@te-river/opencode-team-mode 1.5.11 → 1.5.13

package/dist/prompts/specialists.js

@@ -132,13 +132,29 @@ the repo), you may use that tooling as designed.
 
 ## UI verification (tm_browser — you carry it)
 For user-visible frontend changes, verify through the governed tm_browser
-instead of improvising: open → navigate → read (page text) → screenshot →
-close.  It drives the user's own Chromium-family browser headful, with an
-isolated temp profile and a domain-allowlisted network layer.  Your use is
-UI verification of THIS project (local dev servers, deployed preview
-routes) — open web browsing stays with the lead and the researcher.  If
-tm_browser is unavailable on this host, or the route needs credentials you
-were not given, end your report with:
+— snapshot-first, never screenshot-guessing:
+1. \`open { url }\` once, \`navigate_page\` for follow-ups; take_snapshot
+   FIRST and act ONLY on the [uid=…] tokens it returned — guessed
+   selectors or guessed text are BANNED (the \`selector\` escape hatch is
+   only for a node the snapshot cannot express).
+2. One action, one observation: after click/fill/press_key, take_snapshot
+   (or read) again BEFORE concluding; never stack blind actions.
+3. Popups, dialogs and new tabs fold into the SAME observation round —
+   handle_dialog / select_page plus one take_snapshot, not one round each.
+4. Waits: \`wait_for { text }\` inside a 3000 ms budget (the engine
+   default); never networkidle, never sleep-then-pray.
+5. take_screenshot ONLY for what a snapshot cannot show (layout, color,
+   canvas); the aria snapshot / page text is your primary observation.
+6. Finish with \`close\`.  The tool drives the user's own Chromium-family
+   browser headful (playwright engine primary, degraded CDP pipe when
+   playwright-core is absent; display-less hosts run headless
+   automatically), on an isolated temp profile with a domain-allowlisted
+   network layer.  Your use is UI verification of THIS project (local dev
+   servers, deployed preview routes) — open web browsing stays with the
+   lead and the researcher.
+If tm_browser is unavailable on this host, the action you need is not
+offered by the degraded engine, or the route needs credentials you were
+not given, end your report with:
 \`UI NOT VERIFIED: <what still needs manual checking>\`
 so the lead can relay it honestly to the user.  Pretending otherwise is
 worse than admitting the gap.
@@ -194,18 +210,41 @@ by the team — flag prominently if that is the case.
 ## Web lookups (two channels)
 You are one of the two network roles (the other is the team lead).
 1. HIGH priority — TeamMode governed tools:
-   - tm_search (open-ended lookups): ONE call — pass the raw query, pick an
-     engine, get an extracted title+URL hit list (not the raw page).
-     Engines: bing (default) · bing-int (international results) · sogou ·
-     so (360) · baidu · bilibili · moegirl (wiki, structured) · npm
-     (packages, structured) · github (repos, structured).  On an empty
-     result switch engines — the error names the alternatives.
+   - tm_search (open-ended lookups): pass the RAW query with
+     engine:"auto" (the default) — it classifies the query, fans the
+     matching engines out IN PARALLEL, dedupes and fuses them into one
+     ranked hit list, so a hit two engines agree on outranks one
+     engine's confident junk.  Engines behind auto: bing (the only live
+     CN HTML SERP) · stackoverflow · hn · github · npm · moegirl ·
+     bilibili; name one explicitly only for a second opinion.
+     ONE SEARCH IS A SAMPLE, NOT A SEARCH: if the list does not answer
+     the question, re-query 2-3 times with a narrowed or translated
+     phrasing (a Chinese concept often has better material under its
+     English term, and vice versa) BEFORE concluding "not found", and
+     record what each query was for in EVIDENCE.  An empty result names
+     the alternative engines — switch, never retry the same one.
    - tm_webfetch (known URL): one governed GET of an allowlisted page;
-     search-engine result pages it fetches are auto-extracted to hit lists.
-   - tm_browser (interactive): open → navigate → read (page text) →
-     screenshot → close.  A visible browser window opens on desktops;
-     display-less hosts run headless automatically.  Isolated temp
-     profile; per-request domain allowlist enforced at the network layer.
+     search-engine result pages it fetches are auto-extracted to hit
+     lists.  A hit tagged （域名不在白名单，需批准）needs the approval
+     dialog before it can be read — prefer a hit you can fetch, or
+     tm_browser it.
+   - tm_browser (interactive): snapshot-first automation — open →
+     take_snapshot → act ONLY on the [uid=eN] tokens → observe again.
+     16 playwright verbs (navigate_page, take_snapshot, click, fill,
+     hover, drag, press_key, select_page, upload_file, wait_for,
+     evaluate_script, list_console_messages, list_network_requests,
+     list_pages, take_screenshot, handle_dialog) plus compat verbs open
+     / navigate / read (page text) / screenshot / close.  On a desktop
+     this opens a VISIBLE window of the user's OWN browser channel (an
+     Edge Beta default opens Edge Beta); headless only when the operator
+     sets TM_BROWSER_HEADLESS — there is no headless parameter for you
+     to pass.  When a snapshot ends with "N 个子资源请求被拦截" the
+     governance gate trimmed the page: that is NOT "the site has no
+     images" — report the blocked hosts in FINDINGS instead.  When your
+     UI work is done, action:"close" and quote the tool's own line
+     (已确认关闭 vs 警告：关闭未完全成功) — never tell the user a window
+     is gone because you asked for it to close.  Isolated temp profile;
+     navigation is domain-allowlisted at the network layer.
 2. FALLBACK — user-configured MCP/plugin tools (browser automation, web
    search, page fetchers) for what tm_search / tm_browser / tm_webfetch
    cannot do.
@@ -213,17 +252,19 @@ You are one of the two network roles (the other is the team lead).
    TM_WEBFETCH_ALLOWED_DOMAINS):
    - wiki term:  https://mobile.moegirl.org.cn/TERM
    - bilibili:   https://search.bilibili.com/all?keyword=QUERY
-   - bing:       https://cn.bing.com/search?q=QUERY (append &ensearch=1
-                 for international results)
-   - baidu:      https://www.baidu.com/s?wd=QUERY
-   - sogou:      https://www.sogou.com/web?query=QUERY
-   - 360:        https://www.so.com/s?q=QUERY
+   - bing:       https://cn.bing.com/search?q=QUERY
+   - SO question: https://api.stackexchange.com/2.3/search/advanced?order=desc&sort=relevance&q=QUERY&site=stackoverflow
+   - HN story:   https://hn.algolia.com/api/v1/search?query=QUERY&tags=story
    - npm pkg:    https://registry.npmjs.org/<pkg>/latest
    - npm search: https://registry.npmjs.org/-/v1/search?text=QUERY
    - gh repos:   https://api.github.com/search/repositories?q=QUERY
    - gh raw:     https://raw.githubusercontent.com/<owner>/<repo>/<branch>/<path>
    - gh mirror:  https://ghproxy.net/https://raw.githubusercontent.com/...
