@te-river/opencode-team-mode 1.6.0 → 1.6.2

package/dist/host/v2-client.d.ts

@@ -0,0 +1,53 @@
+/**
+ * The v2 client shim.
+ *
+ * v1 handed plugin tools an SDK client with `file.read` and `find.text`; the v2
+ * plugin context has no `file` domain at all (verified against the live
+ * `ctx` key list), and `tm_read`/`tm_grep` hard-fail without it
+ * ("宿主 client 不可用").  Rather than fork those two pipelines per host
+ * generation, this module satisfies the SAME two method contracts from Node fs,
+ * returning the exact payload shapes the real host emits so
+ * `unwrapClientResult`/`extractText` in `src/tm/client-unwrap.ts` keep working
+ * untouched.
+ *
+ * The scan is bounded on purpose. An unbounded recursive grep over a real
+ * workspace is the difference between a tool call and a hung turn, and the
+ * bound is REPORTED rather than silently truncating — a truncated answer that
+ * reads like a complete one is the defect this repo keeps getting paid for.
+ */
+type ClientResult = {
+    data: unknown;
+} | {
+    data: {
+        error: {
+            name: string;
+            data: {
+                message: string;
+            };
+        };
+    };
+};
+/**
+ * `client.file.read({ query: { path, directory } })` →
+ * `{ data: { type: "text", content } }` (the 1.18.x real-host shape).
+ */
+declare function read(req: unknown): Promise<ClientResult>;
+/**
+ * `client.find.text({ query: { pattern, directory } })` →
+ * `{ data: FindMatch[] }`.  `pattern` arrives as the raw model string, exactly
+ * as in v1; an invalid regex is the CALLER's problem to report, so it throws
+ * and pipelines.ts turns it into a structured error like every other host
+ * client failure.
+ */
+declare function findText(req: unknown): Promise<ClientResult>;
+/** The two methods `createTmTools` actually reaches for on this object. */
+export declare function createV2Client(): {
+    file: {
+        read: typeof read;
+    };
+    find: {
+        text: typeof findText;
+    };
+};
+export {};
+//# sourceMappingURL=v2-client.d.ts.map

package/dist/host/v2-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-client.d.ts","sourceRoot":"","sources":["../../src/host/v2-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAgCH,KAAK,YAAY,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE;QAAE,KAAK,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE;gBAAE,OAAO,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAA;KAAE,CAAA;CAAE,CAAA;AAkBxG;;;GAGG;AACH,iBAAe,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAkBvD;AA6BD;;;;;;GAMG;AACH,iBAAe,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAqE3D;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,IAAI;IAAE,IAAI,EAAE;QAAE,IAAI,EAAE,OAAO,IAAI,CAAA;KAAE,CAAC;IAAC,IAAI,EAAE;QAAE,IAAI,EAAE,OAAO,QAAQ,CAAA;KAAE,CAAA;CAAE,CAEjG"}

