@scalequality/cli 0.4.20 → 0.4.21

package/dist/connect.build.json

@@ -1,5 +1,5 @@
 {
   "sdkVersion": "0.3.281",
-  "sha256": "d57c1ffcfba90f5dd699bb0315312c41c06888f6964098da3dd0a76625f2db88",
-  "sourceCommit": "4984400255216ed0585b1c0f034d3289d4851f93"
+  "sha256": "64b584e7f307f8bed9bee151ca7dd57c5fe8e54c8adf6e9fd76ba11dbfba93c1",
+  "sourceCommit": "a4093e270f574ff0830763c574a17585cf269fe6"
 }

package/dist/connect.cjs

@@ -4893,14 +4893,16 @@ function sandboxTestEnv() {
 var ApprovalBroker = class {
   waiting = /* @__PURE__ */ new Map();
   early = /* @__PURE__ */ new Map();
+  /** True when a call was waiting for this decision (it returns now); false when it is kept for a later wait. */
   resolve(approvalId, decision) {
     const w = this.waiting.get(approvalId);
     if (w) {
       this.waiting.delete(approvalId);
       w(decision);
-    } else {
-      this.early.set(approvalId, decision);
+      return true;
     }
+    this.early.set(approvalId, decision);
+    return false;
   }
   wait(approvalId, signal) {
     const ready = this.early.get(approvalId);
@@ -10257,7 +10259,8 @@ function buildSystemAppend(c) {
     "- Lead with the outcome in one or two sentences: what changed, what was found, or what you need from the user.",
     "- The screen already shows every command you ran and every file you edited, with their output and diff. Do not list them again, and do not restate test counts or tool results the user can open; mention one only when it matters for what comes next (a test that still fails, a risk that remains).",
     "- Keep it short, like a colleague reporting in a chat: a few lines for most turns, no headings, a short list only when there are several separate items. Never repeat the same fact in two places.",
-    "- End with at most one question or one suggested next step, never a menu of options. When there is an obvious next step, say it in one line."
+    "- End with at most one question or one suggested next step, never a menu of options. When there is an obvious next step, say it in one line.",
+    "- To show the user an image (a screenshot, a design, a reference board, a chart), write it as a Markdown image with its path in the workspace, for example `![Login screen](docs/login.png)`: the screen displays it in the conversation, and the user can open it larger. An https image address works the same way. Never say you cannot show an image; read it yourself first when you need to know what it shows."
   ].join("\n");
 }
 
@@ -10421,7 +10424,7 @@ async function restoreTranscript(configDir, cwd, t) {
 // src/application/services/workspaceSandbox/workspaceFiles.ts
 var import_promises12 = require("fs/promises");
 var import_path13 = require("path");
-var FILE_CAPS = { maxEntries: 500, maxReadBytes: 256 * 1024, maxFileBytes: 20 * 1024 * 1024, maxLines: 5e3 };
+var FILE_CAPS = { maxEntries: 500, maxReadBytes: 256 * 1024, maxFileBytes: 20 * 1024 * 1024, maxLines: 5e3, maxImageBytes: 6 * 1024 * 1024 };
 var FileRequestError = class extends Error {
   constructor(code) {
     super(code);
@@ -10502,6 +10505,48 @@ async function readTextFile(root, rel, range = {}, denied = []) {
   }
   return { path: clean, from, to: Math.max(from, Math.min(last, total)), totalLines: total, content, truncated, size: st.size };
 }
+function imageMime(buf) {
+  const at = (offset, hex) => buf.length >= offset + hex.length / 2 && buf.subarray(offset, offset + hex.length / 2).toString("hex") === hex;
+  if (at(0, "89504e470d0a1a0a")) return "image/png";
+  if (at(0, "ffd8ff")) return "image/jpeg";
+  if (at(0, "474946383761") || at(0, "474946383961")) return "image/gif";
+  if (at(0, "52494646") && at(8, "57454250")) return "image/webp";
+  if (at(4, "66747970") && /^(avif|avis)$/.test(buf.subarray(8, 12).toString("latin1"))) return "image/avif";
+  if (at(0, "424d")) return "image/bmp";
+  const head = buf.subarray(0, 2048).toString("utf8").replace(/^\uFEFF/, "").trimStart();
+  if (/^(<\?xml[^>]*>\s*)?(<!--[\s\S]*?-->\s*)*(<!DOCTYPE svg[^>]*>\s*)?<svg[\s>]/i.test(head)) return "image/svg+xml";
+  return null;
+}
+async function insideRelative(path, bases) {
+  const clean = (path ?? "").trim().replace(/^file:\/\//i, "");
+  if (!(0, import_path13.isAbsolute)(clean)) return clean.replace(/^\.\//, "");
+  for (const base of bases) {
+    for (const root of [(0, import_path13.resolve)(base), await (0, import_promises12.realpath)(base).catch(() => (0, import_path13.resolve)(base))]) {
+      const rel = (0, import_path13.relative)(root, (0, import_path13.resolve)(clean));
+      if (!rel) return "";
+      if (rel !== ".." && !rel.startsWith(`..${import_path13.sep}`) && !(0, import_path13.isAbsolute)(rel)) return rel.split(import_path13.sep).join("/");
+    }
+  }
+  throw new FileRequestError("PATH_OUTSIDE_WORKSPACE");
+}
+async function readImageFile(root, rel, denied = []) {
+  const { abs, rel: clean } = await fenced(root, rel, denied);
+  const st = await (0, import_promises12.stat)(abs).catch(() => null);
+  if (!st) throw new FileRequestError("NOT_FOUND");
+  if (!st.isFile()) throw new FileRequestError("NOT_A_FILE");
+  if (st.size > FILE_CAPS.maxImageBytes) throw new FileRequestError("FILE_TOO_LARGE");
+  const fh = await (0, import_promises12.open)(abs, "r");
+  let buf;
+  try {
+    buf = Buffer.alloc(st.size);
+    await fh.read(buf, 0, st.size, 0);
+  } finally {
+    await fh.close();
+  }
+  const mime = imageMime(buf);
+  if (!mime) throw new FileRequestError("NOT_AN_IMAGE");
+  return { path: clean, mime, size: st.size, data: buf.toString("base64") };
+}
 