                  (use when raw.githubusercontent.com is unreachable)
+   sogou / so(360) / baidu / international bing are DEAD ENDS from a CN
+   host (a live benchmark showed anti-bot shells and 100% empty pages) —
+   never build a search URL there, even though their domains stay on the
+   fetch allowlist.
    URL-encode the query (CJK terms too).  Expand colloquial, abbreviated,
    or aliased terms to canonical forms and fetch BOTH spellings before
    concluding "not found".
@@ -231,6 +272,15 @@ Oversized pages come back as a handle — page with tm_fetch (try
 mode:"structure" first).  Never fabricate page content — an unfetchable
 claim stays unfetched and is reported as a gap.
 
+## Recon batching (PTC-first)
+Local-repo recon is PTC-first: multi-file reading, bulk grep+read
+aggregation, cross-referencing searches → ONE tm_ptc_run program
+(tm.read / tm.grep / tm.bash ride inside; ALWAYS \`return\` the
+aggregated findings).  Firing single lookups one at a time for one
+question wastes the team's time and tokens.  The same rule covers
+independent web calls: two unrelated tm_search queries belong in one
+round (or one PTC program), never in two.
+
 ## Behavioral constraints
 - When analyzing dependencies, output call-graph diagrams in mermaid format.
 - When the code under study involves authentication/authorization, tag each

package/dist/prompts/specialists.js.map

@@ -1 +1 @@
-{"version":3,"file":"specialists.js","sourceRoot":"","sources":["../../src/prompts/specialists.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6B/B,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;CAwBjC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2C9B,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2D5B,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6EhC,CAAA"}
+{"version":3,"file":"specialists.js","sourceRoot":"","sources":["../../src/prompts/specialists.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6B/B,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;CAwBjC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2C9B,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2E5B,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+GhC,CAAA"}

package/dist/tm/args-schema.d.ts

@@ -27,8 +27,20 @@ export declare function buildWebfetchArgsSchema(): Promise<Record<string, unknow
  * tm_search args — same ZodRawShape treatment (BUG#3 class); descriptor
  * fallback when zod is absent.  tm/index awaits this and passes the result
  * into buildTmSearchTool as `deps.args`.
+ *
+ * Wave B M1 — the engine list is DERIVED from search.ts's live
+ * `SEARCH_ENGINE_NAMES` + `AUTO_ENGINE_KEY`, never hand-written: a static
+ * copy here once drifted to a dead roster (bing-int/sogou/so/baidu kept,
+ * stackoverflow/hn/auto missing, default lied "bing").  Because
+ * buildTmSearchTool uses `deps.args ?? fallback`, this schema IS the
+ * model-visible surface in production (the search.ts fallback never fires),
+ * so it must not go stale.  `defaultEngine` falls back to
+ * resolveTmConfig().searchDefaultEngine so the descriptor states the real
+ * default (auto) — callers may pass cfg.searchDefaultEngine explicitly.
+ * The §6m-s anti-drift test asserts the descriptor names every
+ * SEARCH_ENGINE_NAMES entry and none of the removed engines.
  */
-export declare function buildSearchArgsSchema(): Promise<Record<string, unknown>>;
+export declare function buildSearchArgsSchema(defaultEngine?: string): Promise<Record<string, unknown>>;
 /**
  * tm_memory args — same ZodRawShape treatment (BUG#3 class); descriptor
  * fallback when zod is absent.
@@ -37,6 +49,24 @@ export declare function buildMemoryArgsSchema(): Promise<Record<string, unknown>
 /**
  * tm_browser args — same ZodRawShape treatment (BUG#3 class); descriptor
  * fallback when zod is absent.
+ *
+ * STRIP BEHAVIOR / WHY EVERY FIELD IS DECLARED: this is a RAW shape, never
+ * wrapped in z.object() (BUG#3), so no zod-level .strip()/.passthrough()
+ * applies and execute() reads rawArgs verbatim.  But the host serializes
+ * exactly these keys into the LLM parameter spec — an undeclared field is
+ * invisible to the model and never reaches browser.ts, i.e. the shape is a
+ * CLOSED param surface in effect.  T5's 16 playwright verbs
+ * (BROWSER_PLAYWRIGHT_ACTIONS, browser.ts:505) + the 5 compat verbs consume
+ * 19 fields across execute/act (args.uid/selector/targetUid/targetSelector/
+ * text/key/function/expression/filePath/files/index/timeoutMs/dialogAction/
+ * promptText/clear/fullPage/image, browser.ts act() + execute()) — every one
+ * is declared below, or the corresponding verb silently loses its input.
+ *
+ * `headless` is DELIBERATELY not declared (2026-09-18): it used to be a model
+ * arg, `Boolean("false")` read as true, and one such call pinned the whole
+ * host process to a headless browser that every anti-bot gate then rejected.
+ * Mode is an operator setting (TM_BROWSER_HEADLESS) — a closed surface here
+ * is the fix, not a validation layer.
  */
 export declare function buildBrowserArgsSchema(): Promise<Record<string, unknown>>;
 //# sourceMappingURL=args-schema.d.ts.map

package/dist/tm/args-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"args-schema.d.ts","sourceRoot":"","sources":["../../src/tm/args-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAkCH,iBAAe,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CA2ElF;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAE3B;;;;;GAKG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA+B3E;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAiBhF;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAoB9E;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA2B9E;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAkB/E"}
+{"version":3,"file":"args-schema.d.ts","sourceRoot":"","sources":["../../src/tm/args-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAoCH,iBAAe,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAuFlF;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAE3B;;;;;GAKG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA2D3E;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA6BhF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,qBAAqB,CACzC,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA2BlC;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA+C9E;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAiE/E"}

package/dist/tm/args-schema.js

@@ -8,6 +8,7 @@
  * ...}}` garbage args in real sessions (the model wrapped its args 3/3
  * times), even though flat args reached execute fine.
