded from. AgentSession stores the EXPANDED template as a plain user
+ * message, so without this Nolan's digest renders 400-line templates as
+ * `**User:** …` and treats them as user-authored asks.
+ *
+ * Returns the matched command plus any trailing user args, or null.
+ */
+export declare function matchExpandedCommand(text: string, commands: readonly WorkflowCommandSpec[]): {
+    command: WorkflowCommandSpec;
+    args: string | null;
+} | null;
+/** Count assistant messages — the "did this run produce reviewable work"
+ *  signal. Compared before/after a run by the sidecar. */
+export declare function countAssistantMessages(messages: ReadonlyArray<{
+    role: string;
+}>): number;
+export type AutopilotSkipReason = "disabled" | "cancelled" | "plan-mode" | "workflow-command" | "no-assistant-output";
+export interface AutopilotGateInput {
+    /** The window's autopilot toggle. */
+    enabled: boolean;
+    /** True when /cancel fired during the turn. */
+    cancelled: boolean;
+    /** True when the session ended the turn in plan mode (plan modal pending). */
+    planMode: boolean;
+    /** True when the turn was a workflow slash command (see isWorkflowCommandText). */
+    workflowCommand: boolean;
+    /** Assistant messages ADDED by this turn (after minus before). */
+    assistantMessagesAdded: number;
+}
+export type AutopilotGateDecision = {
+    start: true;
+} | {
+    start: false;
+    reason: AutopilotSkipReason;
+};
+/**
+ * Decide whether the autopilot cycle may start for a just-finished turn.
+ * Checks are ordered cheapest/most-fundamental first; the reason is logged by
+ * the sidecar so skips are debuggable from ezcoder-app-sidecar.log.
+ */
+export declare function shouldStartAutopilotCycle(input: AutopilotGateInput): AutopilotGateDecision;
+//# sourceMappingURL=autopilot-gate.d.ts.map

package/dist/core/autopilot-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autopilot-gate.d.ts","sourceRoot":"","sources":["../../src/core/autopilot-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;2BAE2B;AAC3B,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;8EAE8E;AAC9E,eAAO,MAAM,wBAAwB,iCAAiC,CAAC;AAWvE;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,SAAS,mBAAmB,EAAE,GACvC,OAAO,CAMT;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,SAAS,mBAAmB,EAAE,GACvC;IAAE,OAAO,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAW9D;AAED;0DAC0D;AAC1D,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,MAAM,CAIxF;AAED,MAAM,MAAM,mBAAmB,GAC3B,UAAU,GACV,WAAW,GACX,WAAW,GACX,kBAAkB,GAClB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,kBAAkB;IACjC,qCAAqC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,+CAA+C;IAC/C,SAAS,EAAE,OAAO,CAAC;IACnB,8EAA8E;IAC9E,QAAQ,EAAE,OAAO,CAAC;IAClB,mFAAmF;IACnF,eAAe,EAAE,OAAO,CAAC;IACzB,kEAAkE;IAClE,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,MAAM,qBAAqB,GAAG;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAEpG;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,kBAAkB,GAAG,qBAAqB,CAO1F"}