@prestyj/editor 0.7.1

package/dist/core/review.js

@@ -0,0 +1,124 @@
+import { Agent } from "@prestyj/agent";
+import { createGetMarkersTool, createGetTimelineTool, createHostInfoTool, createProbeMediaTool, createReadSkillTool, createReadTranscriptTool, createScoreShotTool, } from "../tools/index.js";
+import { discoverSkills } from "./skills-loader.js";
+import { SKILLS } from "../skills.js";
+const REVIEW_SYSTEM = `You are the EZ Editor REVIEWER — a read-only critic of an edit-in-progress.
+
+Your job: read the timeline + relevant transcripts/media, measure them against the stated INTENT, and write a tight critique.
+
+You have READ-ONLY tools (host_info, get_timeline, get_markers, read_transcript, score_shot, probe_media, read_skill). You CANNOT mutate the timeline or write files. Don't try.
+
+Process:
+1. Call host_info, get_timeline, get_markers to read state.
+2. If there's a transcript, read targeted windows (NEVER full dumps).
+3. Optionally score a few shots.
+4. Form an opinion. Be concrete: timestamps, clip ids, specific issues.
+
+OUTPUT FORMAT — your final assistant message must end with this EXACT structure:
+
+<one paragraph of critique, ≤200 words, plain prose>
+
+\`\`\`json
+{"flags":[{"severity":"ok|warn|block","note":"..."}, ...]}
+\`\`\`
+
+severity:
+- ok: nothing wrong; affirmation of a good editorial choice
+- warn: needs attention but not blocking (filler still present, caption typo)
+- block: ship-stopper (wrong take kept, missing captions on long-form, hook missing)
+
+Be direct. Don't praise the work just to be nice. If it's good, say "ok". If it's not, say what's wrong.`;
+/**
+ * Build only the 6 read-only tools needed by the reviewer, without instantiating
+ * the full ~100-tool set. Exported so callers can compose a reviewer independently.
+ */
+export function createReadOnlyEditorTools(host, cwd, skills) {
+    const resolvedSkills = skills ?? discoverSkills({ cwd, bundled: Object.values(SKILLS) });
+    return [
+        createHostInfoTool(host),
+        createGetTimelineTool(host),
+        createGetMarkersTool(host),
+        createReadTranscriptTool(cwd),
+        createScoreShotTool(cwd),
+        createProbeMediaTool(cwd),
+        createReadSkillTool(resolvedSkills),
+    ];
+}
+export async function runReview(opts) {
+    const { intent, focus, host, cwd, config, signal } = opts;
+    const tools = createReadOnlyEditorTools(host, cwd);
+    const userPrompt = [
+        `INTENT: ${intent}`,
+        focus && focus.length > 0 ? `FOCUS: ${focus.join(", ")}` : null,
+        "",
+        "Inspect the current edit and produce a one-paragraph critique followed by the flags JSON block as instructed.",
+    ]
+        .filter(Boolean)
+        .join("\n");
+    const agent = new Agent({
+        provider: config.provider,
+        model: config.model,
+        system: REVIEW_SYSTEM,
+        tools,
+        apiKey: config.apiKey,
+        maxTurns: config.maxTurns ?? 10,
+        signal,
+    });
+    let bufText = "";
+    let lastAssistantText = "";
+    let turns = 0;
+    const usage = { inputTokens: 0, outputTokens: 0 };
+    for await (const ev of agent.prompt(userPrompt)) {
+        switch (ev.type) {
+            case "text_delta":
+                bufText += ev.text;
+                break;
+            case "turn_end":
+                turns += 1;
+                if (bufText.trim().length > 0)
+                    lastAssistantText = bufText;
+                bufText = "";
+                usage.inputTokens = (usage.inputTokens ?? 0) + (ev.usage.inputTokens ?? 0);
+                usage.outputTokens = (usage.outputTokens ?? 0) + (ev.usage.outputTokens ?? 0);
+                break;
+            case "agent_done":
+                if (bufText.trim().length > 0)
+                    lastAssistantText = bufText;
+                break;
+        }
+    }
+    const parsed = parseReviewMessage(lastAssistantText);
+    return { ...parsed, turns, usage };
+}
+/**
+ * Parse the trailing ```json {...} ``` block out of the final assistant message.
+ * The text BEFORE the JSON block becomes the critique. On parse failure, the
+ * whole message is returned as critique with empty flags.
+ */
+export function parseReviewMessage(text) {
+    const trimmed = text.trim();
+    // Match trailing ```json ... ``` block (allow trailing whitespace after fence).
+    const fenceRe = /```json\s*([\s\S]*?)\s*```\s*$/;
+    const m = fenceRe.exec(trimmed);
+    if (!m) {
+        return { critique: trimmed, flags: [] };
+    }
+    try {
+        const parsed = JSON.parse(m[1]);
+        const flags = Array.isArray(parsed.flags)
+            ? parsed.flags
+                .filter((f) => typeof f === "object" &&
+                f !== null &&
+                typeof f.severity === "string" &&
+                typeof f.note === "string")
+                .filter((f) => f.severity === "ok" || f.severity === "warn" || f.severity === "block")
+                .map((f) => ({ severity: f.severity, note: f.note }))
+            : [];
+        const critique = trimmed.slice(0, m.index).trim();
+        return { critique, flags };
+    }
+    catch {
+        return { critique: trimmed, flags: [] };
+    }
+}
+//# sourceMappingURL=review.js.map

