@qduc/term2 0.7.2 → 0.8.0

package/dist/utils/command-safety/scratch-classify.test.js

@@ -0,0 +1,22 @@
+import test from 'ava';
+import { classifyCommandDetailed } from './index.js';
+const cases = [
+    `awk '1' source/prompts/plan-mode-info.md`,
+    `awk --version`,
+    `rg -n "actualPromptTokens" source/`,
+    `git status --short && rg -n "actualPromptTokens" source/`,
+    `rg -n "x" .`,
+    `rg --files . | rg 'testfrontend_public\\.h$'`,
+    `rg -n "y" ~/Library/Logs/term2-nodejs/logs/provider-traffic/2026-05-25`,
+    `printf 'a'; rg -n '^#' source/prompts/codex.md`,
+    `rg -n "z" src test docs -g '*.cpp'`,
+];
+test('classify scratch', (t) => {
+    for (const c of cases) {
+        const r = classifyCommandDetailed(c);
+        // eslint-disable-next-line no-console
+        console.log(`[${r.status}] ${c.slice(0, 60)}  :: ${r.reasons.join(' | ')}`);
+    }
+    t.pass();
+});
+//# sourceMappingURL=scratch-classify.test.js.map

package/dist/utils/command-safety/scratch-classify.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-classify.test.js","sourceRoot":"","sources":["../../../source/utils/command-safety/scratch-classify.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,KAAK,CAAC;AACvB,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,KAAK,GAAG;IACZ,0CAA0C;IAC1C,eAAe;IACf,oCAAoC;IACpC,0DAA0D;IAC1D,aAAa;IACb,8CAA8C;IAC9C,wEAAwE;IACxE,gDAAgD;IAChD,oCAAoC;CACrC,CAAC;AAEF,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE;IAC7B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;QACrC,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,CAAC,CAAC,IAAI,EAAE,CAAC;AACX,CAAC,CAAC,CAAC"}

package/dist/utils/command-safety/scratch-tally.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scratch-tally.test.d.ts.map

package/dist/utils/command-safety/scratch-tally.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-tally.test.d.ts","sourceRoot":"","sources":["../../../source/utils/command-safety/scratch-tally.test.ts"],"names":[],"mappings":""}

package/dist/utils/command-safety/scratch-tally.test.js

@@ -0,0 +1,68 @@
+import test from 'ava';
+import { readFileSync } from 'fs';
+import { classifyCommandDetailed } from './index.js';
+test('tally evaluator false positives', (t) => {
+    const cmds = JSON.parse(readFileSync('/tmp/eval_cmds.json', 'utf8'));
+    const statusCount = { GREEN: 0, YELLOW: 0, RED: 0 };
+    const reasonCount = new Map();
+    const greenSamples = [];
+    for (const c of cmds) {
+        let r;
+        try {
+            r = classifyCommandDetailed(c);
+        }
+        catch (e) {
+            reasonCount.set('THREW: ' + e.message, (reasonCount.get('THREW') ?? 0) + 1);
+            continue;
+        }
+        statusCount[r.status] = (statusCount[r.status] ?? 0) + 1;
+        if (r.status === 'GREEN' && greenSamples.length < 8)
+            greenSamples.push(c.slice(0, 70));
+        if (r.status !== 'GREEN') {
+            // bucket each distinct reason *kind* (strip the variable tail)
+            for (const reason of r.reasons) {
+                if (reason.startsWith('GREEN'))
+                    continue;
+                const kind = reason
+                    .replace(/unknown or unlisted command: \S+/, 'unlisted command: <cmd>')
+                    .replace(/argument .+/, 'argument <path>')
+                    .replace(/redirect to .+/, 'redirect to <path>')
+                    .replace(/blocked command: \S+/, 'blocked command: <cmd>');
+                reasonCount.set(kind, (reasonCount.get(kind) ?? 0) + 1);
+            }
+        }
+    }
+    // eslint-disable-next-line no-console
+    console.log('STATUS', JSON.stringify(statusCount));
+    const sorted = [...reasonCount.entries()].sort((a, b) => b[1] - a[1]);
+    // eslint-disable-next-line no-console
+    console.log('REASONS (status-bearing commands):');
+    for (const [k, v] of sorted)
+        console.log(`  ${String(v).padStart(4)}  ${k}`);
+    // eslint-disable-next-line no-console
+    console.log('GREEN samples:', greenSamples);
+    // Which command NAMES are unlisted? (re-parse, collect first tokens of unlisted reasons)
+    const unlisted = new Map();
+    for (const c of cmds) {
+        let r;
+        try {
+            r = classifyCommandDetailed(c);
+        }
+        catch {
+            continue;
+        }
+        for (const reason of r.reasons) {
+            const m = reason.match(/unknown or unlisted command: (\S+)/);
+            if (m)
+                unlisted.set(m[1], (unlisted.get(m[1]) ?? 0) + 1);
+        }
+    }
+    // eslint-disable-next-line no-console
+    console.log('UNLISTED COMMAND NAMES:');
+    for (const [k, v] of [...unlisted.entries()].sort((a, b) => b[1] - a[1])) {
+        // eslint-disable-next-line no-console
+        console.log(`  ${String(v).padStart(4)}  ${k}`);
+    }
+    t.pass();
+});
+//# sourceMappingURL=scratch-tally.test.js.map

