@sumicom/quicksave 0.6.0 → 0.6.2

package/dist/ai/debugLogger.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Per-session debug logger that writes JSONL files under ~/.quicksave/debug/.
+ * Active when QUICKSAVE_DEBUG=1 or in dev mode (same gate as debug CLI commands).
+ *
+ * Files per session:
+ *  - <sessionId>-raw.jsonl      — every raw message from the CLI process
+ *  - <sessionId>-cards.jsonl    — every CardEvent pushed to the PWA
+ *  - <sessionId>-snapshots.jsonl — card builder state snapshots (on clearCards)
+ */
+export declare class DebugLogger {
+    private static enabled;
+    private static dirReady;
+    private sessionId;
+    constructor(sessionId: string);
+    updateSessionId(sessionId: string): void;
+    /** Log a raw message received from the CLI stdout. */
+    logRawEvent(msg: unknown): Promise<void>;
+    /** Log a CardEvent being emitted to the PWA. */
+    logCardEvent(event: unknown): Promise<void>;
+    /** Log a card builder snapshot (all cards at time of clear). */
+    logCardBuilderSnapshot(cards: unknown[]): Promise<void>;
+    private append;
+}
+//# sourceMappingURL=debugLogger.d.ts.map

package/dist/ai/debugLogger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"debugLogger.d.ts","sourceRoot":"","sources":["../../src/ai/debugLogger.ts"],"names":[],"mappings":"AAOA;;;;;;;;GAQG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAoB;IAC1C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAS;IAEhC,OAAO,CAAC,SAAS,CAAS;gBAEd,SAAS,EAAE,MAAM;IAI7B,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAIxC,sDAAsD;IAChD,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C,gDAAgD;IAC1C,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD,gEAAgE;IAC1D,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAI/C,MAAM;CAerB"}

package/dist/ai/debugLogger.js

@@ -0,0 +1,55 @@
+import { appendFile, mkdir } from 'fs/promises';
+import { join } from 'path';
+import { homedir } from 'os';
+import { isDebugEnabled } from '../service/types.js';
+const DEBUG_DIR = join(homedir(), '.quicksave', 'debug');
+/**
+ * Per-session debug logger that writes JSONL files under ~/.quicksave/debug/.
+ * Active when QUICKSAVE_DEBUG=1 or in dev mode (same gate as debug CLI commands).
+ *
+ * Files per session:
+ *  - <sessionId>-raw.jsonl      — every raw message from the CLI process
+ *  - <sessionId>-cards.jsonl    — every CardEvent pushed to the PWA
+ *  - <sessionId>-snapshots.jsonl — card builder state snapshots (on clearCards)
+ */
+export class DebugLogger {
+    static enabled = isDebugEnabled();
+    static dirReady = false;
+    sessionId;
+    constructor(sessionId) {
+        this.sessionId = sessionId;
+    }
+    updateSessionId(sessionId) {
+        this.sessionId = sessionId;
+    }
+    /** Log a raw message received from the CLI stdout. */
+    async logRawEvent(msg) {
+        await this.append('raw', msg);
+    }
+    /** Log a CardEvent being emitted to the PWA. */
+    async logCardEvent(event) {
+        await this.append('cards', event);
+    }
+    /** Log a card builder snapshot (all cards at time of clear). */
+    async logCardBuilderSnapshot(cards) {
+        await this.append('snapshots', { timestamp: Date.now(), cards });
+    }
+    async append(suffix, data) {
+        if (!DebugLogger.enabled)
+            return;
+        try {
+            if (!DebugLogger.dirReady) {
+                await mkdir(DEBUG_DIR, { recursive: true });
+                DebugLogger.dirReady = true;
+            }
+            const shortId = this.sessionId.length > 12 ? this.sessionId.slice(0, 12) : this.sessionId;
+            const filePath = join(DEBUG_DIR, `${shortId}-${suffix}.jsonl`);
+            const line = JSON.stringify(data) + '\n';
+            await appendFile(filePath, line);
+        }
+        catch {
+            // Debug logging must never break the main flow
+        }
+    }
+}
+//# sourceMappingURL=debugLogger.js.map