  */
+import { resolveTmConfig } from "./config.js";
 /**
  * Load zod when the host environment provides it (opencode ships it as a
  * peer); fall back to plain arg descriptors so the plugin never hard-depends
@@ -41,7 +42,7 @@ async function buildArgsSchemas() {
             tm_read: describe(null, null, "path: string (required)"),
             tm_grep: describe(null, null, "pattern: string (required), path: string (optional)"),
             tm_bash: describe(null, null, "command: string (required, read-only allowlisted)"),
-            tm_fetch: describe(null, null, "ref: string (required), access_token: string, offset: int, limit: int, mode: lines|structure"),
+            tm_fetch: describe(null, null, "ref: string (required), access_token: string, offset: int, limit: int, mode: lines|structure, fields: dot-path (json handle projection)"),
         };
     }
     const zz = z;
@@ -54,10 +55,13 @@ async function buildArgsSchemas() {
         },
         tm_grep: {
             pattern: zz.string().describe("Regex to search (ripgrep syntax)."),
+            // describe-LAST on every optional chain — zod v4 drops a description
+            // applied before .optional() when the shape is serialized (see
+            // buildMemoryArgsSchema); a required field's describe stays first.
             path: zz
                 .string()
-                .describe("Optional directory scope, relative to the project root.")
-                .optional(),
+                .optional()
+                .describe("Optional directory scope, relative to the project root."),
         },
         tm_bash: {
             command: zz
@@ -70,24 +74,28 @@ async function buildArgsSchemas() {
                 .describe("Offload handle ref: tm://runs/{run_id}/steps/{step_id}/result"),
             access_token: zz
                 .string()
-                .describe("HMAC token from the offload handle (may also ride the ref fragment).")
-                .optional(),
+                .optional()
+                .describe("HMAC token from the offload handle (may also ride the ref fragment)."),
             offset: zz
                 .number()
                 .int()
                 .min(0)
-                .describe("0-based line offset of the first line to return.")
-                .optional(),
+                .optional()
+                .describe("0-based line offset of the first line to return."),
             limit: zz
                 .number()
                 .int()
                 .min(1)
-                .describe("Max lines per fetch, capped at TM_FETCH_MAX_LINES (default 2000).")
-                .optional(),
+                .optional()
+                .describe("Max lines per fetch, capped at TM_FETCH_MAX_LINES (default 2000)."),
             mode: zz
                 .enum(["lines", "structure"])
-                .describe("structure = ~100-token TOC / key tree / error-line map; try it first.")
-                .optional(),
+                .optional()
+                .describe("structure = ~100-token TOC / key tree / error-line map; try it first."),
+            fields: zz
+                .string()
+                .optional()
+                .describe("Dot-path projection over a JSON handle (T4): e.g. items[].name or user.email; returns ONLY the matched values. Ignored on a non-JSON handle."),
         },
     };
 }
@@ -104,7 +112,7 @@ export async function buildPtcArgsSchema() {
         return {
             program: { descriptor: "program: string (required, async fn body, ≤TM_PTC_MAX_PROGRAM_CHARS)" },
             label: { descriptor: "label: string (optional, ≤80 chars)" },
-            budgets: { descriptor: "budgets: { max_calls?, max_errors?, timeout_ms? } (optional, tighten-only)" },
+            budgets: { descriptor: "budgets: { max_calls?, max_errors?, timeout_ms? } (optional, tighten-only; any other key is rejected)" },
         };
     }
     const zz = z;
@@ -112,11 +120,25 @@ export async function buildPtcArgsSchema() {
         program: zz
             .string()
             .describe("Async function body. Available: tm.read(args), tm.grep(args), tm.bash(args), tm.fetch(args) — each returns {ok:true, data} or {ok:false, error:{tool,phase,line?,message}}. `return` a value for the aggregation summary."),
-        label: zz.string().describe("Optional run label (≤80 chars).").optional(),
+        // Wave B Minor③: zod v4 DROPS a description set before .optional() when
+        // the shape is serialized, so every optional chain here is describe-LAST
+        // (matches buildMemoryArgsSchema / buildBrowserArgsSchema).
+        label: zz.string().optional().describe("Optional run label (≤80 chars)."),
+        // Fix batch T1: an EXPLICIT zod object — z.any() let host-side arg
+        // handling mangle the budgets value so parsePtcArgs never saw it and
+        // the caller's budgets silently fell back to the defaults.
+        // Wave B Minor②: .strict() rejects unknown budget keys (a typo like
+        // max_call silently read as an omitted default before — now it fails
+        // loudly).  parsePtcArgs enforces the same at the runtime layer.
         budgets: zz
-            .any()
-            .describe("Optional budgets object { max_calls?, max_errors?, timeout_ms? } — tighten-only, clamped to the TM_PTC_* ceilings.")
-            .optional(),
+            .object({
+            max_calls: zz.number().int().min(1).optional().describe("Max bridged tm_* calls (tighten-only)."),
+            max_errors: zz.number().int().min(1).optional().describe("Max failed bridged calls (tighten-only)."),
+            timeout_ms: zz.number().int().min(1).optional().describe("Wall-clock budget in ms (floor 5000, tighten-only)."),
+        })
+            .strict()
+            .optional()
+            .describe("Optional budgets object { max_calls?, max_errors?, timeout_ms? } — tighten-only, clamped to the TM_PTC_* ceilings. Unknown keys are rejected."),
     };
 }
 /**
@@ -129,35 +151,58 @@ export async function buildWebfetchArgsSchema() {
     if (!z) {
         return {
             url: { descriptor: "url: string (required, absolute https URL on an allowlisted host, query URL-encoded)" },
+            fields: { descriptor: "fields: string (optional, dot-path projection over a JSON response, e.g. items[].name; ignored on non-JSON)" },
         };
     }
+    // describe-LAST on the optional `fields` chain (zod v4 drops a
+    // description set before .optional(); see buildMemoryArgsSchema).
     const zz = z;
     return {
         url: zz
             .string()
-            .describe("Absolute https URL on an allowlisted host (seeded: mobile.moegirl.org.cn, search.bilibili.com, cn.bing.com, www.baidu.com, www.sogou.com, www.so.com, registry.npmjs.org, api.github.com). URL-encode the query (CJK terms too)."),
+            .describe("Absolute https URL on an allowlisted host (seeded: mobile.moegirl.org.cn, search.bilibili.com, cn.bing.com, www.baidu.com, www.sogou.com, www.so.com, registry.npmjs.org, api.github.com, api.stackexchange.com, hn.algolia.com). URL-encode the query (CJK terms too)."),
+        fields: zz
+            .string()
+            .optional()
+            .describe("Dot-path projection over a JSON response body (Wave B M2): e.g. items[].name or user.email — returns ONLY the matched values, mirroring tm_fetch's `fields`. Ignored when the response is not JSON."),
     };
 }
 /**
  * tm_search args — same ZodRawShape treatment (BUG#3 class); descriptor
  * fallback when zod is absent.  tm/index awaits this and passes the result
  * into buildTmSearchTool as `deps.args`.
