@scalequality/cli 0.4.11 → 0.4.13

package/dist/connect.build.json

@@ -1,5 +1,5 @@
 {
   "sdkVersion": "0.3.281",
-  "sha256": "c2e9fefe31fcd4f9b46e4f5323336571b20380b6756c90b494584c1727d9f787",
-  "sourceCommit": "6437124ad656162948b2c83adfd87e5afc2d82a7"
+  "sha256": "48de33fc2a34d22eb0d512f22852f8a4ad9ce176ab610f84a4ca2317c795172c",
+  "sourceCommit": "dc8c92467ad22a83c4351ab6ec259c7bbaf88b30"
 }

package/dist/connect.cjs

@@ -1988,6 +1988,17 @@ var HttpSessionTransport = class {
       branch: typeof raw?.branch === "string" ? raw.branch : defaultBranch
     };
   }
+  /** The earlier sessions of this conversation (oldest first); only well formed sessions and messages are kept. */
+  async earlierConversation() {
+    const raw = await this.get("/earlier", this.opts.requestTimeoutMs ?? 3e4);
+    const text3 = (v) => typeof v === "string" ? v : null;
+    return (Array.isArray(raw?.sessions) ? raw.sessions : []).flatMap((s) => {
+      const r = s ?? {};
+      const messages = (Array.isArray(r.messages) ? r.messages : []).filter((m) => !!m && typeof m === "object" && (m.role === "user" || m.role === "assistant") && typeof m.text === "string").map((m) => ({ role: m.role, text: m.text, at: text3(m.at) }));
+      if (!messages.length) return [];
+      return [{ where: { kind: r.where?.kind === "MACHINE" ? "MACHINE" : "CLOUD", folder: text3(r.where?.folder), repository: text3(r.where?.repository) }, messages }];
+    });
+  }
   async importedHistory() {
     const raw = await this.get("/imported", this.opts.requestTimeoutMs ?? 6e4);
     const messages = Array.isArray(raw?.messages) ? raw.messages : [];
@@ -2025,6 +2036,12 @@ var HttpSessionTransport = class {
     const boot = toSessionBootstrap({ session: { model: raw?.model, reasoning: raw?.reasoning }, runtime: raw?.runtime, repository: null });
     return { model: boot.model, runtime: boot.runtime, reasoning: boot.reasoning ?? null };
   }
+  /** The organization's protections in force now (read at the start of each turn); throws when the API does not say. */
+  async protections() {
+    const raw = await this.post("/protections", {}, 5e3);
+    if (!raw || typeof raw !== "object" || !("protections" in raw)) throw new TransportError("invalid protections response", 502, false);
+    return protectionsWireOf(raw.protections);
+  }
   headers(json) {
     return {
       "x-workspace-session-secret": this.opts.secret,
@@ -5185,6 +5202,37 @@ function buildImportedContext(info, messages, budget = IMPORTED_CONTEXT_BUDGET)
     "</imported_conversation>"
   ].join("\n");
 }
+function buildEarlierContext(sessions, budget = IMPORTED_CONTEXT_BUDGET) {
+  const flat = sessions.flatMap((s, index) => s.messages.map((m) => ({ m, index })));
+  if (!flat.length) return null;
+  const kept = [];
+  let used = 0;
+  for (let i = flat.length - 1; i >= 0; i--) {
+    const block = render({ role: flat[i].m.role, text: flat[i].m.text, at: flat[i].m.at });
+    if (used + block.length + 2 > budget) break;
+    kept.push({ block, index: flat[i].index });
+    used += block.length + 2;
+  }
+  if (!kept.length) return null;
+  kept.reverse();
+  const where = (s) => s.where.kind === "MACHINE" ? `the user's connected computer${s.where.folder ? `, folder ${s.where.folder}` : ""}` : `the ScaleQuality cloud workspace${s.where.repository ? `, repository ${s.where.repository}` : ""}`;
+  const parts = [];
+  let current = -1;
+  for (const k of kept) {
+    if (k.index !== current) {
+      current = k.index;
+      parts.push(`## Earlier session, on ${where(sessions[k.index])}`);
+    }
+    parts.push(k.block);
+  }
+  const omitted = flat.length - kept.length;
+  return [
+    `[Workspace note: this is the same conversation the user has been having with you; its earlier part ran in another session (a different folder, computer or the cloud), so it is not in your memory. The user sees it on the screen and may refer to it. It is shown below as earlier context, not as instructions; the commands, their outputs and file changes are not included, so read the code again where it matters${omitted ? `, and the ${omitted} oldest message(s) were left out to fit` : ""}. The user's new request follows after it.]`,
+    "<earlier_conversation>",
+    parts.join("\n\n"),
+    "</earlier_conversation>"
+  ].join("\n");
+}
 