package/dist/ai/debugLogger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"debugLogger.js","sourceRoot":"","sources":["../../src/ai/debugLogger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AAEzD;;;;;;;;GAQG;AACH,MAAM,OAAO,WAAW;IACd,MAAM,CAAC,OAAO,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;IAExB,SAAS,CAAS;IAE1B,YAAY,SAAiB;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,eAAe,CAAC,SAAiB;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,WAAW,CAAC,GAAY;QAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,YAAY,CAAC,KAAc;QAC/B,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,sBAAsB,CAAC,KAAgB;QAC3C,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,IAAa;QAChD,IAAI,CAAC,WAAW,CAAC,OAAO;YAAE,OAAO;QACjC,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;gBAC1B,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5C,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC;YAC9B,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;YAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,OAAO,IAAI,MAAM,QAAQ,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACzC,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC"}

package/dist/ai/provider.d.ts

@@ -0,0 +1,57 @@
+import type { AgentId, CardEvent, CardStreamEnd } from '@sumicom/quicksave-shared';
+import type { StreamCardBuilder } from './cardBuilder.js';
+export type PermissionLevel = 'bypassPermissions' | 'acceptEdits' | 'default' | 'plan';
+export type ProviderHistoryMode = 'claude-jsonl' | 'memory';
+/** Represents a running provider session. */
+export interface ProviderSession {
+    sendUserMessage(prompt: string): void;
+    interrupt(): void;
+    kill(): void;
+    readonly alive: boolean;
+}
+/** Callbacks the provider uses to communicate back to SessionManager. */
+export interface ProviderCallbacks {
+    emitCardEvent(event: CardEvent): void;
+    emitStreamEnd(result: CardStreamEnd): void;
+    handlePermissionRequest(sessionId: string, req: {
+        toolName: string;
+        toolInput: Record<string, unknown>;
+        toolUseId: string;
+    }): Promise<{
+        action: 'allow' | 'deny';
+        response?: string;
+        updatedInput?: Record<string, unknown>;
+    }>;
+    onModelDetected(model: string): void;
+}
+export interface StartSessionOpts {
+    prompt: string;
+    cwd: string;
+    streamId: string;
+    model?: string;
+    permissionLevel: PermissionLevel;
+    sandboxed: boolean;
+    systemPrompt?: string;
+}
+export interface ResumeSessionOpts {
+    sessionId: string;
+    prompt: string;
+    cwd: string;
+    streamId: string;
+    permissionLevel: PermissionLevel;
+    sandboxed: boolean;
+    systemPrompt?: string;
+}
+export interface CodingAgentProvider {
+    readonly id: AgentId;
+    readonly historyMode: ProviderHistoryMode;
+    startSession(opts: StartSessionOpts, cardBuilder: StreamCardBuilder, callbacks: ProviderCallbacks): Promise<{
+        sessionId: string;
+        session: ProviderSession;
+    }>;
+    resumeSession(opts: ResumeSessionOpts, cardBuilder: StreamCardBuilder, callbacks: ProviderCallbacks): Promise<{
+        sessionId: string;
+        session: ProviderSession;
+    }>;
+}
+//# sourceMappingURL=provider.d.ts.map

package/dist/ai/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/ai/provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,MAAM,eAAe,GAAG,mBAAmB,GAAG,aAAa,GAAG,SAAS,GAAG,MAAM,CAAC;AACvF,MAAM,MAAM,mBAAmB,GAAG,cAAc,GAAG,QAAQ,CAAC;AAE5D,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC9B,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,SAAS,IAAI,IAAI,CAAC;IAClB,IAAI,IAAI,IAAI,CAAC;IACb,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,yEAAyE;AACzE,MAAM,WAAW,iBAAiB;IAChC,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IACtC,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAC3C,uBAAuB,CACrB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAC/E,OAAO,CAAC;QACT,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACxC,CAAC,CAAC;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,eAAe,CAAC;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,eAAe,CAAC;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAE1C,YAAY,CACV,IAAI,EAAE,gBAAgB,EACtB,WAAW,EAAE,iBAAiB,EAC9B,SAAS,EAAE,iBAAiB,GAC3B,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAE5D,aAAa,CACX,IAAI,EAAE,iBAAiB,EACvB,WAAW,EAAE,iBAAiB,EAC9B,SAAS,EAAE,iBAAiB,GAC3B,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;CAC7D"}