+ *
+ * Wave B M1 — the engine list is DERIVED from search.ts's live
+ * `SEARCH_ENGINE_NAMES` + `AUTO_ENGINE_KEY`, never hand-written: a static
+ * copy here once drifted to a dead roster (bing-int/sogou/so/baidu kept,
+ * stackoverflow/hn/auto missing, default lied "bing").  Because
+ * buildTmSearchTool uses `deps.args ?? fallback`, this schema IS the
+ * model-visible surface in production (the search.ts fallback never fires),
+ * so it must not go stale.  `defaultEngine` falls back to
+ * resolveTmConfig().searchDefaultEngine so the descriptor states the real
+ * default (auto) — callers may pass cfg.searchDefaultEngine explicitly.
+ * The §6m-s anti-drift test asserts the descriptor names every
+ * SEARCH_ENGINE_NAMES entry and none of the removed engines.
  */
-export async function buildSearchArgsSchema() {
+export async function buildSearchArgsSchema(defaultEngine) {
+    const { AUTO_ENGINE_KEY, SEARCH_ENGINE_NAMES } = await import("./search.js");
+    const defEngine = (defaultEngine && defaultEngine.trim()) || resolveTmConfig().searchDefaultEngine || AUTO_ENGINE_KEY;
+    const engineList = `${AUTO_ENGINE_KEY}|${SEARCH_ENGINE_NAMES.join("|")}`;
+    const engineDesc = `engine: ${engineList} (optional, default ${defEngine}). ` +
+        `"${AUTO_ENGINE_KEY}" classifies the query and fans the matching engines out in parallel ` +
+        `(weighted-RRF fused top-10); an explicit name runs that single engine ` +
+        `(bing = the live CN HTML SERP; stackoverflow/hn/npm/github/moegirl/bilibili = structured JSON).`;
     const z = await loadZod();
     if (!z) {
         return {
             query: { descriptor: "query: string (required, raw text — CJK fine, encoded here)" },
-            engine: { descriptor: "engine: bing|bing-int|sogou|so|baidu|bilibili|npm|github (optional, default bing)" },
+            engine: { descriptor: engineDesc },
         };
     }
     const zz = z;
     return {
         query: zz.string().describe("Raw search query — pass text as-is; the tool URL-encodes it (CJK included)."),
-        engine: zz
-            .string()
-            .describe("bing (default) | bing-int (international results) | sogou | so (360) | baidu | bilibili | moegirl (wiki search API, structured) | npm (registry search, structured) | github (repo search API, structured).")
-            .optional(),
+        engine: zz.string().optional().describe(engineDesc),
     };
 }
 /**
@@ -168,46 +213,117 @@ export async function buildMemoryArgsSchema() {
     const z = await loadZod();
     if (!z) {
         return {
-            action: { descriptor: "action: add|search|list|forget (required)" },
+            action: { descriptor: "action: add|search|list|forget|compact (required)" },
             title: { descriptor: "title: string (add/forget)" },
             content: { descriptor: "content: string (add, ≤4000 chars)" },
             category: { descriptor: "category: string (add, optional)" },
             keywords: { descriptor: "keywords: string[] or comma string (add, optional)" },
             usage_scenario: { descriptor: "usage_scenario: string[] or comma string (add, optional)" },
             query: { descriptor: "query: string (search)" },
-            scope: { descriptor: "scope: project|global (optional, default project)" },
+            scope: { descriptor: 'scope: project|global|session (optional, default project; compact also accepts "all")' },
+            apply: { descriptor: "apply: boolean (compact only; absent = dry-run, true performs the merges)" },
         };
     }
+    // `.optional().describe(...)` — the description MUST be applied to the
+    // FINAL wrapper: zod (v4 confirmed) drops a description set before
+    // .optional() when the host serializes the shape, so describe-first would
+    // leave the model blind to the very text this descriptor exists to carry.
     const zz = z;
     return {
-        action: zz.string().describe("add | search | list | forget."),
-        title: zz.string().describe("Memory title (add/forget).").optional(),
-        content: zz.string().describe("One condensed fact, ≤4000 chars (add).").optional(),
-        category: zz.string().describe("Category slug, e.g. project_tech_stack (add, optional).").optional(),
-        keywords: zz.string().describe("Comma-separated keywords (add, optional).").optional(),
-        usage_scenario: zz.string().describe("Comma-separated when-to-use scenarios (add, optional).").optional(),
-        query: zz.string().describe("Search query (search).").optional(),
-        scope: zz.string().describe("project (default) | global.").optional(),
+        action: zz.string().describe("add | search | list | forget | compact."),
+        title: zz.string().optional().describe("Memory title (add/forget)."),
+        content: zz.string().optional().describe("One condensed fact, ≤4000 chars (add)."),
+        category: zz.string().optional().describe("Category slug, e.g. project_tech_stack (add, optional)."),
+        keywords: zz.string().optional().describe("Comma-separated keywords (add, optional)."),
+        usage_scenario: zz.string().optional().describe("Comma-separated when-to-use scenarios (add, optional)."),
+        query: zz.string().optional().describe("Search query (search)."),
+        scope: zz
+            .string()
+            .optional()
+            .describe('project (default) | global | session (transient, this conversation only); compact also accepts "all".'),
+        // memory.ts execute() reads args.apply (truthy gate on compact); the raw
+        // shape IS the model-visible param surface (the host serializes it into
+        // the LLM parameter spec), so an undeclared key is unreachable — declare
+        // it here or the model can never request a real compaction.
+        apply: zz
+            .boolean()
+            .optional()
+            .describe("compact only: absent = dry-run (report planned merges), true = perform them (originals backed up under memories/.compact-backup/)."),
     };
 }
 /**
  * tm_browser args — same ZodRawShape treatment (BUG#3 class); descriptor
  * fallback when zod is absent.