package/dist/core/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../../src/core/review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAkB,MAAM,gBAAgB,CAAC;AAGvD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAoB,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAyCtC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;yGAyBmF,CAAC;AAE1G;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAAe,EACf,GAAW,EACX,MAAsB;IAEtB,MAAM,cAAc,GAAG,MAAM,IAAI,cAAc,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzF,OAAO;QACL,kBAAkB,CAAC,IAAI,CAAC;QACxB,qBAAqB,CAAC,IAAI,CAAC;QAC3B,oBAAoB,CAAC,IAAI,CAAC;QAC1B,wBAAwB,CAAC,GAAG,CAAC;QAC7B,mBAAmB,CAAC,GAAG,CAAC;QACxB,oBAAoB,CAAC,GAAG,CAAC;QACzB,mBAAmB,CAAC,cAAc,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAmB;IACjD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAE1D,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEnD,MAAM,UAAU,GAAG;QACjB,WAAW,MAAM,EAAE;QACnB,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;QAC/D,EAAE;QACF,+GAA+G;KAChH;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,aAAa;QACrB,KAAK;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;QAC/B,MAAM;KACP,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,iBAAiB,GAAG,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAU,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAEzD,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,YAAY;gBACf,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC;gBACnB,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,IAAI,CAAC,CAAC;gBACX,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;oBAAE,iBAAiB,GAAG,OAAO,CAAC;gBAC3D,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;gBAC3E,KAAK,CAAC,YAAY,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;gBAC9E,MAAM;YACR,KAAK,YAAY;gBACf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;oBAAE,iBAAiB,GAAG,OAAO,CAAC;gBAC3D,MAAM;QACV,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;IACrD,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,gFAAgF;IAChF,MAAM,OAAO,GAAG,gCAAgC,CAAC;IACjD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAwB,CAAC;QACvD,MAAM,KAAK,GAAiB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;YACrD,CAAC,CAAC,MAAM,CAAC,KAAK;iBACT,MAAM,CACL,CAAC,CAAC,EAA2C,EAAE,CAC7C,OAAO,CAAC,KAAK,QAAQ;gBACrB,CAAC,KAAK,IAAI;gBACV,OAAQ,CAA4B,CAAC,QAAQ,KAAK,QAAQ;gBAC1D,OAAQ,CAAwB,CAAC,IAAI,KAAK,QAAQ,CACrD;iBACA,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;iBACrF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAkC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACnF,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;AACH,CAAC"}

package/dist/core/review.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=review.test.d.ts.map

package/dist/core/review.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.test.d.ts","sourceRoot":"","sources":["../../src/core/review.test.ts"],"names":[],"mappings":""}