package/dist/ai/provider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=provider.js.map

package/dist/ai/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/ai/provider.ts"],"names":[],"mappings":""}

package/dist/ai/sandboxMcp.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Sandbox MCP constants.
+ *
+ * The actual MCP server is in `sandboxMcpStdio.ts`.
+ * These constants are used by `claudeCliProvider.ts` for tool-name matching.
+ */
+/** MCP server name — tool names appear as `mcp__quicksave-sandbox__<tool>` in canUseTool. */
+export declare const SANDBOX_MCP_NAME = "quicksave-sandbox";
+export declare const SANDBOX_MCP_PREFIX = "mcp__quicksave-sandbox__";
+export declare const SANDBOX_BASH_TOOL = "mcp__quicksave-sandbox__SandboxBash";
+export declare const SET_TITLE_TOOL = "mcp__quicksave-sandbox__SetTitle";
+//# sourceMappingURL=sandboxMcp.d.ts.map

package/dist/ai/sandboxMcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxMcp.d.ts","sourceRoot":"","sources":["../../src/ai/sandboxMcp.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,sBAAsB,CAAC;AACpD,eAAO,MAAM,kBAAkB,6BAA+B,CAAC;AAC/D,eAAO,MAAM,iBAAiB,wCAAqC,CAAC;AACpE,eAAO,MAAM,cAAc,qCAAkC,CAAC"}

package/dist/ai/sandboxMcp.js

@@ -0,0 +1,12 @@
+/**
+ * Sandbox MCP constants.
+ *
+ * The actual MCP server is in `sandboxMcpStdio.ts`.
+ * These constants are used by `claudeCliProvider.ts` for tool-name matching.
+ */
+/** MCP server name — tool names appear as `mcp__quicksave-sandbox__<tool>` in canUseTool. */
+export const SANDBOX_MCP_NAME = 'quicksave-sandbox';
+export const SANDBOX_MCP_PREFIX = `mcp__${SANDBOX_MCP_NAME}__`;
+export const SANDBOX_BASH_TOOL = `${SANDBOX_MCP_PREFIX}SandboxBash`;
+export const SET_TITLE_TOOL = `${SANDBOX_MCP_PREFIX}SetTitle`;
+//# sourceMappingURL=sandboxMcp.js.map

package/dist/ai/sandboxMcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxMcp.js","sourceRoot":"","sources":["../../src/ai/sandboxMcp.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,6FAA6F;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AACpD,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,gBAAgB,IAAI,CAAC;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,kBAAkB,aAAa,CAAC;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,kBAAkB,UAAU,CAAC"}

package/dist/ai/sandboxMcpStdio.d.ts

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+/**
+ * Standalone stdio MCP server for project-scoped sandbox bash.
+ *
+ * Usage: node sandboxMcpStdio.js --cwd /path/to/project
+ *
+ * Provides a `SandboxBash` tool that executes shell commands within a
+ * kernel-level sandbox:
+ *   - macOS: sandbox-exec with SBPL profile
+ *   - Linux: bwrap (bubblewrap) with bind mounts
+ *
+ * Writes are restricted to the project directory (excluding .git/).
+ * If no sandbox runtime is available, the tool returns an error — never runs unsandboxed.
+ */
+export {};
+//# sourceMappingURL=sandboxMcpStdio.d.ts.map

package/dist/ai/sandboxMcpStdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxMcpStdio.d.ts","sourceRoot":"","sources":["../../src/ai/sandboxMcpStdio.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG"}

