@prestyj/cli 5.9.0 → 5.11.0

package/dist/core/verification-evidence.js

@@ -0,0 +1,283 @@
+import { hasUnsafeShellSyntax, splitShellCommandSegments } from "../tools/read-only-bash.js";
+const LONG_RUNNING_FLAGS = new Set([
+    "--watch",
+    "--watchall",
+    "--watchall=false",
+    "--ui",
+    "--inspect",
+    "--inspect-brk",
+    "-w",
+]);
+const MUTATING_FLAGS = new Set([
+    "--init",
+    "--build",
+    "-b",
+    "--clean",
+    "--fix",
+    "--write",
+    "--update",
+    "-u",
+    "--updatesnapshot",
+    "--incremental",
+    "--tsbuildinfofile",
+    "--emitdeclarationonly",
+]);
+const AMBIGUOUS_FLAGS = new Set([
+    "--nocheck",
+    "--listfilesonly",
+    "--showconfig",
+    "--help",
+    "-h",
+    "--version",
+    "--generatetrace",
+    "--traceresolution",
+    "--diagnostics",
+    "--extendeddiagnostics",
+    "--generatecpuprofile",
+    "--collect-only",
+    "--listtests",
+]);
+const SAFE_PACKAGE_SCRIPTS = /^(?:test(?::(?:unit|integration|e2e))?|check|typecheck|type-check|lint(?::check)?|format(?::check|-check)|prettier:check)$/i;
+const UNSAFE_PACKAGE_SCRIPTS = /^(?:build|clean|dev|serve|start|watch|preview|prepare|install|format|lint:fix|test:watch)(?::|$)/i;
+const VERIFIER_WORDS = /(?:^|\s|\/)(?:tsc|vitest|jest|pytest|eslint|prettier|pyright|mypy|ruff|cargo|go|shellcheck)(?:\s|$)/i;
+function tokenize(segment) {
+    return segment
+        .trim()
+        .split(/\s+/)
+        .map((token) => token.replace(/^["']|["']$/g, ""))
+        .filter(Boolean);
+}
+function lowerFlags(tokens) {
+    return new Set(tokens.filter((token) => token.startsWith("-")).map((token) => token.toLowerCase()));
+}
+function hasFlag(flags, denied) {
+    for (const flag of flags) {
+        const name = flag.split("=")[0];
+        if (denied.has(flag) || denied.has(name))
+            return true;
+    }
+    return false;
+}
+function rejected(candidate, reason) {
+    return { accepted: false, candidate, reason };
+}
+function accepted(reason) {
+    return { accepted: true, candidate: true, reason };
+}
+function classifyTsc(tokens) {
+    const flags = lowerFlags(tokens);
+    if (hasFlag(flags, LONG_RUNNING_FLAGS))
+        return rejected(true, "long-running watch/debug mode");
+    if (hasFlag(flags, MUTATING_FLAGS))
+        return rejected(true, "mutating or artifact-producing mode");
+    if (hasFlag(flags, AMBIGUOUS_FLAGS) || flags.has("-v")) {
+        return rejected(true, "does not prove type correctness");
+    }
+    if (!flags.has("--noemit"))
+        return rejected(true, "tsc must explicitly use --noEmit");
+    return accepted("bounded TypeScript no-emit check");
+}
+function classifyTestRunner(executable, tokens) {
+    const flags = lowerFlags(tokens);
+    if (hasFlag(flags, LONG_RUNNING_FLAGS) || flags.has("--watch=false")) {
+        return rejected(true, "long-running or interactive test mode");
+    }
+    if (hasFlag(flags, MUTATING_FLAGS))
+        return rejected(true, "mutating test/update mode");
+    if (hasFlag(flags, AMBIGUOUS_FLAGS))
+        return rejected(true, "does not execute the test suite");
+    if (executable === "vitest") {
+        const positional = tokens.slice(1).filter((token) => !token.startsWith("-"));
+        if (!positional.includes("run") && !flags.has("--run")) {
+            return rejected(true, "vitest must explicitly use one-shot run mode");
+        }
+    }
+    return accepted("bounded one-shot test check");
+}
+function classifyDirect(tokens) {
+    const executable = tokens[0]?.replace(/^.*[\\/]/, "").toLowerCase();
+    if (!executable)
+        return rejected(false, "empty command");
+    if (executable === "tsc")
+        return classifyTsc(tokens);
+    if (executable === "vitest" || executable === "jest" || executable === "pytest") {
+        return classifyTestRunner(executable, tokens);
+    }
+    const flags = lowerFlags(tokens);
+    if (["eslint", "prettier", "ruff"].includes(executable)) {
+        if (hasFlag(flags, LONG_RUNNING_FLAGS))
+            return rejected(true, "long-running mode");
+        if (hasFlag(flags, MUTATING_FLAGS))
+            return rejected(true, "mutating formatter/linter mode");
+        if (hasFlag(flags, AMBIGUOUS_FLAGS))
+            return rejected(true, "does not execute a static check");
+        if (executable === "prettier" && !flags.has("--check")) {
+            return rejected(true, "prettier must explicitly use --check");
+        }
+        if (executable === "ruff" && tokens[1] === "format" && !flags.has("--check")) {
+            return rejected(true, "ruff format must explicitly use --check");
+        }
+        return accepted("bounded static check");
+    }
+    if (["pyright", "mypy", "shellcheck"].includes(executable)) {
+        if (hasFlag(flags, LONG_RUNNING_FLAGS))
+            return rejected(true, "long-running mode");
+        if (hasFlag(flags, AMBIGUOUS_FLAGS))
+            return rejected(true, "does not execute a static check");
+        return accepted("bounded static check");
+    }
+    if (executable === "cargo") {
+        const subcommand = tokens[1]?.toLowerCase();
+        if (subcommand === "build" || subcommand === "clean" || subcommand === "run") {
+            return rejected(true, "artifact-producing Cargo command");
+        }
+        if (subcommand === "fmt" && !flags.has("--check")) {
+            return rejected(true, "cargo fmt must explicitly use --check");
+        }
+        return ["check", "clippy", "test", "fmt"].includes(subcommand)
+            ? accepted("bounded Cargo check")
+            : rejected(false, "not a recognized verification command");
+    }
+    if (executable === "go") {
+        const subcommand = tokens[1]?.toLowerCase();
+        return subcommand === "test" || subcommand === "vet"
+            ? accepted("bounded Go check")
+            : rejected(subcommand === "build" || subcommand === "clean", "not a bounded Go check");
+    }
+    return rejected(VERIFIER_WORDS.test(tokens.join(" ")), "not a recognized verification command");