package/dist/core/review.test.js

@@ -0,0 +1,76 @@
+import { describe, expect, it } from "vitest";
+import { parseReviewMessage } from "./review.js";
+describe("parseReviewMessage", () => {
+    it("extracts critique and flags from a well-formed message", () => {
+        const text = `The edit keeps too many filler words around 02:13–02:30 and the hook lacks energy.
+
+\`\`\`json
+{"flags":[{"severity":"warn","note":"filler at 02:13"},{"severity":"block","note":"missing captions"}]}
+\`\`\``;
+        const r = parseReviewMessage(text);
+        expect(r.critique).toContain("filler words");
+        expect(r.critique).not.toContain("```");
+        expect(r.flags).toHaveLength(2);
+        expect(r.flags[0]).toEqual({ severity: "warn", note: "filler at 02:13" });
+        expect(r.flags[1]).toEqual({ severity: "block", note: "missing captions" });
+    });
+    it("returns whole message as critique with empty flags on no JSON block", () => {
+        const text = "Looks fine to me.";
+        const r = parseReviewMessage(text);
+        expect(r.critique).toBe("Looks fine to me.");
+        expect(r.flags).toEqual([]);
+    });
+    it("falls back gracefully on malformed JSON", () => {
+        const text = "Bad block follows.\n\n```json\n{not valid\n```";
+        const r = parseReviewMessage(text);
+        expect(r.critique).toContain("Bad block follows");
+        expect(r.flags).toEqual([]);
+    });
+    it("drops flags with unknown severity", () => {
+        const text = `Ok.
+
+\`\`\`json
+{"flags":[{"severity":"warn","note":"a"},{"severity":"nope","note":"b"}]}
+\`\`\``;
+        const r = parseReviewMessage(text);
+        expect(r.flags).toEqual([{ severity: "warn", note: "a" }]);
+    });
+    it("tolerates trailing whitespace after the JSON fence", () => {
+        // LLMs sometimes append a blank line after the closing fence.
+        const text = [
+            "Looks tight.",
+            "",
+            "```json",
+            '{"flags":[{"severity":"ok","note":"good pacing"}]}',
+            "```",
+            "  ",
+            "",
+        ].join("\n");
+        const r = parseReviewMessage(text);
+        expect(r.flags).toEqual([{ severity: "ok", note: "good pacing" }]);
+    });
+    it("drops flags missing required fields", () => {
+        const text = [
+            "x",
+            "",
+            "```json",
+            '{"flags":[{"severity":"warn"},{"note":"orphan note"},{"severity":"warn","note":"keep"}]}',
+            "```",
+        ].join("\n");
+        const r = parseReviewMessage(text);
+        expect(r.flags).toEqual([{ severity: "warn", note: "keep" }]);
+    });
+    it("handles empty flags array", () => {
+        const text = ["All clear.", "", "```json", '{"flags":[]}', "```"].join("\n");
+        const r = parseReviewMessage(text);
+        expect(r.flags).toEqual([]);
+        expect(r.critique).toBe("All clear.");
+    });
+    it("handles missing flags key entirely", () => {
+        // Some models emit { } without the flags key.
+        const text = `summary\n\n\`\`\`json\n{}\n\`\`\``;
+        const r = parseReviewMessage(text);
+        expect(r.flags).toEqual([]);
+    });
+});
+//# sourceMappingURL=review.test.js.map