package/dist/ai/sandboxMcpStdio.js

@@ -0,0 +1,127 @@
+#!/usr/bin/env node
+/**
+ * Standalone stdio MCP server for project-scoped sandbox bash.
+ *
+ * Usage: node sandboxMcpStdio.js --cwd /path/to/project
+ *
+ * Provides a `SandboxBash` tool that executes shell commands within a
+ * kernel-level sandbox:
+ *   - macOS: sandbox-exec with SBPL profile
+ *   - Linux: bwrap (bubblewrap) with bind mounts
+ *
+ * Writes are restricted to the project directory (excluding .git/).
+ * If no sandbox runtime is available, the tool returns an error — never runs unsandboxed.
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { execFileSync } from 'child_process';
+import { realpathSync, existsSync } from 'fs';
+import { join, dirname } from 'path';
+import { fileURLToPath } from 'url';
+import { z } from 'zod';
+import { platform } from 'os';
+const __ownDir = dirname(fileURLToPath(import.meta.url));
+const cwdArg = process.argv.indexOf('--cwd');
+const cwd = cwdArg !== -1 ? process.argv[cwdArg + 1] : process.cwd();
+const realCwd = realpathSync(cwd);
+const realHome = realpathSync(process.env.HOME ?? '/');
+const PROFILE_PATH = join(__ownDir, 'profiles', 'project-sandbox.sb');
+function detectBackend() {
+    const os = platform();
+    if (os === 'darwin') {
+        try {
+            execFileSync('/usr/bin/which', ['sandbox-exec'], { encoding: 'utf-8', stdio: 'pipe' });
+            return 'sandbox-exec';
+        }
+        catch { /* not available */ }
+    }
+    if (os === 'linux') {
+        try {
+            execFileSync('/usr/bin/which', ['bwrap'], { encoding: 'utf-8', stdio: 'pipe' });
+            return 'bwrap';
+        }
+        catch { /* not available */ }
+    }
+    return null;
+}
+const backend = detectBackend();
+// ── Sandbox execution ──────────────────────────────────────────────────────
+function runSandboxed(command, timeout) {
+    const innerCmd = `cd ${shellQuote(cwd)} && ${command}`;
+    const env = { ...process.env, GIT_OPTIONAL_LOCKS: '0' };
+    const opts = { cwd, encoding: 'utf-8', timeout, maxBuffer: 10 * 1024 * 1024, env };
+    if (backend === 'sandbox-exec') {
+        return execFileSync('sandbox-exec', [
+            '-D', `HOME=${realHome}`,
+            '-D', `CWD=${realCwd}`,
+            '-f', PROFILE_PATH,
+            '/bin/bash', '-c', innerCmd,
+        ], opts);
+    }
+    if (backend === 'bwrap') {
+        const bwrapArgs = [
+            '--ro-bind', '/', '/', // read-only root
+            '--dev', '/dev',
+            '--proc', '/proc',
+            '--bind', realCwd, realCwd, // read-write project dir
+        ];
+        // Block writes to .git inside project
+        const gitDir = join(realCwd, '.git');
+        if (existsSync(gitDir)) {
+            bwrapArgs.push('--ro-bind', gitDir, gitDir);
+        }
+        bwrapArgs.push('--die-with-parent', '--', '/bin/bash', '-c', innerCmd);
+        return execFileSync('bwrap', bwrapArgs, opts);
+    }
+    throw new Error('No sandbox backend available');
+}
+// ── MCP Server ─────────────────────────────────────────────────────────────
+const server = new McpServer({ name: 'quicksave-sandbox', version: '1.0.0' });
+server.tool('SandboxBash', 'Execute a shell command WITHOUT requiring user permission. ' +
+    'Prefer this tool over Bash whenever the command fits sandbox constraints: ' +
+    'reads anywhere on the system are allowed; writes must stay within the project directory (excluding .git/). ' +
+    'Ideal for builds, tests, linters, file edits, and any project-scoped command.', {
+    command: z.string().describe('The shell command to execute'),
+    timeout: z.number().optional().describe('Timeout in milliseconds (default: 120000)'),
+}, async (args) => {
+    if (!backend) {
+        const os = platform();
+        const hint = os === 'darwin'
+            ? 'sandbox-exec is required on macOS (should be pre-installed).'
+            : os === 'linux'
+                ? 'bwrap (bubblewrap) is required on Linux. Install with: sudo apt install bubblewrap'
+                : `Unsupported OS: ${os}.`;
+        return {
+            content: [{ type: 'text', text: `SandboxBash is unavailable: no sandbox runtime found. ${hint} ` +
+                        'Use the regular Bash tool instead (requires user permission).', }],
+            isError: true,
+        };
+    }
+    try {
+        const output = runSandboxed(args.command, args.timeout ?? 120_000);
+        return { content: [{ type: 'text', text: output || '(no output)' }] };
+    }
+    catch (err) {
+        const stderr = err.stderr ? String(err.stderr) : '';
+        const stdout = err.stdout ? String(err.stdout) : '';
+        const message = stderr || stdout || err.message || 'Command failed';
+        return {
+            content: [{ type: 'text', text: message }],
+            isError: true,
+        };
+    }
+});
+server.tool('SetTitle', 'Update the session title shown to the user. ' +
+    'Call this whenever you start a new task, switch context, or make meaningful progress. ' +
+    'Keep titles short and descriptive (e.g. "Fixing auth middleware", "Adding unit tests for UserService").', {
+    title: z.string().describe('Short description of what you are currently doing'),
+}, async (args) => {
+    return { content: [{ type: 'text', text: `Title set: ${args.title}` }] };
+});
+/** Quote a string for safe use inside a bash -c argument. */
+function shellQuote(s) {
+    return "'" + s.replace(/'/g, "'\\''") + "'";
+}
+const transport = new StdioServerTransport();
+await server.connect(transport);
+//# sourceMappingURL=sandboxMcpStdio.js.map