package/dist/utils/command-safety/scratch-tally.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-tally.test.js","sourceRoot":"","sources":["../../../source/utils/command-safety/scratch-tally.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,KAAK,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAErD,IAAI,CAAC,iCAAiC,EAAE,CAAC,CAAC,EAAE,EAAE;IAC5C,MAAM,IAAI,GAAa,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/E,MAAM,WAAW,GAA2B,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC;QACN,IAAI,CAAC;YACH,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,WAAW,CAAC,GAAG,CAAC,SAAS,GAAI,CAAW,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACvF,SAAS;QACX,CAAC;QACD,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACzB,+DAA+D;YAC/D,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC/B,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;oBAAE,SAAS;gBACzC,MAAM,IAAI,GAAG,MAAM;qBAChB,OAAO,CAAC,kCAAkC,EAAE,yBAAyB,CAAC;qBACtE,OAAO,CAAC,aAAa,EAAE,iBAAiB,CAAC;qBACzC,OAAO,CAAC,gBAAgB,EAAE,oBAAoB,CAAC;qBAC/C,OAAO,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;gBAC7D,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAClD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7E,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;IAE5C,yFAAyF;IACzF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC;QACN,IAAI,CAAC;YACH,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAC7D,IAAI,CAAC;gBAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,CAAC,CAAC,IAAI,EAAE,CAAC;AACX,CAAC,CAAC,CAAC"}

package/dist/utils/command-safety.evaluator-false-positives.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=command-safety.evaluator-false-positives.test.d.ts.map

package/dist/utils/command-safety.evaluator-false-positives.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-safety.evaluator-false-positives.test.d.ts","sourceRoot":"","sources":["../../source/utils/command-safety.evaluator-false-positives.test.ts"],"names":[],"mappings":""}

package/dist/utils/command-safety.evaluator-false-positives.test.js

@@ -0,0 +1,72 @@
+import test from 'ava';
+import { classifyCommand, SafetyStatus } from './command-safety/index.js';
+import { analyzePathRisk } from './command-safety/path-analysis.js';
+// ============================================================================
+// Item 1: pure-safe / read-only commands should be GREEN (not "unlisted")
+// ============================================================================
+test('read-only and output-only commands classify GREEN', (t) => {
+    const greenCommands = [
+        'cd source',
+        "printf 'hello world'",
+        'true',
+        'false',
+        'which node',
+        'type ls',
+        'basename src/foo.ts',
+        'dirname src/foo.ts',
+        'realpath src/foo.ts',
+        'seq 1 10',
+        'comm a.txt b.txt',
+        'column -t data.txt',
+        'diff a.txt b.txt',
+        'xxd dist/bundle.bin',
+        'od -c file.bin',
+        'hexdump -C file.bin',
+        'du -sh node_modules',
+        'df -h',
+    ];
+    for (const command of greenCommands) {
+        t.is(classifyCommand(command), SafetyStatus.GREEN, `"${command}" should be GREEN`);
+    }
+});
+test('compound of newly-allowed safe commands stays GREEN', (t) => {
+    t.is(classifyCommand("cd source && printf 'done'"), SafetyStatus.GREEN);
+    t.is(classifyCommand('cd source && ls'), SafetyStatus.GREEN);
+});
+test('dual-use commands are still NOT auto-allowed (remain YELLOW)', (t) => {
+    // These genuinely need the evaluator/human and must not be allow-listed.
+    for (const command of ['npm test', 'npx tsc', 'node script.js', 'cp a b']) {
+        t.is(classifyCommand(command), SafetyStatus.YELLOW, `"${command}" should remain YELLOW`);
+    }
+});
+// ============================================================================
+// Item 2: the current directory "." should not be treated as a hidden file
+// ============================================================================
+test('current-directory path args are GREEN', (t) => {
+    t.is(analyzePathRisk('.'), SafetyStatus.GREEN, '"." should be GREEN');
+    t.is(analyzePathRisk('./'), SafetyStatus.GREEN, '"./" should be GREEN');
+});
+test('search tools over the current directory classify GREEN', (t) => {
+    t.is(classifyCommand('rg -n "pattern" .'), SafetyStatus.GREEN);
+    t.is(classifyCommand('grep -rn "foo" .'), SafetyStatus.GREEN);
+});
+// ============================================================================
+// Item 4: git global options that take a value must not be mistaken for the
+//         subcommand (e.g. `git -C <path> status`).
+// ============================================================================
+test('git global flags before a safe subcommand stay GREEN', (t) => {
+    const greenGit = [
+        'git -C /some/repo status',
+        'git -c user.name=alice log --oneline',
+        'git --git-dir=/repo/.git status',
+        'git -C source diff',
+    ];
+    for (const command of greenGit) {
+        t.is(classifyCommand(command), SafetyStatus.GREEN, `"${command}" should be GREEN`);
+    }
+});
+test('git global flags before a write subcommand stay YELLOW', (t) => {
+    t.is(classifyCommand('git -C /some/repo commit -m wip'), SafetyStatus.YELLOW);
+    t.is(classifyCommand('git -C /some/repo reset --hard'), SafetyStatus.YELLOW);
+});
+//# sourceMappingURL=command-safety.evaluator-false-positives.test.js.map