+ *
+ * STRIP BEHAVIOR / WHY EVERY FIELD IS DECLARED: this is a RAW shape, never
+ * wrapped in z.object() (BUG#3), so no zod-level .strip()/.passthrough()
+ * applies and execute() reads rawArgs verbatim.  But the host serializes
+ * exactly these keys into the LLM parameter spec — an undeclared field is
+ * invisible to the model and never reaches browser.ts, i.e. the shape is a
+ * CLOSED param surface in effect.  T5's 16 playwright verbs
+ * (BROWSER_PLAYWRIGHT_ACTIONS, browser.ts:505) + the 5 compat verbs consume
+ * 19 fields across execute/act (args.uid/selector/targetUid/targetSelector/
+ * text/key/function/expression/filePath/files/index/timeoutMs/dialogAction/
+ * promptText/clear/fullPage/image, browser.ts act() + execute()) — every one
+ * is declared below, or the corresponding verb silently loses its input.
+ *
+ * `headless` is DELIBERATELY not declared (2026-09-18): it used to be a model
+ * arg, `Boolean("false")` read as true, and one such call pinned the whole
+ * host process to a headless browser that every anti-bot gate then rejected.
+ * Mode is an operator setting (TM_BROWSER_HEADLESS) — a closed surface here
+ * is the fix, not a validation layer.
  */
 export async function buildBrowserArgsSchema() {
     const z = await loadZod();
+    const ACTION_LIST = "navigate_page | take_snapshot | click | fill | hover | drag | press_key | select_page | upload_file | wait_for | evaluate_script | list_console_messages | list_network_requests | list_pages | take_screenshot | handle_dialog (16 playwright verbs) | open | navigate | read | screenshot | close (compat verbs).";
     if (!z) {
         return {
-            action: { descriptor: 'action: open|navigate|read|screenshot|close (required)' },
-            url: { descriptor: 'url: string (open/navigate, allowlisted https)' },
-            headless: { descriptor: 'headless: boolean (open, optional — default auto)' },
+            action: { descriptor: `action: ${ACTION_LIST} (required)` },
+            url: { descriptor: "url: string (open/navigate/navigate_page, allowlisted https)" },
+            image: { descriptor: "image: true with take_screenshot — inline the PNG pixels in this result" },
+            uid: { descriptor: "uid: snapshot [uid=eN] token (click/fill/hover/drag/upload_file/wait_for)" },
+            selector: { descriptor: "selector: CSS/text locator escape hatch (only when a snapshot cannot express the node)" },
+            targetUid: { descriptor: "targetUid: drag destination uid" },
+            targetSelector: { descriptor: "targetSelector: drag destination selector" },
+            text: { descriptor: "text: fill value / wait_for visible text" },
+            key: { descriptor: "key: press_key chord, e.g. Enter|Control+A" },
+            function: { descriptor: "function: JS function source for evaluate_script" },
+            expression: { descriptor: "expression: alias of function (evaluate_script)" },
+            filePath: { descriptor: "filePath: local file path for upload_file" },
+            files: { descriptor: "files: alias of filePath — single path or array of paths" },
+            index: { descriptor: "index: select_page target tab index from list_pages" },
+            timeoutMs: { descriptor: "timeoutMs: wait_for budget in ms (default 3000, clamped 100..30000)" },
+            dialogAction: { descriptor: "dialogAction: accept|dismiss for handle_dialog (default accept)" },
+            promptText: { descriptor: "promptText: prompt-dialog reply text for handle_dialog accept" },
+            clear: { descriptor: "clear: drain the console buffer after list_console_messages" },
+            fullPage: { descriptor: "fullPage: take_screenshot captures the full page (default viewport only)" },
         };
     }
+    // describe-LAST on every optional chain — zod v4 drops a description set
+    // before .optional() when the shape is serialized (see buildMemoryArgsSchema).
     const zz = z;
+    const str = (d) => zz.string().optional().describe(d);
+    const bool = (d) => zz.boolean().optional().describe(d);
     return {
-        action: zz.string().describe('open | navigate | read | screenshot | close.'),
-        url: zz.string().describe('Absolute https URL on an allowlisted host (open/navigate). URL-encode the query (CJK terms too).').optional(),
-        headless: zz.boolean().describe('Force headless/headful on open (optional — default auto by display availability).').optional(),
+        action: zz.string().describe(ACTION_LIST),
+        url: str("Absolute https URL on an allowlisted host (open/navigate/navigate_page). URL-encode the query (CJK terms too)."),
+        image: bool("take_screenshot only: inline the PNG pixels into this tool result (default false = path only; pixels cost context, so ask only when the screenshot IS the evidence)."),
+        uid: str("Snapshot [uid=eN] token from the LATEST take_snapshot (click/fill/hover/drag source/upload_file/wait_for)."),
+        selector: str("CSS/text locator escape hatch — only for a node the snapshot cannot express; never guess locators."),
+        targetUid: str("drag destination uid from the latest take_snapshot."),
+        targetSelector: str("drag destination selector escape hatch."),
+        text: str("fill value, or the visible text to wait for with wait_for (uid or text — one of them)."),
+        key: str('press_key chord, e.g. "Enter" or "Control+A".'),
+        function: str("JS function/expression source for evaluate_script (returns the JSON-serialized value)."),
+        expression: str("Alias of function for evaluate_script."),