+}
+function classifyPackageRunner(tokens) {
+    const runner = tokens[0].toLowerCase();
+    let index = 1;
+    while (index < tokens.length) {
+        const token = tokens[index].toLowerCase();
+        if (["--filter", "-f", "--dir", "-c"].includes(token)) {
+            index += 2;
+            continue;
+        }
+        if (token === "--workspace-root" ||
+            token === "-w" ||
+            token.startsWith("--filter=") ||
+            token.startsWith("--dir=")) {
+            index += 1;
+            continue;
+        }
+        break;
+    }
+    const action = tokens[index]?.toLowerCase();
+    if (!action)
+        return rejected(false, "package runner has no command");
+    if (["exec", "x", "dlx"].includes(action))
+        return classifyDirect(tokens.slice(index + 1));
+    const scriptIndex = action === "run" ? index + 1 : index;
+    const script = tokens[scriptIndex]?.toLowerCase();
+    if (!script)
+        return rejected(false, "package runner has no script");
+    if (UNSAFE_PACKAGE_SCRIPTS.test(script)) {
+        return rejected(true, "mutating, artifact-producing, or long-running package script");
+    }
+    if (!SAFE_PACKAGE_SCRIPTS.test(script)) {
+        return rejected(false, "package script is not a recognized verification check");
+    }
+    const scriptArgs = tokens.slice(scriptIndex + 1).filter((token) => token !== "--");
+    const flags = lowerFlags(scriptArgs);
+    if (hasFlag(flags, LONG_RUNNING_FLAGS))
+        return rejected(true, "long-running package-script mode");
+    if (hasFlag(flags, MUTATING_FLAGS))
+        return rejected(true, "mutating package-script mode");
+    if (hasFlag(flags, AMBIGUOUS_FLAGS))
+        return rejected(true, "package script does not prove correctness");
+    return accepted(`bounded ${runner} verification script`);
+}
+function classifySegment(segment) {
+    const candidate = VERIFIER_WORDS.test(segment) || /(?:^|\s)(?:pnpm|npm|yarn|bun)(?:\s|$)/i.test(segment);
+    if (hasUnsafeShellSyntax(segment))
+        return rejected(candidate, "unsafe shell syntax or redirection");
+    const tokens = tokenize(segment);
+    const first = tokens[0]?.toLowerCase();
+    if (["pnpm", "npm", "yarn", "bun"].includes(first))
+        return classifyPackageRunner(tokens);
+    if (["npx", "bunx"].includes(first))
+        return classifyDirect(tokens.slice(1));
+    return classifyDirect(tokens);
+}
+/** Fail-closed semantic classifier: every shell segment must be a bounded check. */
+export function classifyVerificationCommand(command) {
+    const candidate = VERIFIER_WORDS.test(command) || /(?:^|\s)(?:pnpm|npm|yarn|bun)(?:\s|$)/i.test(command);
+    // Only && preserves fail-closed evidence across a chain. Pipes, OR, semicolons,
+    // and newlines can hide a failed check behind a later zero exit status.
+    if (command.includes("||") ||
+        command.includes(";") ||
+        command.includes("\n") ||
+        /(^|[^|])\|([^|]|$)/.test(command)) {
+        return rejected(candidate, "shell control operator can hide a failed check");
+    }
+    const segments = splitShellCommandSegments(command);
+    if (segments.length === 0)
+        return rejected(false, "empty command");
+    const results = segments.map(classifySegment);
+    const firstRejected = results.find((result) => !result.accepted);
+    if (firstRejected) {
+        return rejected(results.some((result) => result.candidate), firstRejected.reason);
+    }
+    return accepted(segments.length === 1 ? results[0].reason : "bounded verification command chain");
+}
+function resultText(result) {
+    if (typeof result.content === "string")
+        return result.content;
+    return result.content
+        .filter((part) => part.type === "text")
+        .map((part) => part.text)
+        .join("\n");
+}
+/** Extract harness-owned evidence from completed bash calls in a transcript. */
+export function collectVerificationEvidence(messages) {
+    const calls = new Map();
+    const evidence = [];
+    for (const message of messages) {
+        if (message.role === "assistant" && Array.isArray(message.content)) {
+            for (const part of message.content) {
+                if (part.type !== "tool_call" || part.name !== "bash")
+                    continue;
+                const command = typeof part.args.command === "string" ? part.args.command.trim() : "";
+                const background = part.args.run_in_background === true || part.args.persist === true;
+                calls.set(part.id, {
+                    command,
+                    classification: classifyVerificationCommand(command),
+                    background,
+                });
+            }
+        }
+        if (message.role !== "tool")
+            continue;
+        for (const result of message.content) {
+            const call = calls.get(result.toolCallId);
+            if (!call || !call.classification.candidate)
+                continue;
+            if (call.background) {
+                evidence.push({
+                    command: call.command,
+                    status: "rejected",
+                    reason: "background or persistent commands are not bounded evidence",
+                });
+                continue;
+            }
+            if (!call.classification.accepted) {
+                evidence.push({
+                    command: call.command,
+                    status: "rejected",
+                    reason: call.classification.reason,
+                });
+                continue;
+            }
+            const passed = !result.isError && /^Exit code:\s*0(?:\s|$)/i.test(resultText(result).trim());
+            evidence.push({
+                command: call.command,
+                status: passed ? "passed" : "failed",
+                reason: passed ? call.classification.reason : "bounded check did not exit successfully",
+            });
+        }
+    }
+    return evidence;
+}
+//# sourceMappingURL=verification-evidence.js.map