package/dist/utils/command-safety.evaluator-false-positives.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-safety.evaluator-false-positives.test.js","sourceRoot":"","sources":["../../source/utils/command-safety.evaluator-false-positives.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,KAAK,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEpE,+EAA+E;AAC/E,0EAA0E;AAC1E,+EAA+E;AAE/E,IAAI,CAAC,mDAAmD,EAAE,CAAC,CAAC,EAAE,EAAE;IAC9D,MAAM,aAAa,GAAG;QACpB,WAAW;QACX,sBAAsB;QACtB,MAAM;QACN,OAAO;QACP,YAAY;QACZ,SAAS;QACT,qBAAqB;QACrB,oBAAoB;QACpB,qBAAqB;QACrB,UAAU;QACV,kBAAkB;QAClB,oBAAoB;QACpB,kBAAkB;QAClB,qBAAqB;QACrB,gBAAgB;QAChB,qBAAqB;QACrB,qBAAqB;QACrB,OAAO;KACR,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,KAAK,EAAE,IAAI,OAAO,mBAAmB,CAAC,CAAC;IACrF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qDAAqD,EAAE,CAAC,CAAC,EAAE,EAAE;IAChE,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,4BAA4B,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,CAAC,CAAC,EAAE,EAAE;IACzE,yEAAyE;IACzE,KAAK,MAAM,OAAO,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1E,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,MAAM,EAAE,IAAI,OAAO,wBAAwB,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAE/E,IAAI,CAAC,uCAAuC,EAAE,CAAC,CAAC,EAAE,EAAE;IAClD,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACtE,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,CAAC,CAAC,EAAE,EAAE;IACnE,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,kBAAkB,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,4EAA4E;AAC5E,oDAAoD;AACpD,+EAA+E;AAE/E,IAAI,CAAC,sDAAsD,EAAE,CAAC,CAAC,EAAE,EAAE;IACjE,MAAM,QAAQ,GAAG;QACf,0BAA0B;QAC1B,sCAAsC;QACtC,iCAAiC;QACjC,oBAAoB;KACrB,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,KAAK,EAAE,IAAI,OAAO,mBAAmB,CAAC,CAAC;IACrF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,CAAC,CAAC,EAAE,EAAE;IACnE,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,iCAAiC,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9E,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,gCAAgC,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC"}

package/dist/utils/command-safety.git.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=command-safety.git.test.d.ts.map

package/dist/utils/command-safety.git.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-safety.git.test.d.ts","sourceRoot":"","sources":["../../source/utils/command-safety.git.test.ts"],"names":[],"mappings":""}