+        filePath: str("Local file path for upload_file (must exist on disk)."),
+        files: zz.any().optional().describe("Alias of filePath for upload_file — a single path or an array of paths."),
+        index: zz.number().int().min(0).optional().describe("select_page target tab index (0-based, from list_pages)."),
+        timeoutMs: zz.number().int().min(100).optional().describe("wait_for visibility budget in ms (engine default 3000, clamped to 30000)."),
+        dialogAction: str("handle_dialog verdict: accept (default) | dismiss."),
+        promptText: str("Reply text when handle_dialog accepts a prompt()-type dialog."),
+        clear: bool("Drain the buffered console messages after list_console_messages."),
+        fullPage: bool("take_screenshot captures the full page (default: viewport only)."),
     };
 }
 //# sourceMappingURL=args-schema.js.map

package/dist/tm/args-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"args-schema.js","sourceRoot":"","sources":["../../src/tm/args-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;GAIG;AACH,KAAK,UAAU,OAAO;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAA;QAClB,MAAM,GAAG,GAAY,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,CAAC,GACJ,GAAuB,EAAE,CAAC;YAC1B,GAAqC,EAAE,OAAO,EAAE,CAAC;YAClD,IAAI,CAAA;QACN,OAAO,CAAC,IAAI,OAAQ,CAA0B,CAAC,MAAM,KAAK,UAAU;YAClE,CAAC,CAAE,CAA6B;YAChC,CAAC,CAAC,IAAI,CAAA;IACV,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,CAAiC,EACjC,MAAe,EACf,QAAgB;IAEhB,IAAI,CAAC,IAAI,OAAQ,CAA0B,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAClE,OAAO,MAAiC,CAAA;IAC1C,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AACjC,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,yBAAyB,CAAC;YACxD,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,qDAAqD,CAAC;YACpF,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,mDAAmD,CAAC;YAClF,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,8FAA8F,CAAC;SAC/H,CAAA;IACH,CAAC;IAWD,MAAM,EAAE,GAAG,CAKV,CAAA;IACD,+CAA+C;IAC/C,OAAO;QACL,OAAO,EAAE;YACP,IAAI,EAAE,EAAE;iBACL,MAAM,EAAE;iBACR,QAAQ,CACP,8JAA8J,CAC/J;SACJ;QACD,OAAO,EAAE;YACP,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YAClE,IAAI,EAAE,EAAE;iBACL,MAAM,EAAE;iBACR,QAAQ,CAAC,yDAAyD,CAAC;iBACnE,QAAQ,EAAE;SACd;QACD,OAAO,EAAE;YACP,OAAO,EAAE,EAAE;iBACR,MAAM,EAAE;iBACR,QAAQ,CACP,8FAA8F,CAC/F;SACJ;QACD,QAAQ,EAAE;YACR,GAAG,EAAE,EAAE;iBACJ,MAAM,EAAE;iBACR,QAAQ,CAAC,+DAA+D,CAAC;YAC5E,YAAY,EAAE,EAAE;iBACb,MAAM,EAAE;iBACR,QAAQ,CAAC,sEAAsE,CAAC;iBAChF,QAAQ,EAAE;YACb,MAAM,EAAE,EAAE;iBACP,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,kDAAkD,CAAC;iBAC5D,QAAQ,EAAE;YACb,KAAK,EAAE,EAAE;iBACN,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,mEAAmE,CAAC;iBAC7E,QAAQ,EAAE;YACb,IAAI,EAAE,EAAE;iBACL,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;iBAC5B,QAAQ,CAAC,uEAAuE,CAAC;iBACjF,QAAQ,EAAE;SACd;KACF,CAAA;AACH,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAE3B;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,OAAO,EAAE,EAAE,UAAU,EAAE,sEAAsE,EAAE;YAC/F,KAAK,EAAE,EAAE,UAAU,EAAE,qCAAqC,EAAE;YAC5D,OAAO,EAAE,EAAE,UAAU,EAAE,4EAA4E,EAAE;SACtG,CAAA;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAOV,CAAA;IACD,OAAO;QACL,OAAO,EAAE,EAAE;aACR,MAAM,EAAE;aACR,QAAQ,CACP,2NAA2N,CAC5N;QACH,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC,QAAQ,EAAE;QACzE,OAAO,EAAE,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,CACP,oHAAoH,CACrH;aACA,QAAQ,EAAE;KACd,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,GAAG,EAAE,EAAE,UAAU,EAAE,sFAAsF,EAAE;SAC5G,CAAA;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAEV,CAAA;IACD,OAAO;QACL,GAAG,EAAE,EAAE;aACJ,MAAM,EAAE;aACR,QAAQ,CACP,kOAAkO,CACnO;KACJ,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,KAAK,EAAE,EAAE,UAAU,EAAE,6DAA6D,EAAE;YACpF,MAAM,EAAE,EAAE,UAAU,EAAE,mFAAmF,EAAE;SAC5G,CAAA;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAEV,CAAA;IACD,OAAO;QACL,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;QAC1G,MAAM,EAAE,EAAE;aACP,MAAM,EAAE;aACR,QAAQ,CACP,6MAA6M,CAC9M;aACA,QAAQ,EAAE;KACd,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,MAAM,EAAE,EAAE,UAAU,EAAE,2CAA2C,EAAE;YACnE,KAAK,EAAE,EAAE,UAAU,EAAE,4BAA4B,EAAE;YACnD,OAAO,EAAE,EAAE,UAAU,EAAE,oCAAoC,EAAE;YAC7D,QAAQ,EAAE,EAAE,UAAU,EAAE,kCAAkC,EAAE;YAC5D,QAAQ,EAAE,EAAE,UAAU,EAAE,oDAAoD,EAAE;YAC9E,cAAc,EAAE,EAAE,UAAU,EAAE,0DAA0D,EAAE;YAC1F,KAAK,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAAE;YAC/C,KAAK,EAAE,EAAE,UAAU,EAAE,mDAAmD,EAAE;SAC3E,CAAA;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAEV,CAAA;IACD,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QAC7D,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE;QACpE,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC,QAAQ,EAAE;QAClF,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC,CAAC,QAAQ,EAAE;QACpG,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC,CAAC,QAAQ,EAAE;QACtF,cAAc,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC,CAAC,QAAQ,EAAE;QACzG,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;QAChE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,QAAQ,EAAE;KACtE,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,MAAM,EAAE,EAAE,UAAU,EAAE,wDAAwD,EAAE;YAChF,GAAG,EAAE,EAAE,UAAU,EAAE,gDAAgD,EAAE;YACrE,QAAQ,EAAE,EAAE,UAAU,EAAE,mDAAmD,EAAE;SAC9E,CAAA;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAGV,CAAA;IACD,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;QAC5E,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kGAAkG,CAAC,CAAC,QAAQ,EAAE;QACxI,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,mFAAmF,CAAC,CAAC,QAAQ,EAAE;KAChI,CAAA;AACH,CAAC"}