package/dist/core/review.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.test.js","sourceRoot":"","sources":["../../src/core/review.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,IAAI,GAAG;;;;OAIV,CAAC;QACJ,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,IAAI,GAAG,mBAAmB,CAAC;QACjC,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,GAAG,gDAAgD,CAAC;QAC9D,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,IAAI,GAAG;;;;OAIV,CAAC;QACJ,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,8DAA8D;QAC9D,MAAM,IAAI,GAAG;YACX,cAAc;YACd,EAAE;YACF,SAAS;YACT,oDAAoD;YACpD,KAAK;YACL,IAAI;YACJ,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,IAAI,GAAG;YACX,GAAG;YACH,EAAE;YACF,SAAS;YACT,0FAA0F;YAC1F,KAAK;SACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,IAAI,GAAG,CAAC,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,8CAA8C;QAC9C,MAAM,IAAI,GAAG,mCAAmC,CAAC;QACjD,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/core/safe-paths.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Path-safety helpers for file-writing tools.
+ *
+ * Two distinct guards live here:
+ *
+ *   1. `safeOutputPath()` — path-traversal guard. Resolves `requested` against
+ *      `cwd`, then refuses absolute paths that escape the configured allow-list
+ *      of roots (cwd, system tempdir, the per-user output dir under ~/Documents).
+ *      Tools writing on behalf of the agent must call this before opening any
+ *      file handle — it stops the agent from writing to `../../etc/passwd` even
+ *      when the user has not validated the value.
+ *
+ *   2. `safeResolveOutputPath()` — sandbox redirect for paths that NLE hosts
+ *      (Resolve, Premiere) need to read back. macOS-sandboxed Node writes under
+ *      `/var/folders/...` are invisible to the host process, so we transparently
+ *      redirect to `~/Documents/ezeditor-out/`. The redirect is reported back
+ *      through tool output so the agent can surface it.
+ */
+/** Default user-visible output directory for sandbox-redirected files. */
+export declare const USER_OUTPUT_DIR_NAME = "ezeditor-out";
+/** Build the full path of the per-user output directory. */
+export declare function userOutputDir(): string;
+export interface SafeOutputOptions {
+    /** Additional absolute paths that are valid output roots. */
+    allowRoots?: string[];
+}
+/**
+ * Resolve `requested` against `cwd` and verify it lies under an allowed root.
+ * Throws an Error whose message follows the `error:` format consumed by tools.
+ */
+export declare function safeOutputPath(cwd: string, requested: string, opts?: SafeOutputOptions): string;
+export interface SafeResolveResult {
+    /** Final absolute path after redirect (if any). */
+    path: string;
+    /** True when the original request landed in a sandbox-only location. */
+    redirected: boolean;
+    /** Human-readable reason for the redirect, when applicable. */
+    reason?: string;
+}
+/**
+ * Like `safeOutputPath`, but additionally redirects sandbox-only paths to the
+ * user-visible output dir so that NLE host processes (which run outside Node's
+ * sandbox) can read the result back. Use for stills / thumbnails / GIFs that
+ * the host might import.
+ *
+ * Order matters here: we check the sandbox-redirect FIRST. Sandbox roots
+ * (`/tmp`, `/var/folders/…`, `/private/var/…`) are trusted OS-managed temp
+ * locations — we always want to remap them into the user-visible output dir,
+ * even when they don't happen to match the runner's `tmpdir()` allow-root
+ * (e.g. `/tmp/foo.jpg` when `tmpdir()` is `/var/folders/…`). After redirect,
+ * the resulting path is under `userOutputDir()` and is implicitly safe.
+ *
+ * Non-sandbox paths fall through to the regular `safeOutputPath()` traversal
+ * check, so escapes like `../../etc/passwd` or absolute `/etc/hosts` are still
+ * rejected exactly as before.
+ */
+export declare function safeResolveOutputPath(cwd: string, requested: string, opts?: SafeOutputOptions): SafeResolveResult;
+//# sourceMappingURL=safe-paths.d.ts.map

package/dist/core/safe-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-paths.d.ts","sourceRoot":"","sources":["../../src/core/safe-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,0EAA0E;AAC1E,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AAEnD,4DAA4D;AAC5D,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAuBD,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAY/F;AA2BD,MAAM,WAAW,iBAAiB;IAChC,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,UAAU,EAAE,OAAO,CAAC;IACpB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,iBAAiB,GACvB,iBAAiB,CAgBnB"}