package/dist/utils/command-safety.git.test.js

@@ -0,0 +1,74 @@
+import test from 'ava';
+import { validateCommandSafety } from './command-safety/index.js';
+// Safe git commands (GREEN - auto-approved)
+test('git status is green (safe)', (t) => {
+    t.false(validateCommandSafety('git status'));
+});
+test('git log is green (safe)', (t) => {
+    t.false(validateCommandSafety('git log --oneline'));
+});
+test('git diff is green (safe)', (t) => {
+    t.false(validateCommandSafety('git diff HEAD'));
+});
+test('git show is green (safe)', (t) => {
+    t.false(validateCommandSafety('git show abc123'));
+});
+test('git blame is green (safe)', (t) => {
+    t.false(validateCommandSafety('git blame file.txt'));
+});
+test('git reflog is green (safe)', (t) => {
+    t.false(validateCommandSafety('git reflog'));
+});
+test('git ls-files is green (safe)', (t) => {
+    t.false(validateCommandSafety('git ls-files'));
+});
+test('git grep is green (safe)', (t) => {
+    t.false(validateCommandSafety('git grep "pattern"'));
+});
+// Dangerous git commands (YELLOW - requires approval)
+test('git push is yellow (write operation)', (t) => {
+    t.true(validateCommandSafety('git push origin main'));
+});
+test('git commit is yellow (write operation)', (t) => {
+    t.true(validateCommandSafety('git commit -m "message"'));
+});
+test('git reset is yellow (destructive)', (t) => {
+    t.true(validateCommandSafety('git reset --hard HEAD'));
+});
+test('git clean is yellow (destructive)', (t) => {
+    t.true(validateCommandSafety('git clean -fd'));
+});
+test('git rebase is yellow (destructive)', (t) => {
+    t.true(validateCommandSafety('git rebase main'));
+});
+test('git merge is yellow (write operation)', (t) => {
+    t.true(validateCommandSafety('git merge feature'));
+});
+test('git add is yellow (write operation)', (t) => {
+    t.true(validateCommandSafety('git add .'));
+});
+test('git checkout is yellow (branch switching)', (t) => {
+    t.true(validateCommandSafety('git checkout main'));
+});
+// Safe commands with dangerous flags (YELLOW)
+test('git log with force flag is yellow', (t) => {
+    t.true(validateCommandSafety('git log --force'));
+});
+test('git diff with hard flag is yellow', (t) => {
+    t.true(validateCommandSafety('git diff --hard'));
+});
+test('git status with delete flag is yellow', (t) => {
+    t.true(validateCommandSafety('git status --delete'));
+});
+// Unknown subcommands (YELLOW)
+test('unknown git subcommand is yellow', (t) => {
+    t.true(validateCommandSafety('git unknowncommand'));
+});
+// Git without subcommand (YELLOW)
+test('git without subcommand is yellow', (t) => {
+    t.true(validateCommandSafety('git'));
+});
+test('git with only flags is yellow', (t) => {
+    t.true(validateCommandSafety('git --version'));
+});
+//# sourceMappingURL=command-safety.git.test.js.map

package/dist/utils/command-safety.git.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-safety.git.test.js","sourceRoot":"","sources":["../../source/utils/command-safety.git.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,KAAK,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,4CAA4C;AAC5C,IAAI,CAAC,4BAA4B,EAAE,CAAC,CAAC,EAAE,EAAE;IACvC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yBAAyB,EAAE,CAAC,CAAC,EAAE,EAAE;IACpC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0BAA0B,EAAE,CAAC,CAAC,EAAE,EAAE;IACrC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0BAA0B,EAAE,CAAC,CAAC,EAAE,EAAE;IACrC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2BAA2B,EAAE,CAAC,CAAC,EAAE,EAAE;IACtC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4BAA4B,EAAE,CAAC,CAAC,EAAE,EAAE;IACvC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8BAA8B,EAAE,CAAC,CAAC,EAAE,EAAE;IACzC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0BAA0B,EAAE,CAAC,CAAC,EAAE,EAAE;IACrC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,sDAAsD;AACtD,IAAI,CAAC,sCAAsC,EAAE,CAAC,CAAC,EAAE,EAAE;IACjD,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wCAAwC,EAAE,CAAC,CAAC,EAAE,EAAE;IACnD,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mCAAmC,EAAE,CAAC,CAAC,EAAE,EAAE;IAC9C,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,uBAAuB,CAAC,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mCAAmC,EAAE,CAAC,CAAC,EAAE,EAAE;IAC9C,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oCAAoC,EAAE,CAAC,CAAC,EAAE,EAAE;IAC/C,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,CAAC,CAAC,EAAE,EAAE;IAClD,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qCAAqC,EAAE,CAAC,CAAC,EAAE,EAAE;IAChD,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2CAA2C,EAAE,CAAC,CAAC,EAAE,EAAE;IACtD,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,8CAA8C;AAC9C,IAAI,CAAC,mCAAmC,EAAE,CAAC,CAAC,EAAE,EAAE;IAC9C,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mCAAmC,EAAE,CAAC,CAAC,EAAE,EAAE;IAC9C,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,CAAC,CAAC,EAAE,EAAE;IAClD,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,+BAA+B;AAC/B,IAAI,CAAC,kCAAkC,EAAE,CAAC,CAAC,EAAE,EAAE;IAC7C,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,kCAAkC;AAClC,IAAI,CAAC,kCAAkC,EAAE,CAAC,CAAC,EAAE,EAAE;IAC7C,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;AACvC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+BAA+B,EAAE,CAAC,CAAC,EAAE,EAAE;IAC1C,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC"}