+{"version":3,"file":"args-schema.js","sourceRoot":"","sources":["../../src/tm/args-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C;;;;GAIG;AACH,KAAK,UAAU,OAAO;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAA;QAClB,MAAM,GAAG,GAAY,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,CAAC,GACJ,GAAuB,EAAE,CAAC;YAC1B,GAAqC,EAAE,OAAO,EAAE,CAAC;YAClD,IAAI,CAAA;QACN,OAAO,CAAC,IAAI,OAAQ,CAA0B,CAAC,MAAM,KAAK,UAAU;YAClE,CAAC,CAAE,CAA6B;YAChC,CAAC,CAAC,IAAI,CAAA;IACV,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,CAAiC,EACjC,MAAe,EACf,QAAgB;IAEhB,IAAI,CAAC,IAAI,OAAQ,CAA0B,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAClE,OAAO,MAAiC,CAAA;IAC1C,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AACjC,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,yBAAyB,CAAC;YACxD,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,qDAAqD,CAAC;YACpF,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,mDAAmD,CAAC;YAClF,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,yIAAyI,CAAC;SAC1K,CAAA;IACH,CAAC;IAWD,MAAM,EAAE,GAAG,CAQV,CAAA;IACD,+CAA+C;IAC/C,OAAO;QACL,OAAO,EAAE;YACP,IAAI,EAAE,EAAE;iBACL,MAAM,EAAE;iBACR,QAAQ,CACP,8JAA8J,CAC/J;SACJ;QACD,OAAO,EAAE;YACP,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YAClE,qEAAqE;YACrE,+DAA+D;YAC/D,mEAAmE;YACnE,IAAI,EAAE,EAAE;iBACL,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,yDAAyD,CAAC;SACvE;QACD,OAAO,EAAE;YACP,OAAO,EAAE,EAAE;iBACR,MAAM,EAAE;iBACR,QAAQ,CACP,8FAA8F,CAC/F;SACJ;QACD,QAAQ,EAAE;YACR,GAAG,EAAE,EAAE;iBACJ,MAAM,EAAE;iBACR,QAAQ,CAAC,+DAA+D,CAAC;YAC5E,YAAY,EAAE,EAAE;iBACb,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,sEAAsE,CAAC;YACnF,MAAM,EAAE,EAAE;iBACP,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CAAC,kDAAkD,CAAC;YAC/D,KAAK,EAAE,EAAE;iBACN,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CAAC,mEAAmE,CAAC;YAChF,IAAI,EAAE,EAAE;iBACL,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;iBAC5B,QAAQ,EAAE;iBACV,QAAQ,CAAC,uEAAuE,CAAC;YACpF,MAAM,EAAE,EAAE;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,8IAA8I,CAC/I;SACJ;KACF,CAAA;AACH,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAE3B;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,OAAO,EAAE,EAAE,UAAU,EAAE,sEAAsE,EAAE;YAC/F,KAAK,EAAE,EAAE,UAAU,EAAE,qCAAqC,EAAE;YAC5D,OAAO,EAAE,EAAE,UAAU,EAAE,uGAAuG,EAAE;SACjI,CAAA;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAqBV,CAAA;IACD,OAAO;QACL,OAAO,EAAE,EAAE;aACR,MAAM,EAAE;aACR,QAAQ,CACP,2NAA2N,CAC5N;QACH,wEAAwE;QACxE,yEAAyE;QACzE,4DAA4D;QAC5D,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACzE,mEAAmE;QACnE,qEAAqE;QACrE,2DAA2D;QAC3D,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,OAAO,EAAE,EAAE;aACR,MAAM,CAAC;YACN,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YACjG,UAAU,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACpG,UAAU,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;SAChH,CAAC;aACD,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,+IAA+I,CAChJ;KACJ,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,GAAG,EAAE,EAAE,UAAU,EAAE,sFAAsF,EAAE;YAC3G,MAAM,EAAE,EAAE,UAAU,EAAE,6GAA6G,EAAE;SACtI,CAAA;IACH,CAAC;IACD,+DAA+D;IAC/D,kEAAkE;IAClE,MAAM,EAAE,GAAG,CAKV,CAAA;IACD,OAAO;QACL,GAAG,EAAE,EAAE;aACJ,MAAM,EAAE;aACR,QAAQ,CACP,yQAAyQ,CAC1Q;QACH,MAAM,EAAE,EAAE;aACP,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,qMAAqM,CACtM;KACJ,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAsB;IAEtB,MAAM,EAAE,eAAe,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;IAC5E,MAAM,SAAS,GACb,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,eAAe,EAAE,CAAC,mBAAmB,IAAI,eAAe,CAAA;IACrG,MAAM,UAAU,GAAG,GAAG,eAAe,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IACxE,MAAM,UAAU,GACd,WAAW,UAAU,uBAAuB,SAAS,KAAK;QAC1D,IAAI,eAAe,uEAAuE;QAC1F,wEAAwE;QACxE,iGAAiG,CAAA;IACnG,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,KAAK,EAAE,EAAE,UAAU,EAAE,6DAA6D,EAAE;YACpF,MAAM,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE;SACnC,CAAA;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAKV,CAAA;IACD,OAAO;QACL,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;QAC1G,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;KACpD,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,MAAM,EAAE,EAAE,UAAU,EAAE,mDAAmD,EAAE;YAC3E,KAAK,EAAE,EAAE,UAAU,EAAE,4BAA4B,EAAE;YACnD,OAAO,EAAE,EAAE,UAAU,EAAE,oCAAoC,EAAE;YAC7D,QAAQ,EAAE,EAAE,UAAU,EAAE,kCAAkC,EAAE;YAC5D,QAAQ,EAAE,EAAE,UAAU,EAAE,oDAAoD,EAAE;YAC9E,cAAc,EAAE,EAAE,UAAU,EAAE,0DAA0D,EAAE;YAC1F,KAAK,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAAE;YAC/C,KAAK,EAAE,EAAE,UAAU,EAAE,uFAAuF,EAAE;YAC9G,KAAK,EAAE,EAAE,UAAU,EAAE,2EAA2E,EAAE;SACnG,CAAA;IACH,CAAC;IACD,uEAAuE;IACvE,mEAAmE;IACnE,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,EAAE,GAAG,CAMV,CAAA;IACD,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACvE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACpE,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QAClF,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;QACpG,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QACtF,cAAc,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;QACzG,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAChE,KAAK,EAAE,EAAE;aACN,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,uGAAuG,CAAC;QACpH,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,4DAA4D;QAC5D,KAAK,EAAE,EAAE;aACN,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,oIAAoI,CAAC;KAClJ,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,MAAM,WAAW,GACf,qTAAqT,CAAA;IACvT,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,MAAM,EAAE,EAAE,UAAU,EAAE,WAAW,WAAW,aAAa,EAAE;YAC3D,GAAG,EAAE,EAAE,UAAU,EAAE,8DAA8D,EAAE;YACnF,KAAK,EAAE,EAAE,UAAU,EAAE,yEAAyE,EAAE;YAChG,GAAG,EAAE,EAAE,UAAU,EAAE,2EAA2E,EAAE;YAChG,QAAQ,EAAE,EAAE,UAAU,EAAE,wFAAwF,EAAE;YAClH,SAAS,EAAE,EAAE,UAAU,EAAE,iCAAiC,EAAE;YAC5D,cAAc,EAAE,EAAE,UAAU,EAAE,2CAA2C,EAAE;YAC3E,IAAI,EAAE,EAAE,UAAU,EAAE,0CAA0C,EAAE;YAChE,GAAG,EAAE,EAAE,UAAU,EAAE,4CAA4C,EAAE;YACjE,QAAQ,EAAE,EAAE,UAAU,EAAE,kDAAkD,EAAE;YAC5E,UAAU,EAAE,EAAE,UAAU,EAAE,iDAAiD,EAAE;YAC7E,QAAQ,EAAE,EAAE,UAAU,EAAE,2CAA2C,EAAE;YACrE,KAAK,EAAE,EAAE,UAAU,EAAE,0DAA0D,EAAE;YACjF,KAAK,EAAE,EAAE,UAAU,EAAE,qDAAqD,EAAE;YAC5E,SAAS,EAAE,EAAE,UAAU,EAAE,qEAAqE,EAAE;YAChG,YAAY,EAAE,EAAE,UAAU,EAAE,iEAAiE,EAAE;YAC/F,UAAU,EAAE,EAAE,UAAU,EAAE,+DAA+D,EAAE;YAC3F,KAAK,EAAE,EAAE,UAAU,EAAE,6DAA6D,EAAE;YACpF,QAAQ,EAAE,EAAE,UAAU,EAAE,0EAA0E,EAAE;SACrG,CAAA;IACH,CAAC;IACD,yEAAyE;IACzE,+EAA+E;IAC/E,MAAM,EAAE,GAAG,CAYV,CAAA;IACD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC/D,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QACzC,GAAG,EAAE,GAAG,CAAC,gHAAgH,CAAC;QAC1H,KAAK,EAAE,IAAI,CAAC,sKAAsK,CAAC;QACnL,GAAG,EAAE,GAAG,CAAC,4GAA4G,CAAC;QACtH,QAAQ,EAAE,GAAG,CAAC,oGAAoG,CAAC;QACnH,SAAS,EAAE,GAAG,CAAC,qDAAqD,CAAC;QACrE,cAAc,EAAE,GAAG,CAAC,yCAAyC,CAAC;QAC9D,IAAI,EAAE,GAAG,CAAC,wFAAwF,CAAC;QACnG,GAAG,EAAE,GAAG,CAAC,+CAA+C,CAAC;QACzD,QAAQ,EAAE,GAAG,CAAC,wFAAwF,CAAC;QACvG,UAAU,EAAE,GAAG,CAAC,wCAAwC,CAAC;QACzD,QAAQ,EAAE,GAAG,CAAC,uDAAuD,CAAC;QACtE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yEAAyE,CAAC;QAC9G,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;QAC/G,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2EAA2E,CAAC;QACtI,YAAY,EAAE,GAAG,CAAC,oDAAoD,CAAC;QACvE,UAAU,EAAE,GAAG,CAAC,+DAA+D,CAAC;QAChF,KAAK,EAAE,IAAI,CAAC,kEAAkE,CAAC;QAC/E,QAAQ,EAAE,IAAI,CAAC,kEAAkE,CAAC;KACnF,CAAA;AACH,CAAC"}

package/dist/tm/bash-timeout.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Built-in bash TIMEOUT discipline (issue #6 of 2026-09-18).
+ *
+ * Where the 120 s comes from: the host's shell tool resolves
+ * `flags.bashDefaultTimeoutMs ?? 2 * 60 * 1e3` (verified in the shipped
+ * desktop bundle) — so when a model omits `timeout`, 120 s is the HOST
+ * default, and models that do pass one routinely pass 120000+ for a
+ * `Get-ChildItem`.  Three serialised probes then cost the user six minutes
+ * of dead air, and every one of them was allowed to run for a reason no
+ * model ever had.
+ *
+ * The plugin owns no shell timer, so the ONE non-invasive lever is the
+ * official `tool.execute.before` hook, whose `output.args` is explicitly
+ * mutable.  Two ceilings, both opt-out:
+ *   - `TM_BASH_TIMEOUT_PROBE_MS` (default 60 000) — only for a command the
+ *     P3 read-only allowlist already accepts (ls / grep / rg / cat /
+ *     Get-ChildItem …).  A pure probe has no legitimate reason to outlive
+ *     a minute, and this is where the wasted 120 s actually sits.
+ *   - `TM_BASH_TIMEOUT_MAX_MS` (default 0 = OFF) — a global cap for
+ *     everything else.  Off by default on purpose: a build/test run may
+ *     legitimately need minutes, and silently killing one is worse than a
+ *     slow one.  A user who wants the ceiling sets it.
+ *
+ * This clamps a number the model already volunteered; it never ADDS a
+ * timeout where the model supplied none (that would turn the host's default
+ * into OUR default, which is not this plugin's call to make).
+ */
+export type BashTimeoutVerdict = {
+    changed: false;
+    via: "none" | "already-short";
+} | {
+    changed: true;
+    via: "probe" | "max";
+    from: number;
+    to: number;
+};
+/** Parse the model-supplied timeout defensively: the host schema says a
+ *  positive integer of MILLISECONDS, but an LLM hands us `"120000"`,
+ *  `120000.0`, or omits it entirely.  Anything unreadable means "no
+ *  timeout was supplied" and is left alone. */
+export declare function parseTimeoutArg(raw: unknown): number | null;
+/**
+ * Decide the clamped timeout for one bash call.
+ * `probeMs`/`maxMs` of 0 disable that ceiling.
+ */
+export declare function resolveBashTimeout(opts: {
+    command: string;
+    timeoutMs: number | null;
+    probeMs: number;
+    maxMs: number;
+    readonlyAllowed: readonly string[];
+}): BashTimeoutVerdict;
+/**
+ * The hook fragment.  Returns true when it mutated `args.timeout` — the
+ * caller may log that, and the trajectory keeps a count so a user asking
+ * "why did my probe get killed at 60 s?" has an answer.
+ *
+ * Everything here is defensive by contract: `output.args` is `any` on the
+ * host side, a non-bash tool must be untouched, and a malformed payload
+ * must never turn into a thrown error inside a permission-adjacent hook.
+ */
+export declare function createBashTimeoutHook(deps: {
+    probeMs: number;
+    maxMs: number;
+    readonlyAllowed: readonly string[];
+    onClamp?: (info: {
+        via: string;
+        from: number;
+        to: number;
+    }) => void;
+}): (input: unknown, output: unknown) => boolean;
+//# sourceMappingURL=bash-timeout.d.ts.map

package/dist/tm/bash-timeout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-timeout.d.ts","sourceRoot":"","sources":["../../src/tm/bash-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAAA;CAAE,GACjD;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,OAAO,GAAG,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAA;AAErE;;;+CAG+C;AAC/C,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAO3D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,eAAe,EAAE,SAAS,MAAM,EAAE,CAAA;CACnC,GAAG,kBAAkB,CAQrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,eAAe,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAA;CACpE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,KAAK,OAAO,CAyB/C"}