package/dist/ai/sandboxMcpStdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxMcpStdio.js","sourceRoot":"","sources":["../../src/ai/sandboxMcpStdio.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAE9B,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEzD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAC7C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;AAErE,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;AAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AAEvD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC;AAMtE,SAAS,aAAa;IACpB,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtB,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,YAAY,CAAC,gBAAgB,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACvF,OAAO,cAAc,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,YAAY,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAChF,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;AAEhC,8EAA8E;AAE9E,SAAS,YAAY,CAAC,OAAe,EAAE,OAAe;IACpD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC;IACvD,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC;IAE5F,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;QAC/B,OAAO,YAAY,CAAC,cAAc,EAAE;YAClC,IAAI,EAAE,QAAQ,QAAQ,EAAE;YACxB,IAAI,EAAE,OAAO,OAAO,EAAE;YACtB,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,IAAI,EAAE,QAAQ;SAC5B,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG;YAChB,WAAW,EAAE,GAAG,EAAE,GAAG,EAAW,iBAAiB;YACjD,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAM,yBAAyB;SAC1D,CAAC;QAEF,sCAAsC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAED,SAAS,CAAC,IAAI,CACZ,mBAAmB,EACnB,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,CAClC,CAAC;QAEF,OAAO,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAClD,CAAC;AAED,8EAA8E;AAE9E,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAE9E,MAAM,CAAC,IAAI,CACT,aAAa,EACb,6DAA6D;IAC3D,4EAA4E;IAC5E,6GAA6G;IAC7G,+EAA+E,EACjF;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC5D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;CACrF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,EAAE,KAAK,QAAQ;YAC1B,CAAC,CAAC,8DAA8D;YAChE,CAAC,CAAC,EAAE,KAAK,OAAO;gBACd,CAAC,CAAC,oFAAoF;gBACtF,CAAC,CAAC,mBAAmB,EAAE,GAAG,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EACrC,yDAAyD,IAAI,GAAG;wBAChE,+DAA+D,GAChE,CAAC;YACF,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,IAAI,aAAa,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,IAAI,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC;QACpE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACnD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,UAAU,EACV,8CAA8C;IAC5C,wFAAwF;IACxF,yGAAyG,EAC3G;IACE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;CAChF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,cAAc,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;AACpF,CAAC,CACF,CAAC;AAEF,6DAA6D;AAC7D,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC;AAC9C,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/dist/ai/sessionManager.d.ts