package/dist/utils/command-safety.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=command-safety.test.d.ts.map

package/dist/utils/command-safety.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-safety.test.d.ts","sourceRoot":"","sources":["../../source/utils/command-safety.test.ts"],"names":[],"mappings":""}

package/dist/utils/command-safety.test.js

@@ -0,0 +1,66 @@
+import test from 'ava';
+import { validateCommandSafety } from './command-safety/index.js';
+test('throws on empty command', (t) => {
+    t.throws(() => validateCommandSafety(''), {
+        message: /Command cannot be empty/,
+    });
+});
+test('malformed trailing syntax is yellow (approval required)', (t) => {
+    t.true(validateCommandSafety('git log ('));
+});
+test('flags dangerous direct command', (t) => {
+    t.true(validateCommandSafety('rm -rf /'));
+});
+test('flags nested dangerous command in substitution', (t) => {
+    t.true(validateCommandSafety('echo $(rm -rf /)'));
+});
+test('does not flag namespaced filenames', (t) => {
+    t.false(validateCommandSafety('echo firmware.rm'));
+});
+test('flags hidden sensitive files as yellow (approval required)', (t) => {
+    t.true(validateCommandSafety('cat .env'));
+});
+test('absolute system paths are red (now yellow-ish, needs approval)', (t) => {
+    t.true(validateCommandSafety('cat /etc/passwd'));
+});
+test('unknown commands are yellow (audit)', (t) => {
+    t.true(validateCommandSafety('python script.py'));
+});
+test('tilde ssh key is red (needs approval)', (t) => {
+    t.true(validateCommandSafety('cat ~/.ssh/id_rsa'));
+});
+test('home env file via $HOME is red (needs approval)', (t) => {
+    t.true(validateCommandSafety('cat $HOME/.env'));
+});
+test('absolute home dotfile is red (needs approval)', (t) => {
+    t.true(validateCommandSafety('cat /home/test/.gitconfig'));
+});
+test('redirect reading system file is red (needs approval)', (t) => {
+    t.true(validateCommandSafety('cat < /etc/passwd'));
+});
+test('redirect writing system file is red (needs approval)', (t) => {
+    t.true(validateCommandSafety('echo hi > /etc/hosts'));
+});
+// Sed command tests
+test('sed in-place edit is red (needs approval)', (t) => {
+    t.true(validateCommandSafety('sed -i "s/foo/bar/" file.txt'));
+});
+test('sed in-place edit with backup is red (needs approval)', (t) => {
+    t.true(validateCommandSafety('sed -i.bak "s/foo/bar/" file.txt'));
+});
+test('sed with output redirect is yellow (requires approval)', (t) => {
+    t.true(validateCommandSafety('sed "s/foo/bar/" input.txt > output.txt'));
+});
+test('sed read-only with file argument is green (safe)', (t) => {
+    t.false(validateCommandSafety('sed -n "1,10p" file.txt'));
+});
+test('sed read-only transformation is green (safe)', (t) => {
+    t.false(validateCommandSafety('sed "s/foo/bar/" file.txt'));
+});
+test('sed with stdin piped is green (safe)', (t) => {
+    t.false(validateCommandSafety('echo "test" | sed "s/foo/bar/"'));
+});
+test('sed reading from redirect is green (safe)', (t) => {
+    t.false(validateCommandSafety('sed "s/foo/bar/" < input.txt'));
+});
+//# sourceMappingURL=command-safety.test.js.map