package/dist/core/verification-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-evidence.js","sourceRoot":"","sources":["../../src/core/verification-evidence.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAe7F,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,SAAS;IACT,YAAY;IACZ,kBAAkB;IAClB,MAAM;IACN,WAAW;IACX,eAAe;IACf,IAAI;CACL,CAAC,CAAC;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,QAAQ;IACR,SAAS;IACT,IAAI;IACJ,SAAS;IACT,OAAO;IACP,SAAS;IACT,UAAU;IACV,IAAI;IACJ,kBAAkB;IAClB,eAAe;IACf,mBAAmB;IACnB,uBAAuB;CACxB,CAAC,CAAC;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,WAAW;IACX,iBAAiB;IACjB,cAAc;IACd,QAAQ;IACR,IAAI;IACJ,WAAW;IACX,iBAAiB;IACjB,mBAAmB;IACnB,eAAe;IACf,uBAAuB;IACvB,sBAAsB;IACtB,gBAAgB;IAChB,aAAa;CACd,CAAC,CAAC;AACH,MAAM,oBAAoB,GACxB,6HAA6H,CAAC;AAChI,MAAM,sBAAsB,GAC1B,mGAAmG,CAAC;AACtG,MAAM,cAAc,GAClB,sGAAsG,CAAC;AAEzG,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,OAAO;SACX,IAAI,EAAE;SACN,KAAK,CAAC,KAAK,CAAC;SACZ,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;SACjD,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,UAAU,CAAC,MAAyB;IAC3C,OAAO,IAAI,GAAG,CACZ,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CACpF,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAA0B,EAAE,MAA2B;IACtE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,SAAkB,EAAE,MAAc;IAClD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,WAAW,CAAC,MAAyB;IAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;IAC/F,IAAI,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC;IACjG,IAAI,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,OAAO,QAAQ,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;IACtF,OAAO,QAAQ,CAAC,kCAAkC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CACzB,UAAkB,EAClB,MAAyB;IAEzB,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QACrE,OAAO,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;IACvF,IAAI,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;IAC9F,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACvD,OAAO,QAAQ,CAAC,IAAI,EAAE,8CAA8C,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,6BAA6B,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,cAAc,CAAC,MAAyB;IAC/C,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,IAAI,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACzD,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAChF,OAAO,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,IAAI,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC;YAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QACnF,IAAI,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC;YAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;QAC5F,IAAI,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC;YAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;QAC9F,IAAI,UAAU,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACvD,OAAO,QAAQ,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,UAAU,KAAK,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7E,OAAO,QAAQ,CAAC,IAAI,EAAE,yCAAyC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3D,IAAI,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC;YAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QACnF,IAAI,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC;YAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;QAC9F,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QAC5C,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YAC7E,OAAO,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,UAAU,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAClD,OAAO,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC5D,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YACjC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,uCAAuC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QAC5C,OAAO,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK;YAClD,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC9B,CAAC,CAAC,QAAQ,CAAC,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,uCAAuC,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAyB;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IACE,KAAK,KAAK,kBAAkB;YAC5B,KAAK,KAAK,IAAI;YACd,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;YAC7B,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAC1B,CAAC;YACD,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,MAAM;IACR,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAE1F,MAAM,WAAW,GAAG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;IACpE,IAAI,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,IAAI,EAAE,8DAA8D,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,OAAO,QAAQ,CAAC,KAAK,EAAE,uDAAuD,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;IAClG,IAAI,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAC;IAC1F,IAAI,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC;QACjC,OAAO,QAAQ,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;IACrE,OAAO,QAAQ,CAAC,WAAW,MAAM,sBAAsB,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,SAAS,GACb,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,wCAAwC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzF,IAAI,oBAAoB,CAAC,OAAO,CAAC;QAC/B,OAAO,QAAQ,CAAC,SAAS,EAAE,oCAAoC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACzF,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,2BAA2B,CAAC,OAAe;IACzD,MAAM,SAAS,GACb,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,wCAAwC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzF,gFAAgF;IAChF,wEAAwE;IACxE,IACE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAClC,CAAC;QACD,OAAO,QAAQ,CAAC,SAAS,EAAE,gDAAgD,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,QAAQ,CACb,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAC1C,aAAa,CAAC,MAAM,CACrB,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,UAAU,CAAC,MAAkB;IACpC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IAC9D,OAAO,MAAM,CAAC,OAAO;SAClB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;SACtC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;SACxB,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,2BAA2B,CAAC,QAA4B;IACtE,MAAM,KAAK,GAAG,IAAI,GAAG,EAGlB,CAAC;IACJ,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAE5C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAwB,EAAE,CAAC;gBACpD,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;oBAAE,SAAS;gBAChE,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;gBACtF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE;oBACjB,OAAO;oBACP,cAAc,EAAE,2BAA2B,CAAC,OAAO,CAAC;oBACpD,UAAU;iBACX,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACtC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAuB,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS;gBAAE,SAAS;YACtD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,UAAU;oBAClB,MAAM,EAAE,4DAA4D;iBACrE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;gBAClC,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,UAAU;oBAClB,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM;iBACnC,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7F,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;gBACpC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,yCAAyC;aACxF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/verification-evidence.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=verification-evidence.test.d.ts.map