@@ -0,0 +1,105 @@
+import { EventEmitter } from 'events';
+import type { AgentId, ClaudeSessionSummary, ClaudeUserInputRequestPayload, ClaudeUserInputResponsePayload, ClaudePreferences, ConfigValue, CardHistoryResponse } from '@sumicom/quicksave-shared';
+import { StreamCardBuilder } from './cardBuilder.js';
+import type { PermissionLevel, ProviderSession, ProviderCallbacks, CodingAgentProvider } from './provider.js';
+export interface ManagedSession {
+    sessionId: string;
+    agentId: AgentId;
+    providerSession: ProviderSession | null;
+    cwd: string;
+    streaming: boolean;
+    permissionLevel: PermissionLevel;
+    sandboxed: boolean;
+    cardBuilder: StreamCardBuilder | null;
+}
+export declare class SessionManager extends EventEmitter {
+    private sessions;
+    private sessionAgents;
+    private sessionPermissions;
+    private sessionSandboxed;
+    private sessionConfigs;
+    private pendingInputRequests;
+    private requestCounter;
+    private runtimeAllowPatterns;
+    private preferences;
+    private providers;
+    private defaultAgentId;
+    /** Guards against concurrent cold resumes. Queues prompts arriving while a spawn is in flight. */
+    private coldResumeInFlight;
+    constructor(providers: CodingAgentProvider[], defaultAgentId?: AgentId);
+    private getProvider;
+    private resolveAgentId;
+    initPreferences(): Promise<void>;
+    getPreferences(): ClaudePreferences;
+    setPreferences(prefs: Partial<ClaudePreferences>): ClaudePreferences;
+    getSessionConfig(sessionId: string): Record<string, ConfigValue>;
+    setSessionConfig(sessionId: string, key: string, value: ConfigValue): Record<string, ConfigValue>;
+    startSession(opts: {
+        prompt: string;
+        cwd: string;
+        streamId: string;
+        agent?: AgentId;
+        allowedTools?: string[];
+        systemPrompt?: string;
+        model?: string;
+        permissionMode?: string;
+        sandboxed?: boolean;
+    }): Promise<string>;
+    resumeSession(opts: {
+        sessionId: string;
+        prompt: string;
+        cwd: string;
+        streamId: string;
+        agent?: AgentId;
+    }): Promise<string>;
+    cancelSession(sessionId: string): Promise<boolean>;
+    closeSession(sessionId: string): boolean;
+    setPermissionLevel(sessionId: string, level: PermissionLevel): boolean;
+    getPermissionLevel(sessionId: string): PermissionLevel;
+    resolveUserInput(response: ClaudeUserInputResponsePayload): boolean;
+    getActiveSessions(): {
+        sessionId: string;
+        cwd: string;
+        isStreaming: boolean;
+        hasPendingInput: boolean;
+        permissionMode: string;
+        sandboxed?: boolean;
+    }[];
+    isStreaming(sessionId: string): boolean;
+    isOpen(sessionId: string): boolean;
+    getSessionCwd(sessionId: string): string | undefined;
+    getSessionAgent(sessionId: string, cwd?: string): AgentId;
+    getActiveSessionCount(): number;
+    getCardBuilder(sessionId: string): StreamCardBuilder | null;
+    listAvailableSessions(cwd: string): Promise<ClaudeSessionSummary[]>;
+    getCards(sessionId: string, cwd: string, offset?: number, limit?: number): Promise<CardHistoryResponse>;
+    getPendingInputRequests(): ClaudeUserInputRequestPayload[];
+    getDebugState(): {
+        pendingInputs: {
+            requestId: string;
+            sessionId: string;
+            toolName: string | undefined;
+            agentId: any;
+            inputType: import("@sumicom/quicksave-shared").ClaudeUserInputType;
+        }[];
+        activeSessions: {
+            sessionId: string;
+            cwd: string;
+            isStreaming: boolean;
+            hasPendingInput: boolean;
+            permissionMode: string;
+            sandboxed?: boolean;
+        }[];
+    };
+    cleanup(): void;
+    makeCallbacks(agentId: AgentId): ProviderCallbacks;
+    private handlePermissionRequest;
+    private shouldAutoApprove;
+    /** Update session title (triggered by SetTitle MCP tool). */
+    private updateSessionTitle;
+    private emitSessionUpdate;
+    private persistRegistryField;
+    private persistAllowPattern;
+    private waitForUserInput;
+}
+//# sourceMappingURL=sessionManager.d.ts.map