package/dist/utils/command-safety.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-safety.test.js","sourceRoot":"","sources":["../../source/utils/command-safety.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,KAAK,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,IAAI,CAAC,yBAAyB,EAAE,CAAC,CAAC,EAAE,EAAE;IACpC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC,EAAE;QACxC,OAAO,EAAE,yBAAyB;KACnC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,CAAC,CAAC,EAAE,EAAE;IACpE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gCAAgC,EAAE,CAAC,CAAC,EAAE,EAAE;IAC3C,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,CAAC,CAAC,EAAE,EAAE;IAC3D,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oCAAoC,EAAE,CAAC,CAAC,EAAE,EAAE;IAC/C,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,CAAC,CAAC,EAAE,EAAE;IACvE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,CAAC,CAAC,EAAE,EAAE;IAC3E,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qCAAqC,EAAE,CAAC,CAAC,EAAE,EAAE;IAChD,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,CAAC,CAAC,EAAE,EAAE;IAClD,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iDAAiD,EAAE,CAAC,CAAC,EAAE,EAAE;IAC5D,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,CAAC,CAAC,EAAE,EAAE;IAC1D,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,CAAC,CAAC,EAAE,EAAE;IACjE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,CAAC,CAAC,EAAE,EAAE;IACjE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,oBAAoB;AACpB,IAAI,CAAC,2CAA2C,EAAE,CAAC,CAAC,EAAE,EAAE;IACtD,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,8BAA8B,CAAC,CAAC,CAAC;AAChE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,CAAC,CAAC,EAAE,EAAE;IAClE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,kCAAkC,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,CAAC,CAAC,EAAE,EAAE;IACnE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,yCAAyC,CAAC,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,CAAC,CAAC,EAAE,EAAE;IAC7D,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8CAA8C,EAAE,CAAC,CAAC,EAAE,EAAE;IACzD,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sCAAsC,EAAE,CAAC,CAAC,EAAE,EAAE;IACjD,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,gCAAgC,CAAC,CAAC,CAAC;AACnE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2CAA2C,EAAE,CAAC,CAAC,EAAE,EAAE;IACtD,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,8BAA8B,CAAC,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC"}

package/dist/utils/conversation/apply-conversation-result.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Pure helper that applies a {@link ConversationTerminal} result to a messages
+ * list. Extracted from `use-conversation.ts` so it can be unit tested.
+ *
+ * The non-trivial branch handles text duplication. The streaming event handler
+ * pushes a `status: 'streaming'` bot message into the UI as `text_delta`
+ * events arrive. The terminal result also carries `finalText`, which is the
+ * authoritative accumulated output. When the streaming tail never crosses a
+ * safe markdown boundary, the live bot message remains in the list with its
+ * streamed text; appending a second finalized message with the same text
+ * would render the assistant's reply twice (once bold/streaming, once again
+ * with the raw markdown asterisks intact, see the reproduction in the
+ * "duplicate bot text" test). We finalize the streaming message in place
+ * instead.
+ *
+ * The function never mutates the input `prev` array. It returns a fresh array
+ * (possibly equal to `prev` when nothing changed) so the caller can rely on
+ * React's referential equality to skip re-renders.
+ */
+import type { ConversationTerminal } from '../../contracts/conversation.js';
+import type { CommandMessage, Message } from '../../types/message.js';
+import type { StreamingState } from './conversation-utils.js';
+export interface ApplyConversationResultOptions {
+    result: ConversationTerminal;
+    streamingState: StreamingState;
+    createMessageId: () => string;
+    trimMessages: (messages: Message[]) => Message[];
+    annotateCommandMessage: (msg: CommandMessage) => CommandMessage;
+}
+export declare const isStreamingBotMessageId: (streamingState: Pick<StreamingState, "currentBotMessageId">, messages: Message[]) => string | null;
+export interface ApplyResponseResult {
+    /** The next message list, equal to `prev` when nothing changed. */
+    next: Message[];
+    /** True when the live streaming bot message was promoted to finalized. */
+    finalizedStreamingMessage: boolean;
+}
+/**
+ * Pure function: given the previous messages and a terminal response result,
+ * compute the next messages list. When a live streaming bot message exists it
+ * is finalized in place; otherwise the final text is appended as a new
+ * finalized message (sync provider path).
+ *
+ * The caller is responsible for clearing the streaming state's bookkeeping
+ * (e.g. `currentBotMessageId`) when `finalizedStreamingMessage` is true.
+ */
+export declare const computeNextMessages: ({ prev, result, streamingState, createMessageId, trimMessages, annotateCommandMessage, }: ApplyConversationResultOptions & {
+    prev: Message[];
+}) => ApplyResponseResult;
+/**
+ * Clears the streaming state bookkeeping once a live bot message has been
+ * promoted to finalized by {@link computeNextMessages}. Idempotent; safe to
+ * call when no live message exists.
+ */
+export declare const clearStreamingBotMessage: (streamingState: StreamingState) => void;
+//# sourceMappingURL=apply-conversation-result.d.ts.map