package/dist/core/safe-paths.js

@@ -0,0 +1,118 @@
+/**
+ * Path-safety helpers for file-writing tools.
+ *
+ * Two distinct guards live here:
+ *
+ *   1. `safeOutputPath()` — path-traversal guard. Resolves `requested` against
+ *      `cwd`, then refuses absolute paths that escape the configured allow-list
+ *      of roots (cwd, system tempdir, the per-user output dir under ~/Documents).
+ *      Tools writing on behalf of the agent must call this before opening any
+ *      file handle — it stops the agent from writing to `../../etc/passwd` even
+ *      when the user has not validated the value.
+ *
+ *   2. `safeResolveOutputPath()` — sandbox redirect for paths that NLE hosts
+ *      (Resolve, Premiere) need to read back. macOS-sandboxed Node writes under
+ *      `/var/folders/...` are invisible to the host process, so we transparently
+ *      redirect to `~/Documents/ezeditor-out/`. The redirect is reported back
+ *      through tool output so the agent can surface it.
+ */
+import { homedir, tmpdir } from "node:os";
+import { basename, resolve as resolvePath } from "node:path";
+/** Default user-visible output directory for sandbox-redirected files. */
+export const USER_OUTPUT_DIR_NAME = "ezeditor-out";
+/** Build the full path of the per-user output directory. */
+export function userOutputDir() {
+    return resolvePath(homedir(), "Documents", USER_OUTPUT_DIR_NAME);
+}
+function realTmpdir() {
+    // On macOS, tmpdir() returns /var/folders/... which itself is one of the
+    // sandbox roots we redirect FROM. We still allow it as an output root for
+    // ffmpeg-only tools that don't feed Resolve back; the redirect helper is
+    // the one that pushes Resolve-facing writes elsewhere.
+    return resolvePath(tmpdir());
+}
+function defaultAllowRoots(cwd) {
+    return [resolvePath(cwd), realTmpdir(), userOutputDir()];
+}
+function isUnderRoot(absPath, root) {
+    const a = absPath;
+    const r = root.endsWith("/") || root.endsWith("\\") ? root.slice(0, -1) : root;
+    if (a === r)
+        return true;
+    // Use platform-aware separator: on Windows the resolve() output uses '\\'.
+    const sep = a.includes("\\") && !a.includes("/") ? "\\" : "/";
+    return a.startsWith(r + sep);
+}
+/**
+ * Resolve `requested` against `cwd` and verify it lies under an allowed root.
+ * Throws an Error whose message follows the `error:` format consumed by tools.
+ */
+export function safeOutputPath(cwd, requested, opts) {
+    if (!requested || typeof requested !== "string") {
+        throw new Error("output path is empty");
+    }
+    const abs = resolvePath(cwd, requested);
+    const roots = [...defaultAllowRoots(cwd), ...(opts?.allowRoots ?? []).map((r) => resolvePath(r))];
+    for (const root of roots) {
+        if (isUnderRoot(abs, root))
+            return abs;
+    }
+    throw new Error(`output path '${requested}' resolves outside allowed roots (cwd, tempdir, ~/Documents/${USER_OUTPUT_DIR_NAME})`);
+}
+/** Sandbox roots whose writes are invisible to host (Resolve/Premiere) processes. */
+function sandboxRoots() {
+    const roots = ["/var/folders/", "/private/var/folders/", "/private/tmp/", "/tmp/", "/var/tmp/"];
+    // On Windows, %LOCALAPPDATA%\Temp comes back via tmpdir(); treat the system
+    // tempdir as a sandbox if it's not directly under the user profile.
+    const t = realTmpdir();
+    const home = resolvePath(homedir());
+    if (!isUnderRoot(t, home))
+        roots.push(t);
+    return roots;
+}
+function isSandboxPath(absPath) {
+    for (const root of sandboxRoots()) {
+        if (absPath === root ||
+            absPath.startsWith(root) ||
+            // Tolerate trailing-slash absent variants on POSIX:
+            (root.endsWith("/") && absPath.startsWith(root.slice(0, -1) + "/"))) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Like `safeOutputPath`, but additionally redirects sandbox-only paths to the
+ * user-visible output dir so that NLE host processes (which run outside Node's
+ * sandbox) can read the result back. Use for stills / thumbnails / GIFs that
+ * the host might import.
+ *
+ * Order matters here: we check the sandbox-redirect FIRST. Sandbox roots
+ * (`/tmp`, `/var/folders/…`, `/private/var/…`) are trusted OS-managed temp
+ * locations — we always want to remap them into the user-visible output dir,
+ * even when they don't happen to match the runner's `tmpdir()` allow-root
+ * (e.g. `/tmp/foo.jpg` when `tmpdir()` is `/var/folders/…`). After redirect,
+ * the resulting path is under `userOutputDir()` and is implicitly safe.
+ *
+ * Non-sandbox paths fall through to the regular `safeOutputPath()` traversal
+ * check, so escapes like `../../etc/passwd` or absolute `/etc/hosts` are still
+ * rejected exactly as before.
+ */
+export function safeResolveOutputPath(cwd, requested, opts) {
+    if (!requested || typeof requested !== "string") {
+        throw new Error("output path is empty");
+    }
+    const abs = resolvePath(cwd, requested);
+    if (isSandboxPath(abs)) {
+        const out = resolvePath(userOutputDir(), basename(abs));
+        return {
+            path: out,
+            redirected: true,
+            reason: `original path '${abs}' is in a sandboxed temp directory and would be invisible to the host process`,
+        };
+    }
+    // Non-sandbox path: enforce the traversal allow-list.
+    const safe = safeOutputPath(cwd, requested, opts);
+    return { path: safe, redirected: false };
+}
+//# sourceMappingURL=safe-paths.js.map