package/dist/core/verification-evidence.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-evidence.test.d.ts","sourceRoot":"","sources":["../../src/core/verification-evidence.test.ts"],"names":[],"mappings":""}

package/dist/core/verification-evidence.test.js

@@ -0,0 +1,103 @@
+import { describe, expect, it } from "vitest";
+import { classifyVerificationCommand, collectVerificationEvidence, } from "./verification-evidence.js";
+describe("classifyVerificationCommand", () => {
+    it.each([
+        "tsc --noEmit",
+        "pnpm exec tsc --noEmit --pretty false",
+        "pnpm --filter @prestyj/ai check",
+        "pnpm -w typecheck",
+        "vitest run src/foo.test.ts",
+        "pnpm test -- --runInBand",
+        "cargo fmt --check && cargo clippy",
+        "ruff format --check .",
+    ])("accepts bounded check: %s", (command) => {
+        expect(classifyVerificationCommand(command)).toMatchObject({
+            accepted: true,
+            candidate: true,
+        });
+    });
+    it.each([
+        ["tsc --init", "mutating"],
+        ["tsc --build", "mutating"],
+        ["tsc --noEmit --incremental", "mutating"],
+        ["tsc --noEmit --tsBuildInfoFile cache.tsbuildinfo", "mutating"],
+        ["prettier --write src", "mutating"],
+        ["pnpm build", "artifact-producing"],
+        ["tsc --watch --noEmit", "long-running"],
+        ["vitest --watch", "long-running"],
+        ["pnpm dev", "long-running"],
+        ["tsc", "--noEmit"],
+        ["tsc --noEmit --noCheck", "does not prove"],
+        ["tsc --noEmit --listFilesOnly", "does not prove"],
+        ["tsc --showConfig", "does not prove"],
+        ["tsc --help", "does not prove"],
+        ["tsc --version", "does not prove"],
+        ["tsc --noEmit --generateTrace trace", "does not prove"],
+        ["tsc --noEmit --generateCpuProfile cpu.cpuprofile", "does not prove"],
+        ["tsc --noEmit > result.txt", "unsafe shell"],
+        ["tsc --noEmit | cat", "control operator"],
+        ["tsc --noEmit || echo ignored", "control operator"],
+        ["tsc --noEmit; echo ignored", "control operator"],
+        ["tsc --noEmit && npm run clean", "mutating"],
+    ])("rejects non-evidence command: %s", (command, reason) => {
+        expect(classifyVerificationCommand(command)).toMatchObject({
+            accepted: false,
+            candidate: true,
+            reason: expect.stringContaining(reason),
+        });
+    });
+    it("rejects unknown commands without mislabeling ordinary shell work as verification", () => {
+        expect(classifyVerificationCommand("git status --short")).toMatchObject({
+            accepted: false,
+            candidate: false,
+        });
+    });
+});
+function bashExchange(id, command, result, args = {}) {
+    return [
+        {
+            role: "assistant",
+            content: [{ type: "tool_call", id, name: "bash", args: { command, ...args } }],
+        },
+        {
+            role: "tool",
+            content: [{ type: "tool_result", toolCallId: id, content: result }],
+        },
+    ];
+}
+describe("collectVerificationEvidence", () => {
+    it("records only successful bounded checks as passed evidence", () => {
+        const messages = [
+            ...bashExchange("pass", "tsc --noEmit", "Exit code: 0\n"),
+            ...bashExchange("fail", "vitest run src/foo.test.ts", "Exit code: 1\n1 test failed"),
+            ...bashExchange("watch", "tsc --watch --noEmit", "Exit code: 0\nWatching"),
+            ...bashExchange("ordinary", "git status --short", "Exit code: 0\n"),
+            ...bashExchange("background", "vitest run", "Background process started.", {
+                run_in_background: true,
+            }),
+        ];