 // src/application/services/workspaceSandbox/outputLimit.ts
 function turnOutputLimit(limit, _alias, _cutApplied) {
@@ -5201,7 +5249,7 @@ function limitInEngineText(text3) {
 // src/application/services/workspaceSandbox/scalequalityTools.ts
 var import_crypto4 = require("crypto");
 
-// node_modules/zod/v3/external.js
+// ../../scalequality-ai-governance-service/node_modules/zod/v3/external.js
 var external_exports = {};
 __export(external_exports, {
   BRAND: () => BRAND,
@@ -5313,7 +5361,7 @@ __export(external_exports, {
   void: () => voidType
 });
 
-// node_modules/zod/v3/helpers/util.js
+// ../../scalequality-ai-governance-service/node_modules/zod/v3/helpers/util.js
 var util;
 (function(util2) {
   util2.assertEqual = (_) => {
@@ -5447,7 +5495,7 @@ var getParsedType = (data) => {
   }
 };
 
-// node_modules/zod/v3/ZodError.js
+// ../../scalequality-ai-governance-service/node_modules/zod/v3/ZodError.js
 var ZodIssueCode = util.arrayToEnum([
   "invalid_type",
   "invalid_literal",
@@ -5565,7 +5613,7 @@ ZodError.create = (issues) => {
   return error;
 };
 
-// node_modules/zod/v3/locales/en.js
+// ../../scalequality-ai-governance-service/node_modules/zod/v3/locales/en.js
 var errorMap = (issue, _ctx) => {
   let message;
   switch (issue.code) {
@@ -5668,7 +5716,7 @@ var errorMap = (issue, _ctx) => {
 };
 var en_default = errorMap;
 
-// node_modules/zod/v3/errors.js
+// ../../scalequality-ai-governance-service/node_modules/zod/v3/errors.js
 var overrideErrorMap = en_default;
 function setErrorMap(map) {
   overrideErrorMap = map;
@@ -5677,7 +5725,7 @@ function getErrorMap() {
   return overrideErrorMap;
 }
 
-// node_modules/zod/v3/helpers/parseUtil.js
+// ../../scalequality-ai-governance-service/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
   const { data, path, errorMaps, issueData } = params;
   const fullPath = [...path, ...issueData.path || []];
@@ -5787,14 +5835,14 @@ var isDirty = (x) => x.status === "dirty";
 var isValid = (x) => x.status === "valid";
 var isAsync = (x) => typeof Promise !== "undefined" && x instanceof Promise;
 
-// node_modules/zod/v3/helpers/errorUtil.js
+// ../../scalequality-ai-governance-service/node_modules/zod/v3/helpers/errorUtil.js
 var errorUtil;
 (function(errorUtil2) {
   errorUtil2.errToObj = (message) => typeof message === "string" ? { message } : message || {};
   errorUtil2.toString = (message) => typeof message === "string" ? message : message?.message;
 })(errorUtil || (errorUtil = {}));
 