package/dist/core/safe-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-paths.js","sourceRoot":"","sources":["../../src/core/safe-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAEnD,4DAA4D;AAC5D,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,UAAU;IACjB,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,uDAAuD;IACvD,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,IAAY;IAChD,MAAM,CAAC,GAAG,OAAO,CAAC;IAClB,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,2EAA2E;IAC3E,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9D,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;AAC/B,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,SAAiB,EAAE,IAAwB;IACrF,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC;IACzC,CAAC;IACD,MAAM,IAAI,KAAK,CACb,gBAAgB,SAAS,+DAA+D,oBAAoB,GAAG,CAChH,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,CAAC,eAAe,EAAE,uBAAuB,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAChG,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,EAAE,CAAC;QAClC,IACE,OAAO,KAAK,IAAI;YAChB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YACxB,oDAAoD;YACpD,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,EACnE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAWD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,SAAiB,EACjB,IAAwB;IAExB,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACxC,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,WAAW,CAAC,aAAa,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO;YACL,IAAI,EAAE,GAAG;YACT,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,kBAAkB,GAAG,+EAA+E;SAC7G,CAAC;IACJ,CAAC;IACD,sDAAsD;IACtD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAClD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC"}

package/dist/core/safe-paths.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=safe-paths.test.d.ts.map

package/dist/core/safe-paths.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-paths.test.d.ts","sourceRoot":"","sources":["../../src/core/safe-paths.test.ts"],"names":[],"mappings":""}