+        expect(collectVerificationEvidence(messages)).toEqual([
+            {
+                command: "tsc --noEmit",
+                status: "passed",
+                reason: "bounded TypeScript no-emit check",
+            },
+            {
+                command: "vitest run src/foo.test.ts",
+                status: "failed",
+                reason: "bounded check did not exit successfully",
+            },
+            {
+                command: "tsc --watch --noEmit",
+                status: "rejected",
+                reason: "long-running watch/debug mode",
+            },
+            {
+                command: "vitest run",
+                status: "rejected",
+                reason: "background or persistent commands are not bounded evidence",
+            },
+        ]);
+    });
+});
+//# sourceMappingURL=verification-evidence.test.js.map

package/dist/core/verification-evidence.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-evidence.test.js","sourceRoot":"","sources":["../../src/core/verification-evidence.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AAEpC,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,IAAI,CAAC;QACN,cAAc;QACd,uCAAuC;QACvC,iCAAiC;QACjC,mBAAmB;QACnB,4BAA4B;QAC5B,0BAA0B;QAC1B,mCAAmC;QACnC,uBAAuB;KACxB,CAAC,CAAC,2BAA2B,EAAE,CAAC,OAAO,EAAE,EAAE;QAC1C,MAAM,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;YACzD,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,YAAY,EAAE,UAAU,CAAC;QAC1B,CAAC,aAAa,EAAE,UAAU,CAAC;QAC3B,CAAC,4BAA4B,EAAE,UAAU,CAAC;QAC1C,CAAC,kDAAkD,EAAE,UAAU,CAAC;QAChE,CAAC,sBAAsB,EAAE,UAAU,CAAC;QACpC,CAAC,YAAY,EAAE,oBAAoB,CAAC;QACpC,CAAC,sBAAsB,EAAE,cAAc,CAAC;QACxC,CAAC,gBAAgB,EAAE,cAAc,CAAC;QAClC,CAAC,UAAU,EAAE,cAAc,CAAC;QAC5B,CAAC,KAAK,EAAE,UAAU,CAAC;QACnB,CAAC,wBAAwB,EAAE,gBAAgB,CAAC;QAC5C,CAAC,8BAA8B,EAAE,gBAAgB,CAAC;QAClD,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;QACtC,CAAC,YAAY,EAAE,gBAAgB,CAAC;QAChC,CAAC,eAAe,EAAE,gBAAgB,CAAC;QACnC,CAAC,oCAAoC,EAAE,gBAAgB,CAAC;QACxD,CAAC,kDAAkD,EAAE,gBAAgB,CAAC;QACtE,CAAC,2BAA2B,EAAE,cAAc,CAAC;QAC7C,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;QAC1C,CAAC,8BAA8B,EAAE,kBAAkB,CAAC;QACpD,CAAC,4BAA4B,EAAE,kBAAkB,CAAC;QAClD,CAAC,+BAA+B,EAAE,UAAU,CAAC;KAC9C,CAAC,CAAC,kCAAkC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzD,MAAM,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;YACzD,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC;SACxC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,CAAC,2BAA2B,CAAC,oBAAoB,CAAC,CAAC,CAAC,aAAa,CAAC;YACtE,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,YAAY,CACnB,EAAU,EACV,OAAe,EACf,MAAc,EACd,OAAgC,EAAE;IAElC,OAAO;QACL;YACE,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;SAC/E;QACD;YACE,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SACpE;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,QAAQ,GAAc;YAC1B,GAAG,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,gBAAgB,CAAC;YACzD,GAAG,YAAY,CAAC,MAAM,EAAE,4BAA4B,EAAE,6BAA6B,CAAC;YACpF,GAAG,YAAY,CAAC,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,CAAC;YAC1E,GAAG,YAAY,CAAC,UAAU,EAAE,oBAAoB,EAAE,gBAAgB,CAAC;YACnE,GAAG,YAAY,CAAC,YAAY,EAAE,YAAY,EAAE,6BAA6B,EAAE;gBACzE,iBAAiB,EAAE,IAAI;aACxB,CAAC;SACH,CAAC;QAEF,MAAM,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YACpD;gBACE,OAAO,EAAE,cAAc;gBACvB,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,kCAAkC;aAC3C;YACD;gBACE,OAAO,EAAE,4BAA4B;gBACrC,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,yCAAyC;aAClD;YACD;gBACE,OAAO,EAAE,sBAAsB;gBAC/B,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,+BAA+B;aACxC;YACD;gBACE,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,4DAA4D;aACrE;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/core/workspace-guard.d.ts