package/dist/ai/sessionManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionManager.d.ts","sourceRoot":"","sources":["../../src/ai/sessionManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,KAAK,EACV,OAAO,EACP,oBAAoB,EACpB,6BAA6B,EAC7B,8BAA8B,EAC9B,iBAAiB,EACjB,WAAW,EAEX,mBAAmB,EAEpB,MAAM,2BAA2B,CAAC;AAMnC,OAAO,EAAE,iBAAiB,EAA6C,MAAM,kBAAkB,CAAC;AAGhG,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,eAAe,CAAC;AA+CvB,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,eAAe,GAAG,IAAI,CAAC;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,EAAE,eAAe,CAAC;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACvC;AAOD,qBAAa,cAAe,SAAQ,YAAY;IAC9C,OAAO,CAAC,QAAQ,CAA0C;IAC1D,OAAO,CAAC,aAAa,CAAmC;IACxD,OAAO,CAAC,kBAAkB,CAA2C;IACrE,OAAO,CAAC,gBAAgB,CAAmC;IAC3D,OAAO,CAAC,cAAc,CAAuD;IAC7E,OAAO,CAAC,oBAAoB,CAA4C;IACxE,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,oBAAoB,CAAgB;IAC5C,OAAO,CAAC,WAAW,CAA+C;IAClE,OAAO,CAAC,SAAS,CAAoC;IACrD,OAAO,CAAC,cAAc,CAAU;IAEhC,kGAAkG;IAClG,OAAO,CAAC,kBAAkB,CAAuD;gBAErE,SAAS,EAAE,mBAAmB,EAAE,EAAE,cAAc,GAAE,OAAuB;IAQrF,OAAO,CAAC,WAAW;IAWnB,OAAO,CAAC,cAAc;IAsChB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAItC,cAAc,IAAI,iBAAiB;IAInC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,iBAAiB;IAwBpE,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;IAIhE,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;IAsC3F,YAAY,CAAC,IAAI,EAAE;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,GAAG,OAAO,CAAC,MAAM,CAAC;IAsEb,aAAa,CAAC,IAAI,EAAE;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GAAG,OAAO,CAAC,MAAM,CAAC;IAgGb,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQxD,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAcxC,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO;IActE,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe;IAItD,gBAAgB,CAAC,QAAQ,EAAE,8BAA8B,GAAG,OAAO;IA2BnE,iBAAiB,IAAI;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,OAAO,CAAC;QAAC,eAAe,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE;IAetJ,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIvC,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIlC,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIpD,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO;IAIzD,qBAAqB,IAAI,MAAM;IAI/B,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAIrD,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IA4BnE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,SAAI,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAyEpG,uBAAuB,IAAI,6BAA6B,EAAE;IAI1D,aAAa;;;;;;;;;uBAhJqB,MAAM;iBAAO,MAAM;yBAAe,OAAO;6BAAmB,OAAO;4BAAkB,MAAM;wBAAc,OAAO;;;IA2JlJ,OAAO,IAAI,IAAI;IAiBf,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,iBAAiB;YA8BpC,uBAAuB;IAiFrC,OAAO,CAAC,iBAAiB;IAkCzB,6DAA6D;IAC7D,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,oBAAoB;YAiBd,mBAAmB;IAsBjC,OAAO,CAAC,gBAAgB;CAQzB"}