 // src/application/services/workspaceSandbox/orgMcp.ts
 var import_module = require("module");
@@ -11392,7 +11437,7 @@ var WorkspaceEngine = class {
       }
       case "approval": {
         const parsed = ApprovalBroker.fromPayload(p);
-        if (parsed) this.broker.resolve(parsed.approvalId, parsed.decision);
+        if (parsed && this.broker.resolve(parsed.approvalId, parsed.decision) && parsed.decision.decision === "REJECT" && this.live) this.live.refused = true;
         return;
       }
       case "stop":
@@ -11536,6 +11581,13 @@ var WorkspaceEngine = class {
       const denied = this.deps.privateDirs ?? [];
       const path = typeof p.path === "string" ? p.path : "";
       const range = { from: typeof p.from === "number" ? p.from : void 0, to: typeof p.to === "number" ? p.to : void 0 };
+      if (kind === "read_file" && p.as === "image") {
+        const rel = await insideRelative(path, [repo2?.root ?? this.deps.root]);
+        const image = await this.fencedFiles(repo2, rel, (root, r) => readImageFile(root, r, denied));
+        const { data, ...meta } = image;
+        await this.deps.transport.reply(commandId, { ok: true, result: { ...repoFullName ? { repoFullName } : {}, ...this.redactor.deep(meta), data } }).catch((e) => this.deps.log.warn("file request not answered", { error: e.message }));
+        return;
+      }
       const result = kind === "list_files" ? await this.fencedFiles(repo2, path, (root, rel) => listFiles(root, rel, denied)) : await this.fencedFiles(repo2, path, (root, rel) => readTextFile(root, rel, range, denied));
       reply = { ok: true, result: { ...repoFullName ? { repoFullName } : {}, ...result } };
     } catch (e) {
@@ -11694,6 +11746,7 @@ ${String(item.content)}` : String(item.content);
       }
       if (moved && !live.foreground.size) return;
     }
+    if (live.refused) return;
     await this.interruptTurn();
   }
   /**
@@ -12385,6 +12438,7 @@ ${text3}`;
       pushChain: Promise.resolve(),
       foreground: /* @__PURE__ */ new Map(),
       interrupted: false,
+      refused: false,
       stopGuard: null,
       between: false,
       snapshot: null,
@@ -12506,8 +12560,9 @@ ${text3}`;
       }
     } catch (e) {
       if (!ac.signal.aborted) {
-        this.deps.log.warn("turn failed", { error: this.redactor.text(e.message) });
-        this.error("TURN_FAILED");
+        const ended = live.turnEnded || live.interrupted;
+        this.deps.log.warn(ended ? "engine process ended after the turn" : "turn failed", { error: this.redactor.text(e.message) });
+        if (!ended) this.error("TURN_FAILED");
       }
     } finally {
       const stopped = ac.signal.aborted || live.interrupted;
@@ -12539,6 +12594,7 @@ ${text3}`;
       if (ev.type === "message_start") live.timing.modelCall(typeof ev.message?.id === "string" ? ev.message.id : null);
     } else if (f.type === "assistant") {
       live.timing.modelEvent();
+      live.refused = false;
       const msg = f.message ?? {};
       if (!f.error && typeof msg.model === "string") this.checkModel(live, msg.model);
       live.timing.modelCall(typeof msg.id === "string" ? msg.id : null);
@@ -12614,6 +12670,7 @@ ${text3}`;
     if (snap) this.recordCheckpoint(turnId, snap);
     items.forEach((item, i) => this.messageStatus(String(item.turnId), i === 0 ? "started" : "absorbed"));
     live.interrupted = false;
+    live.refused = false;
     live.turnId = turnId;
     live.fellBack = false;
     live.headUuid = members[0];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scalequality/cli",
-  "version": "0.4.20",
+  "version": "0.4.21",
   "description": "ScaleQuality CLI. Connect your computer to the ScaleQuality AI Workspace (`scalequality login`), run its coding engine in any folder of your computer, and import your Claude Code and Codex conversations.",
   "type": "module",
   "bin": {