package/dist/utils/conversation/apply-conversation-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-conversation-result.d.ts","sourceRoot":"","sources":["../../../source/utils/conversation/apply-conversation-result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,KAAK,EAAc,cAAc,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAG9D,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,oBAAoB,CAAC;IAC7B,cAAc,EAAE,cAAc,CAAC;IAC/B,eAAe,EAAE,MAAM,MAAM,CAAC;IAC9B,YAAY,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,CAAC;IACjD,sBAAsB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,cAAc,CAAC;CACjE;AAED,eAAO,MAAM,uBAAuB,GAClC,gBAAgB,IAAI,CAAC,cAAc,EAAE,qBAAqB,CAAC,EAC3D,UAAU,OAAO,EAAE,KAClB,MAAM,GAAG,IAMX,CAAC;AA+BF,MAAM,WAAW,mBAAmB;IAClC,mEAAmE;IACnE,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,0EAA0E;IAC1E,yBAAyB,EAAE,OAAO,CAAC;CACpC;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,GAAI,0FAOjC,8BAA8B,GAAG;IAAE,IAAI,EAAE,OAAO,EAAE,CAAA;CAAE,KAAG,mBAoCzD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GAAI,gBAAgB,cAAc,KAAG,IAKzE,CAAC"}

package/dist/utils/conversation/apply-conversation-result.js

@@ -0,0 +1,103 @@
+/**
+ * Pure helper that applies a {@link ConversationTerminal} result to a messages
+ * list. Extracted from `use-conversation.ts` so it can be unit tested.
+ *
+ * The non-trivial branch handles text duplication. The streaming event handler
+ * pushes a `status: 'streaming'` bot message into the UI as `text_delta`
+ * events arrive. The terminal result also carries `finalText`, which is the
+ * authoritative accumulated output. When the streaming tail never crosses a
+ * safe markdown boundary, the live bot message remains in the list with its
+ * streamed text; appending a second finalized message with the same text
+ * would render the assistant's reply twice (once bold/streaming, once again
+ * with the raw markdown asterisks intact, see the reproduction in the
+ * "duplicate bot text" test). We finalize the streaming message in place
+ * instead.
+ *
+ * The function never mutates the input `prev` array. It returns a fresh array
+ * (possibly equal to `prev` when nothing changed) so the caller can rely on
+ * React's referential equality to skip re-renders.
+ */
+import { mergeCommandMessages } from './message-utils.js';
+export const isStreamingBotMessageId = (streamingState, messages) => {
+    if (streamingState.currentBotMessageId === null) {
+        return null;
+    }
+    const id = streamingState.currentBotMessageId;
+    return messages.some((m) => m.id === id && m.sender === 'bot') ? id : null;
+};
+const finalizeStreamingBotMessage = (messages, botMessageId, finalText) => {
+    const index = messages.findIndex((m) => m.id === botMessageId);
+    if (index === -1) {
+        return messages;
+    }
+    const current = messages[index];
+    if (current.sender !== 'bot') {
+        return messages;
+    }
+    const next = messages.slice();
+    const updated = { ...current, status: 'finalized', text: finalText };
+    next[index] = updated;
+    return next;
+};
+const appendFinalizedBotMessage = (messages, finalText, createMessageId) => {
+    const botMessage = {
+        id: createMessageId(),
+        sender: 'bot',
+        status: 'finalized',
+        text: finalText,
+    };
+    return [...messages, botMessage];
+};
+/**
+ * Pure function: given the previous messages and a terminal response result,
+ * compute the next messages list. When a live streaming bot message exists it
+ * is finalized in place; otherwise the final text is appended as a new
+ * finalized message (sync provider path).
+ *
+ * The caller is responsible for clearing the streaming state's bookkeeping
+ * (e.g. `currentBotMessageId`) when `finalizedStreamingMessage` is true.
+ */
+export const computeNextMessages = ({ prev, result, streamingState, createMessageId, trimMessages, annotateCommandMessage, }) => {
+    if (result.type !== 'response') {
+        return { next: prev, finalizedStreamingMessage: false };
+    }
+    const annotatedCommands = result.commandMessages.map(annotateCommandMessage);
+    const merged = mergeCommandMessages(prev, annotatedCommands);
+    const finalText = result.finalText;
+    if (!finalText || !finalText.trim()) {
+        return { next: trimMessages(merged), finalizedStreamingMessage: false };
+    }
+    const liveBotMessageId = isStreamingBotMessageId(streamingState, merged);
+    if (liveBotMessageId !== null) {
+        // The streaming message represents only the un-flushed tail of the
+        // streamed output. Earlier text that crossed a safe boundary was already
+        // promoted to a finalized message, so the tail should be the slice of
+        // `finalText` from `flushedTextLength` onward, not the full text.
+        const tailText = finalText.slice(streamingState.flushedTextLength);
+        const finalized = finalizeStreamingBotMessage(merged, liveBotMessageId, tailText);
+        return { next: trimMessages(finalized), finalizedStreamingMessage: true };
+    }
+    // No live streaming message exists. `textWasFlushed` is the streaming event
+    // handler's boundary-detection flag; when true, some earlier text was
+    // already promoted to a finalized message, so `finalText` is the tail that
+    // is already represented in the live stream and must not be appended again.
+    if (streamingState.textWasFlushed) {
+        return { next: trimMessages(merged), finalizedStreamingMessage: false };
+    }
+    return {
+        next: trimMessages(appendFinalizedBotMessage(merged, finalText, createMessageId)),
+        finalizedStreamingMessage: false,
+    };
+};
+/**
+ * Clears the streaming state bookkeeping once a live bot message has been
+ * promoted to finalized by {@link computeNextMessages}. Idempotent; safe to
+ * call when no live message exists.
+ */
+export const clearStreamingBotMessage = (streamingState) => {
+    streamingState.currentBotMessageId = null;
+    streamingState.accumulatedText = '';
+    streamingState.flushedTextLength = 0;
+    streamingState.textWasFlushed = true;
+};
+//# sourceMappingURL=apply-conversation-result.js.map