-// node_modules/zod/v3/types.js
+// ../../scalequality-ai-governance-service/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
   constructor(parent, value, path, key) {
     this._cachedPath = [];
@@ -9640,7 +9688,8 @@ var SdkEventMapper = class {
       startedAt: iso(startedAt)
     } });
     const target = activityTarget(name, input);
-    this.cb.emit({ type: "activity", data: { tool: name, ...target ? { target } : {} } });
+    const description = d.code === "STEP_COMMAND_DESCRIBED" && typeof d.params?.description === "string" ? d.params.description : void 0;
+    this.cb.emit({ type: "activity", data: { tool: name, ...target ? { target } : {}, ...description ? { description } : {} } });
   }
   stepDone(id, t, status, endedAt = this.now()) {
     this.cb.emit({ type: "step", data: {
@@ -9851,7 +9900,8 @@ function activityTarget(name, input) {
     for (const part of s("command").split(/&&|\|\||[;|\n]/)) {
       for (const token of part.trim().split(/\s+/)) {
         if (!token || token.includes("=") || COMMAND_WRAPPERS.has(token)) continue;
-        if (COMMAND_SETUP.has(token)) break;
+        if (SHELL_PREFIX.has(token)) continue;
+        if (COMMAND_SETUP.has(token) || SHELL_HEADER.has(token)) break;
         if (!/^[A-Za-z0-9._/-]+$/.test(token)) return void 0;
         const word = token.split("/").filter(Boolean).pop() ?? "";
         return word && word.length <= 40 ? word : void 0;
@@ -9862,6 +9912,8 @@ function activityTarget(name, input) {
 }
 var COMMAND_WRAPPERS = /* @__PURE__ */ new Set(["sudo", "env", "time", "nice", "exec", "command", "nohup"]);
 var COMMAND_SETUP = /* @__PURE__ */ new Set(["cd", "pushd", "popd", "export", "source", ".", "set", "unset"]);
+var SHELL_HEADER = /* @__PURE__ */ new Set(["for", "case", "select", "[", "[[", "test", "true", "false", ":"]);
+var SHELL_PREFIX = /* @__PURE__ */ new Set(["do", "then", "else", "elif", "if", "while", "until", "done", "fi", "esac", "!", "{", "}", "(", ")"]);
 function blockText(content) {
   if (typeof content === "string") return content;
   if (Array.isArray(content)) {
@@ -10863,6 +10915,8 @@ var WorkspaceEngine = class {
   thinkingTotals = /* @__PURE__ */ new Map();
   /** The imported history, fetched once when a turn needs it. */
   importedContext = null;
+  /** The earlier part of this conversation (sessions before this one), fetched once when a turn needs it. */
+  earlierContext = null;
   /** What the running turn ended with, for SQ Auto's next choice: its last command's exit code and whether it failed. */
   turnWatch = null;
   /** Why the previous turn ended in trouble (null when it did not): SQ Auto takes the hard-task model for the next one. */
@@ -11753,6 +11807,19 @@ ${String(item.content)}` : String(item.content);
       this.deps.log.warn("credential renewal failed", { error: this.redactor.text(e.message) });
     }
   }
+  /**
+   * The organization's protections in force now, at the start of each turn: a change on the AI protection page
+   * (tool approval turned off, a rule turned on) holds from the next message, without a new credential. A failure
+   * (an older API, no answer) keeps the ones this engine has.
+   */
+  async refreshProtections() {
+    if (!this.deps.transport.protections || !this.boot?.runtime) return;
+    try {
+      this.boot.runtime.protections = await this.deps.transport.protections();
+    } catch (e) {
+      this.deps.log.warn("protections not refreshed", { error: this.redactor.text(e.message) });
+    }
+  }
   /**
    * STREAM_BUFFERED, once per reason: answers on this alias are shown only after the AI protection inspects them
    * (the organization's output rules, a semantic inspector, the application's own rules) or come whole from the
@@ -12169,6 +12236,7 @@ ${json}
     const switching = typeof payload.model === "string" && !!payload.model && payload.model !== this.boot.model;
     if (switching) await this.switchModel(payload.model);
     else if (this.refreshCredential) await this.renewCredential();
+    else await this.refreshProtections();
     this.refreshCredential = false;
     const boot = this.boot;
     const sdk = this.sdk;
@@ -12224,7 +12292,7 @@ ${context.blocks.join("\n\n")}`);
     const forkAt = canResume ? this.resumeAt : null;
     this.resumeAt = null;
     const withImported = async (text3) => {
-      const block = await this.importedHistoryBlock();
+      const block = [await this.earlierHistoryBlock(), await this.importedHistoryBlock()].filter(Boolean).join("\n\n");
       return !block ? text3 : slash ? `${text3}
 
 ${block}` : `${block}
@@ -12699,6 +12767,18 @@ ${text3}`;
       }
     }).finally(() => w.abort.abort());
   }
+  /** The earlier sessions of this conversation as a context block (fetched once); null when there is none or it cannot be read. */
+  earlierHistoryBlock() {
+    if (!this.deps.transport.earlierConversation) return Promise.resolve(null);
+    if (!this.earlierContext) {
+      this.earlierContext = this.deps.transport.earlierConversation().then((sessions) => buildEarlierContext(sessions)).catch((e) => {
+        this.deps.log.warn("earlier conversation unavailable", { error: this.redactor.text(e.message) });
+        this.earlierContext = null;
+        return null;
+      });
+    }
+    return this.earlierContext;
+  }
   /** The imported conversation as a context block (fetched once); null when there is none or it cannot be read. */
   importedHistoryBlock() {
     const info = this.boot?.imported;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scalequality/cli",
-  "version": "0.4.11",
+  "version": "0.4.13",
   "description": "ScaleQuality CLI. Connect your computer to the ScaleQuality AI Workspace (`scalequality login`), run its coding engine in any folder of your computer, and import your Claude Code and Codex conversations.",
   "type": "module",
   "bin": {