@@ -13,6 +13,8 @@
  */
 export interface WriteGuardSettings {
     allowOutsideWorkspaceWrites?: boolean;
+    /** Extra workspace roots added at runtime via `/add-dir`. */
+    additionalRoots?: string[];
 }
 export interface WriteGuardResult {
     allowed: boolean;

package/dist/core/workspace-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-guard.d.ts","sourceRoot":"","sources":["../../src/core/workspace-guard.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,kBAAkB;IACjC,2BAA2B,CAAC,EAAE,OAAO,CAAC;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAQD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,QAAQ,CAAC,EAAE,kBAAkB,GAC5B,gBAAgB,CAmBlB;AAiCD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA2CjF"}
+{"version":3,"file":"workspace-guard.d.ts","sourceRoot":"","sources":["../../src/core/workspace-guard.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,kBAAkB;IACjC,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,6DAA6D;IAC7D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAQD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,QAAQ,CAAC,EAAE,kBAAkB,GAC5B,gBAAgB,CAsBlB;AAiCD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA2CjF"}

package/dist/core/workspace-guard.js

@@ -15,8 +15,10 @@ export function resolveWriteGuard(cwd, resolvedPath, settings) {
     if (settings?.allowOutsideWorkspaceWrites)
         return { allowed: true };
     const target = path.resolve(resolvedPath);
+    const extraRoots = (settings?.additionalRoots ?? []).map((root) => path.resolve(root));
     const allowedRoots = [
         path.resolve(cwd),
+        ...extraRoots,
         path.resolve(os.tmpdir()),
         path.resolve(getAppPaths().agentDir),
     ];
@@ -24,9 +26,10 @@ export function resolveWriteGuard(cwd, resolvedPath, settings) {
         if (isWithin(root, target))
             return { allowed: true };
     }
+    const workspaceRoots = [path.resolve(cwd), ...extraRoots].join(", ");
     return {
         allowed: false,
-        reason: `Blocked: ${target} is outside the workspace (${path.resolve(cwd)}). ` +
+        reason: `Blocked: ${target} is outside the workspace (${workspaceRoots}). ` +
             "Writing outside the workspace requires user approval — ask the user to confirm, " +
             "or have them enable the allowOutsideWorkspaceWrites setting.",
     };