package/dist/core/safe-paths.test.js

@@ -0,0 +1,92 @@
+import { homedir, tmpdir } from "node:os";
+import { resolve as resolvePath } from "node:path";
+import { describe, expect, it } from "vitest";
+import { USER_OUTPUT_DIR_NAME, safeOutputPath, safeResolveOutputPath, userOutputDir, } from "./safe-paths.js";
+const cwd = resolvePath(homedir(), "sample-project");
+describe("safeOutputPath", () => {
+    it("accepts a relative path under cwd", () => {
+        const out = safeOutputPath(cwd, "out/clip.mp4");
+        expect(out).toBe(resolvePath(cwd, "out/clip.mp4"));
+    });
+    it("rejects escape via parent-dir traversal", () => {
+        expect(() => safeOutputPath("/Users/agent/proj", "../../etc/passwd")).toThrow(/outside allowed roots/);
+    });
+    it("accepts absolute paths under the user output dir", () => {
+        const target = resolvePath(userOutputDir(), "thumb.jpg");
+        const out = safeOutputPath(cwd, target);
+        expect(out).toBe(target);
+    });
+    it("accepts absolute paths under the system tempdir", () => {
+        const target = resolvePath(tmpdir(), "scratch", "x.wav");
+        const out = safeOutputPath(cwd, target);
+        expect(out).toBe(target);
+    });
+    it("rejects an absolute path outside the allowlist", () => {
+        expect(() => safeOutputPath(cwd, "/etc/hosts")).toThrow(/outside allowed roots/);
+    });
+    it("accepts paths under user-supplied allowRoots", () => {
+        const root = resolvePath(homedir(), "Movies", "raw");
+        const target = resolvePath(root, "a.mp4");
+        const out = safeOutputPath(cwd, target, { allowRoots: [root] });
+        expect(out).toBe(target);
+    });
+    it("rejects empty input", () => {
+        expect(() => safeOutputPath(cwd, "")).toThrow(/empty/);
+    });
+    it("treats Windows-style drive letters consistently with node:path", () => {
+        // On POSIX runners this becomes a relative-looking path; the assertion
+        // just guarantees we don't throw on the segment shape — node:path picks
+        // the platform behaviour and we trust it.
+        const out = safeOutputPath(cwd, "C:/Users/me/out.mp4");
+        expect(out.endsWith("out.mp4")).toBe(true);
+    });
+});
+describe("safeResolveOutputPath", () => {
+    it("leaves a regular cwd-relative path unchanged", () => {
+        const r = safeResolveOutputPath(cwd, "thumb.jpg");
+        expect(r.redirected).toBe(false);
+        expect(r.path.endsWith("thumb.jpg")).toBe(true);
+    });
+    it("redirects /tmp paths to ~/Documents/ezeditor-out", () => {
+        const r = safeResolveOutputPath(cwd, "/tmp/grab.jpg");
+        expect(r.redirected).toBe(true);
+        expect(r.path).toBe(resolvePath(userOutputDir(), "grab.jpg"));
+        expect(r.reason).toMatch(/sandbox/);
+    });
+    it("redirects /var/folders sandbox paths", () => {
+        const r = safeResolveOutputPath(cwd, "/var/folders/zz/abc/T/grab.jpg");
+        expect(r.redirected).toBe(true);
+        expect(r.path).toBe(resolvePath(userOutputDir(), "grab.jpg"));
+    });
+    it("redirects /private/var paths", () => {
+        const r = safeResolveOutputPath(cwd, "/private/var/folders/zz/T/grab.jpg");
+        expect(r.redirected).toBe(true);
+    });
+    it("preserves an absolute path under the user output dir", () => {
+        const target = resolvePath(userOutputDir(), "explicit.jpg");
+        const r = safeResolveOutputPath(cwd, target);
+        expect(r.redirected).toBe(false);
+        expect(r.path).toBe(target);
+    });
+    it("exports a sensible USER_OUTPUT_DIR_NAME constant", () => {
+        expect(USER_OUTPUT_DIR_NAME).toBe("ezeditor-out");
+        expect(userOutputDir().endsWith(USER_OUTPUT_DIR_NAME)).toBe(true);
+    });
+    // Regression: absolute escape paths must be rejected even when given to
+    // the redirect-aware variant. Earlier versions returned `{ path: requested,
+    // redirected: false }` for any non-sandbox absolute path, bypassing the
+    // cwd-confinement guard. The current implementation falls through to
+    // safeOutputPath() for non-sandbox paths so escapes throw.
+    it("rejects an absolute path outside the allowlist (e.g. /etc/passwd)", () => {
+        expect(() => safeResolveOutputPath("/tmp/cwd", "/etc/passwd")).toThrow(/outside allowed roots/);
+    });
+    it("accepts an absolute path that resolves under cwd", () => {
+        // Use a non-sandbox cwd so the result isn't redirected. ~/sample-project
+        // is the suite-wide cwd; an absolute path inside it should round-trip.
+        const target = resolvePath(cwd, "output.mp4");
+        const r = safeResolveOutputPath(cwd, target);
+        expect(r.redirected).toBe(false);
+        expect(r.path).toBe(target);
+    });
+});
+//# sourceMappingURL=safe-paths.test.js.map

package/dist/core/safe-paths.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-paths.test.js","sourceRoot":"","sources":["../../src/core/safe-paths.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,qBAAqB,EACrB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;AAErD,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAC3E,uBAAuB,CACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,EAAE,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,0CAA0C;QAC1C,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,qBAAqB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,qBAAqB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACtD,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,GAAG,qBAAqB,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;QACvE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAG,qBAAqB,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;QAC3E,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,EAAE,EAAE,cAAc,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,4EAA4E;IAC5E,wEAAwE;IACxE,qEAAqE;IACrE,2DAA2D;IAC3D,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,yEAAyE;QACzE,uEAAuE;QACvE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/core/sessions.d.ts