package/dist/utils/conversation/apply-conversation-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-conversation-result.js","sourceRoot":"","sources":["../../../source/utils/conversation/apply-conversation-result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAU1D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,cAA2D,EAC3D,QAAmB,EACJ,EAAE;IACjB,IAAI,cAAc,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,GAAG,cAAc,CAAC,mBAAmB,CAAC;IAC9C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAAC,QAAmB,EAAE,YAAoB,EAAE,SAAiB,EAAa,EAAE;IAC9G,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC;IAC/D,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAe,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACjF,IAAI,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;IACtB,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAChC,QAAmB,EACnB,SAAiB,EACjB,eAA6B,EAClB,EAAE;IACb,MAAM,UAAU,GAAe;QAC7B,EAAE,EAAE,eAAe,EAAE;QACrB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,SAAS;KAChB,CAAC;IACF,OAAO,CAAC,GAAG,QAAQ,EAAE,UAAU,CAAC,CAAC;AACnC,CAAC,CAAC;AASF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,EAClC,IAAI,EACJ,MAAM,EACN,cAAc,EACd,eAAe,EACf,YAAY,EACZ,sBAAsB,GAC+B,EAAuB,EAAE;IAC9E,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAE7D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACzE,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,mEAAmE;QACnE,yEAAyE;QACzE,sEAAsE;QACtE,kEAAkE;QAClE,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,2BAA2B,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC;IAC5E,CAAC;IAED,4EAA4E;IAC5E,sEAAsE;IACtE,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,cAAc,CAAC,cAAc,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;IAED,OAAO;QACL,IAAI,EAAE,YAAY,CAAC,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QACjF,yBAAyB,EAAE,KAAK;KACjC,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,cAA8B,EAAQ,EAAE;IAC/E,cAAc,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAC1C,cAAc,CAAC,eAAe,GAAG,EAAE,CAAC;IACpC,cAAc,CAAC,iBAAiB,GAAG,CAAC,CAAC;IACrC,cAAc,CAAC,cAAc,GAAG,IAAI,CAAC;AACvC,CAAC,CAAC"}

package/dist/utils/conversation/apply-conversation-result.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=apply-conversation-result.test.d.ts.map

package/dist/utils/conversation/apply-conversation-result.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-conversation-result.test.d.ts","sourceRoot":"","sources":["../../../source/utils/conversation/apply-conversation-result.test.ts"],"names":[],"mappings":""}