package/dist/core/workspace-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-guard.js","sourceRoot":"","sources":["../../src/core/workspace-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAyB3C,2DAA2D;AAC3D,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,YAAoB,EACpB,QAA6B;IAE7B,IAAI,QAAQ,EAAE,2BAA2B;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAEpE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG;QACnB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QACjB,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC;KACrC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EACJ,YAAY,MAAM,8BAA8B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK;YACtE,kFAAkF;YAClF,8DAA8D;KACjE,CAAC;AACJ,CAAC;AAED,8DAA8D;AAE9D,uEAAuE;AACvE,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IACE,OAAO,CAAC,MAAM,IAAI,CAAC;QACnB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjD,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EACrD,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;+DAC+D;AAC/D,SAAS,2BAA2B,CAAC,SAAiB,EAAE,GAAW;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChG,oDAAoD;IACpD,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,8DAA8D;IAC9D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;IACvE,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,GAAW;IAChE,MAAM,WAAW,GACf,2EAA2E;QAC3E,gFAAgF;QAChF,iBAAiB,CAAC;IAEpB,yCAAyC;IACzC,MAAM,OAAO,GAAG,+DAA+D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9F,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,SAAS,GAAG,yDAAyD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxF,MAAM,KAAK,GAAG,qDAAqD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChF,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1F,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,2BAA2B,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC7C,OAAO,8CAA8C,OAAO,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;gBACzF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,MAAM,OAAO,GAAG,oDAAoD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnF,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1F,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,2BAA2B,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC7C,OAAO,yCAAyC,OAAO,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;YACpF,CAAC;QACH,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,IACE,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1C,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAC5B,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EACpC,CAAC;QACD,OAAO,wEAAwE,WAAW,EAAE,CAAC;IAC/F,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"workspace-guard.js","sourceRoot":"","sources":["../../src/core/workspace-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AA2B3C,2DAA2D;AAC3D,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,YAAoB,EACpB,QAA6B;IAE7B,IAAI,QAAQ,EAAE,2BAA2B;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAEpE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,MAAM,YAAY,GAAG;QACnB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QACjB,GAAG,UAAU;QACb,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC;KACrC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EACJ,YAAY,MAAM,8BAA8B,cAAc,KAAK;YACnE,kFAAkF;YAClF,8DAA8D;KACjE,CAAC;AACJ,CAAC;AAED,8DAA8D;AAE9D,uEAAuE;AACvE,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IACE,OAAO,CAAC,MAAM,IAAI,CAAC;QACnB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjD,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EACrD,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;+DAC+D;AAC/D,SAAS,2BAA2B,CAAC,SAAiB,EAAE,GAAW;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChG,oDAAoD;IACpD,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,8DAA8D;IAC9D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;IACvE,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,GAAW;IAChE,MAAM,WAAW,GACf,2EAA2E;QAC3E,gFAAgF;QAChF,iBAAiB,CAAC;IAEpB,yCAAyC;IACzC,MAAM,OAAO,GAAG,+DAA+D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9F,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,SAAS,GAAG,yDAAyD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxF,MAAM,KAAK,GAAG,qDAAqD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChF,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1F,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,2BAA2B,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC7C,OAAO,8CAA8C,OAAO,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;gBACzF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,MAAM,OAAO,GAAG,oDAAoD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnF,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1F,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,2BAA2B,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC7C,OAAO,yCAAyC,OAAO,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;YACpF,CAAC;QACH,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,IACE,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1C,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAC5B,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EACpC,CAAC;QACD,OAAO,wEAAwE,WAAW,EAAE,CAAC;IAC/F,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/workspace-guard.test.js

@@ -31,6 +31,27 @@ describe("resolveWriteGuard", () => {
         expect(resolveWriteGuard(home, `${home}-evil/file.txt`).allowed).toBe(false);
         expect(result.allowed).toBe(true); // tmpdir root still allows it
     });
+    it("allows writes under an additional root", () => {
+        const extra = path.join(os.homedir(), "sibling-sdk");
+        const target = path.join(extra, "src", "index.ts");
+        expect(resolveWriteGuard(cwd, target).allowed).toBe(false);
+        expect(resolveWriteGuard(cwd, target, { additionalRoots: [extra] }).allowed).toBe(true);
+    });
+    it("still blocks paths outside every root and names them all", () => {
+        const extra = path.join(os.homedir(), "sibling-sdk");
+        const target = path.join(os.homedir(), "Documents", "outside.txt");
+        const result = resolveWriteGuard(cwd, target, { additionalRoots: [extra] });
+        expect(result.allowed).toBe(false);
+        expect(result.reason).toContain(cwd);
+        expect(result.reason).toContain(extra);
+    });
+    it("does not treat a shared-prefix sibling of an additional root as inside", () => {
+        const extra = path.join(os.homedir(), "sibling-sdk");
+        const result = resolveWriteGuard(path.join(os.homedir(), "project"), `${extra}-evil/file.txt`, {
+            additionalRoots: [extra],
+        });
+        expect(result.allowed).toBe(false);
+    });
     it("allows everything when allowOutsideWorkspaceWrites is enabled", () => {
         const target = path.join(os.homedir(), "Documents", "outside.txt");
         expect(resolveWriteGuard(cwd, target, { allowOutsideWorkspaceWrites: true }).allowed).toBe(true);