@@ -0,0 +1,40 @@
+import type { Message } from "@prestyj/ai";
+/**
+ * Minimal session persistence for `ezeditor continue`.
+ *
+ * Each TUI run writes its rolling message buffer to ~/.ezcoder/editor/last.json
+ * after every turn. `ezeditor continue` reads this file and hydrates a new
+ * Agent with the prior messages.
+ *
+ * No multi-session support yet — just "the most recent conversation". Pairs
+ * with the `priorMessages` option added to agent.
+ */
+export declare const SESSIONS_DIR: string;
+export declare const LAST_SESSION_FILE: string;
+export interface PersistedSession {
+    /** Format version for future compatibility. */
+    v: 1;
+    /** ISO timestamp of the last update. */
+    updatedAt: string;
+    /** Provider used for this session. */
+    provider: string;
+    /** Model used for this session. */
+    model: string;
+    /** Working directory at start. */
+    cwd: string;
+    /** Host name in use ("resolve" / "premiere" / "none"). */
+    host: string;
+    /** Full message buffer EXCLUDING the system prompt. */
+    messages: Message[];
+}
+export declare function saveSession(snapshot: Omit<PersistedSession, "v" | "updatedAt">): Promise<void>;
+export declare function loadLastSession(): Promise<PersistedSession | null>;
+export declare function hasLastSession(): Promise<boolean>;
+/**
+ * Drop the system message from a saved messages array. Saved sessions
+ * intentionally exclude the system prompt (which gets rebuilt fresh per run
+ * to reflect current host caps), but if a future format change includes it,
+ * we strip it defensively.
+ */
+export declare function stripSystem(messages: Message[]): Message[];
+//# sourceMappingURL=sessions.d.ts.map

package/dist/core/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/core/sessions.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;;;;;GASG;AAEH,eAAO,MAAM,YAAY,QAAgD,CAAC;AAC1E,eAAO,MAAM,iBAAiB,QAAuC,CAAC;AAEtE,MAAM,WAAW,gBAAgB;IAC/B,+CAA+C;IAC/C,CAAC,EAAE,CAAC,CAAC;IACL,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB;AAED,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,GAAG,GAAG,WAAW,CAAC,GAClD,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAUxE;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAEvD;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAE1D"}

package/dist/core/sessions.js

@@ -0,0 +1,61 @@
+import { existsSync } from "node:fs";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+/**
+ * Minimal session persistence for `ezeditor continue`.
+ *
+ * Each TUI run writes its rolling message buffer to ~/.ezcoder/editor/last.json
+ * after every turn. `ezeditor continue` reads this file and hydrates a new
+ * Agent with the prior messages.
+ *
+ * No multi-session support yet — just "the most recent conversation". Pairs
+ * with the `priorMessages` option added to agent.
+ */
+export const SESSIONS_DIR = path.join(os.homedir(), ".ezcoder", "editor");
+export const LAST_SESSION_FILE = path.join(SESSIONS_DIR, "last.json");
+export async function saveSession(snapshot) {
+    await fs.mkdir(SESSIONS_DIR, { recursive: true });
+    const payload = {
+        v: 1,
+        updatedAt: new Date().toISOString(),
+        ...snapshot,
+    };
+    // Atomic write so an interrupted save doesn't leave a half-file.
+    const tmp = `${LAST_SESSION_FILE}.${process.pid}.tmp`;
+    try {
+        await fs.writeFile(tmp, JSON.stringify(payload, null, 2), "utf8");
+        await fs.rename(tmp, LAST_SESSION_FILE);
+    }
+    catch (e) {
+        await fs.unlink(tmp).catch(() => { });
+        throw e;
+    }
+}
+export async function loadLastSession() {
+    if (!existsSync(LAST_SESSION_FILE))
+        return null;
+    const raw = await fs.readFile(LAST_SESSION_FILE, "utf8");
+    try {
+        const parsed = JSON.parse(raw);
+        if (parsed.v !== 1)
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+export async function hasLastSession() {
+    return existsSync(LAST_SESSION_FILE);
+}
+/**
+ * Drop the system message from a saved messages array. Saved sessions
+ * intentionally exclude the system prompt (which gets rebuilt fresh per run
+ * to reflect current host caps), but if a future format change includes it,
+ * we strip it defensively.
+ */
+export function stripSystem(messages) {
+    return messages.filter((m) => m.role !== "system");
+}
+//# sourceMappingURL=sessions.js.map

package/dist/core/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../src/core/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AAmBtE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAmD;IAEnD,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,OAAO,GAAqB;QAChC,CAAC,EAAE,CAAC;QACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,GAAG,QAAQ;KACZ,CAAC;IACF,iEAAiE;IACjE,MAAM,GAAG,GAAG,GAAG,iBAAiB,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAClE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QACnD,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,OAAO,UAAU,CAAC,iBAAiB,CAAC,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,QAAmB;IAC7C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;AACrD,CAAC"}