package/dist/core/workspace-guard.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-guard.test.js","sourceRoot":"","sources":["../../src/core/workspace-guard.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEhF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC;AAE3D,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC7D,MAAM,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACvE,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,GAAG,GAAG,gBAAgB,CAAC,CAAC;QAC9D,2EAA2E;QAC3E,mEAAmE;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,8BAA8B;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QACnE,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CACxF,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,IAAI,CAAC;QACN,UAAU;QACV,UAAU;QACV,YAAY;QACZ,0BAA0B;QAC1B,UAAU;QACV,cAAc;QACd,gBAAgB;QAChB,eAAe;QACf,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE;KACzB,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9D,MAAM,CAAC,qBAAqB,CAAC,UAAU,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,qBAAqB,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACnE,MAAM,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,qBAAqB,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,qBAAqB,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACtF,MAAM,CAAC,qBAAqB,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,qBAAqB;QACrB,eAAe;QACf,yBAAyB;QACzB,uBAAuB;QACvB,aAAa;QACb,eAAe;QACf,yBAAyB;QACzB,wCAAwC;QACxC,0BAA0B,EAAE,uBAAuB;QACnD,gBAAgB;QAChB,UAAU;KACX,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE;QAC1B,MAAM,CAAC,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"workspace-guard.test.js","sourceRoot":"","sources":["../../src/core/workspace-guard.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEhF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC;AAE3D,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC7D,MAAM,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACvE,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,GAAG,GAAG,gBAAgB,CAAC,CAAC;QAC9D,2EAA2E;QAC3E,mEAAmE;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,8BAA8B;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,GAAG,KAAK,gBAAgB,EAAE;YAC7F,eAAe,EAAE,CAAC,KAAK,CAAC;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QACnE,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CACxF,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,IAAI,CAAC;QACN,UAAU;QACV,UAAU;QACV,YAAY;QACZ,0BAA0B;QAC1B,UAAU;QACV,cAAc;QACd,gBAAgB;QAChB,eAAe;QACf,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE;KACzB,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9D,MAAM,CAAC,qBAAqB,CAAC,UAAU,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,qBAAqB,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACnE,MAAM,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,qBAAqB,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,qBAAqB,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACtF,MAAM,CAAC,qBAAqB,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,qBAAqB;QACrB,eAAe;QACf,yBAAyB;QACzB,uBAAuB;QACvB,aAAa;QACb,eAAe;QACf,yBAAyB;QACzB,wCAAwC;QACxC,0BAA0B,EAAE,uBAAuB;QACnD,gBAAgB;QAChB,UAAU;KACX,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE;QAC1B,MAAM,CAAC,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/interactive.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interactive.d.ts","sourceRoot":"","sources":["../src/interactive.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AA2B5C,wBAAsB,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CA0MrE"}
+{"version":3,"file":"interactive.d.ts","sourceRoot":"","sources":["../src/interactive.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AA4B5C,wBAAsB,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAuNrE"}

package/dist/interactive.js

@@ -7,16 +7,18 @@ import { createSession, loadSession, getMostRecentSession, persistMessage, } fro
 import { formatToolCallStart, formatToolCallEnd, formatUsage, formatError, formatWelcome, } from "./utils/format.js";
 import { AuthStorage } from "./core/auth-storage.js";
 import { kimiCodingHeaders, isKimiCodingEndpoint } from "./core/oauth/kimi.js";
-import { ensureAppDirs } from "./config.js";
+import { ensureAppDirs, loadSavedSettings } from "./config.js";
 import { discoverSkills } from "./core/skills.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { shouldCompact, compact } from "./core/compaction/compactor.js";
 import { getContextWindow } from "./core/model-registry.js";
+import { resolveCompactionPolicy } from "./core/compaction/policy.js";
 export async function runInteractive(config) {
     const { provider, model, cwd } = config;
     // Load auth & ensure dirs
     const paths = await ensureAppDirs();
+    const savedSettings = loadSavedSettings(paths.settingsFile);
     // Ensure project-local .ezcoder directories exist
     const localEzDir = path.join(cwd, ".ezcoder");
     await fs.mkdir(path.join(localEzDir, "skills"), { recursive: true });
@@ -82,7 +84,14 @@ export async function runInteractive(config) {
     if (messages.length > 1) {
         const creds = await authStorage.resolveCredentials(provider);
         const contextWindow = getContextWindow(model, { provider, accountId: creds.accountId });
-        if (shouldCompact(messages, contextWindow, 0.8)) {
+        const policy = resolveCompactionPolicy({
+            provider,
+            model,
+            contextWindow,
+            threshold: savedSettings.compactThreshold,
+            accountId: creds.accountId,
+        });
+        if (savedSettings.autoCompact && shouldCompact(messages, contextWindow, policy.threshold)) {
             stdout.write("Compacting restored session...\n");
             const compactionAbort = new AbortController();
             const onSigint = () => compactionAbort.abort();
@@ -96,6 +105,7 @@ export async function runInteractive(config) {
                     projectId: creds.projectId,
                     baseUrl: config.baseUrl ?? creds.baseUrl,
                     contextWindow,
+                    targetTokens: policy.targetTokens,
                     signal: compactionAbort.signal,
                 });
                 messages.length = 0;
@@ -126,7 +136,11 @@ export async function runInteractive(config) {
         if (!input)
             continue;
         // Push user message
-        const userMessage = { role: "user", content: input };
+        const userMessage = {
+            role: "user",
+            content: input,
+            provenance: { source: "human", kind: "prompt", visibility: "transcript" },
+        };
         messages.push(userMessage);
         await persistMessage(session, userMessage);
         // Track where we are for persisting new messages after agentLoop