package/dist/host/v2-client.js

@@ -0,0 +1,193 @@
+/**
+ * The v2 client shim.
+ *
+ * v1 handed plugin tools an SDK client with `file.read` and `find.text`; the v2
+ * plugin context has no `file` domain at all (verified against the live
+ * `ctx` key list), and `tm_read`/`tm_grep` hard-fail without it
+ * ("宿主 client 不可用").  Rather than fork those two pipelines per host
+ * generation, this module satisfies the SAME two method contracts from Node fs,
+ * returning the exact payload shapes the real host emits so
+ * `unwrapClientResult`/`extractText` in `src/tm/client-unwrap.ts` keep working
+ * untouched.
+ *
+ * The scan is bounded on purpose. An unbounded recursive grep over a real
+ * workspace is the difference between a tool call and a hung turn, and the
+ * bound is REPORTED rather than silently truncating — a truncated answer that
+ * reads like a complete one is the defect this repo keeps getting paid for.
+ */
+import fs from "node:fs";
+import path from "node:path";
+/** Directories no read-only search should ever walk into. */
+const SKIP_DIRS = new Set([
+    ".git",
+    "node_modules",
+    "dist",
+    "build",
+    "out",
+    "target",
+    ".next",
+    ".nuxt",
+    ".venv",
+    "venv",
+    "__pycache__",
+    ".cache",
+    ".turbo",
+    ".gradle",
+    "coverage",
+    ".pytest_cache",
+]);
+const MAX_VISITED_FILES = 20_000;
+const MAX_MATCHED_FILES = 200;
+const MAX_LINES_PER_FILE = 20;
+const MAX_TOTAL_LINES = 500;
+const MAX_SCAN_FILE_BYTES = 2 * 1024 * 1024;
+const MAX_READ_BYTES = 8 * 1024 * 1024;
+function clientError(name, message) {
+    return { data: { error: { name, data: { message } } } };
+}
+function looksBinary(buffer) {
+    const head = buffer.subarray(0, Math.min(buffer.length, 8_192));
+    return head.includes(0);
+}
+/**
+ * `client.file.read({ query: { path, directory } })` →
+ * `{ data: { type: "text", content } }` (the 1.18.x real-host shape).
+ */
+async function read(req) {
+    const query = req?.query ?? {};
+    const target = typeof query.path === "string" ? query.path : "";
+    if (!target)
+        return clientError("ReadError", "缺少 path 参数");
+    try {
+        const st = fs.statSync(target);
+        if (st.isDirectory())
+            return clientError("ReadError", `路径是目录: ${target}`);
+        if (st.size > MAX_READ_BYTES) {
+            return clientError("ReadError", `文件过大（${st.size} 字节 > ${MAX_READ_BYTES}），本工具不整读：改用 tm_grep 定位行号，或 tm_bash 的 head/tail 取样`);
+        }
+        return { data: { type: "text", content: fs.readFileSync(target, "utf8") } };
+    }
+    catch (err) {
+        const code = err?.code ?? "ReadError";
+        return clientError(String(code), `${code}: ${target}`);
+    }
+}
+function walkFiles(root, out) {
+    let truncated = false;
+    const stack = [root];
+    while (stack.length) {
+        const dir = stack.pop();
+        let entries;
+        try {
+            entries = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            continue; // unreadable directory: skip, it is not our workspace to force
+        }
+        for (const entry of entries) {
+            const full = path.join(dir, entry.name);
+            if (entry.isSymbolicLink())
+                continue; // never follow links: cycles and escapes
+            if (entry.isDirectory()) {
+                if (SKIP_DIRS.has(entry.name))
+                    continue;
+                stack.push(full);
+                continue;
+            }
+            if (!entry.isFile())
+                continue;
+            if (out.length >= MAX_VISITED_FILES)
+                return { truncated: true };
+            out.push(full);
+        }
+    }
+    return { truncated };
+}
+/**
+ * `client.find.text({ query: { pattern, directory } })` →
+ * `{ data: FindMatch[] }`.  `pattern` arrives as the raw model string, exactly
+ * as in v1; an invalid regex is the CALLER's problem to report, so it throws
+ * and pipelines.ts turns it into a structured error like every other host
+ * client failure.
+ */
+async function findText(req) {
+    const query = req?.query ?? {};
+    const pattern = typeof query.pattern === "string" ? query.pattern : "";
+    if (!pattern)
+        return clientError("FindError", "缺少 pattern 参数");
+    const root = typeof query.directory === "string" && query.directory ? query.directory : process.cwd();
+    const re = new RegExp(pattern);
+    const files = [];
+    const walked = walkFiles(root, files);
+    const matches = [];
+    let totalLines = 0;
+    // Every bound that actually BIT has to be named in the answer: a grep that
+    // shows 20 of a file's 400 matching lines and stays silent reads as a
+    // complete answer, which is the exact defect this repo keeps paying for.
+    const trimmed = [];
+    let truncated = walked.truncated;
+    for (const file of files) {
+        if (matches.length >= MAX_MATCHED_FILES || totalLines >= MAX_TOTAL_LINES) {
+            truncated = true;
+            trimmed.push(`范围在 ${matches.length} 个文件 / ${totalLines} 行处停止（${files.length} 个文件待扫）`);
+            break;
+        }
+        let st;
+        try {
+            st = fs.statSync(file);
+        }
+        catch {
+            continue;
+        }
+        if (st.size > MAX_SCAN_FILE_BYTES)
+            continue;
+        let buffer;
+        try {
+            buffer = fs.readFileSync(file);
+        }
+        catch {
+            continue;
+        }
+        if (buffer.length === 0 || looksBinary(buffer))
+            continue;
+        const lines = buffer.toString("utf8").split(/\r?\n/);
+        const hits = [];
+        let firstLine = 0;
+        let matchedInFile = 0;
+        for (let i = 0; i < lines.length; i++) {
+            if (!re.test(lines[i]))
+                continue;
+            matchedInFile++;
+            if (!firstLine)
+                firstLine = i + 1;
+            if (hits.length < MAX_LINES_PER_FILE && totalLines + hits.length < MAX_TOTAL_LINES)
+                hits.push(lines[i]);
+        }
+        if (!matchedInFile)
+            continue;
+        if (hits.length < matchedInFile) {
+            truncated = true;
+            trimmed.push(`${path.basename(file)} 命中 ${matchedInFile} 行，只带前 ${hits.length} 行`);
+        }
+        matches.push({ path: file, lines: hits, line: firstLine });
+        totalLines += hits.length;
+    }
+    if (truncated) {
+        const detail = trimmed.length
+            ? trimmed.slice(0, 3).join("；") + (trimmed.length > 3 ? `；另有 ${trimmed.length - 3} 处` : "")
+            : "达到扫描上限";
+        matches.push({
+            path: "（扫描被截断）",
+            lines: [
+                `这是部分结果：${detail}（上限 每文件 ${MAX_LINES_PER_FILE} 行 / ${MAX_MATCHED_FILES} 个文件 / ${MAX_TOTAL_LINES} 行）。缩小 directory 或收紧 pattern 再来一次，别把这份当成全量`,
+            ],
+            line: 0,
+        });
+    }
+    return { data: matches };
+}
+/** The two methods `createTmTools` actually reaches for on this object. */
+export function createV2Client() {
+    return { file: { read }, find: { text: findText } };
+}
+//# sourceMappingURL=v2-client.js.map

package/dist/host/v2-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-client.js","sourceRoot":"","sources":["../../src/host/v2-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,6DAA6D;AAC7D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,MAAM;IACN,cAAc;IACd,MAAM;IACN,OAAO;IACP,KAAK;IACL,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,aAAa;IACb,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,UAAU;IACV,eAAe;CAChB,CAAC,CAAA;AAEF,MAAM,iBAAiB,GAAG,MAAM,CAAA;AAChC,MAAM,iBAAiB,GAAG,GAAG,CAAA;AAC7B,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAC7B,MAAM,eAAe,GAAG,GAAG,CAAA;AAC3B,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAC3C,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAItC,SAAS,WAAW,CAAC,IAAY,EAAE,OAAe;IAChD,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAA;AACzD,CAAC;AASD,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;IAC/D,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;AACzB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,IAAI,CAAC,GAAY;IAC9B,MAAM,KAAK,GAAI,GAAkD,EAAE,KAAK,IAAI,EAAE,CAAA;IAC9E,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IAC/D,IAAI,CAAC,MAAM;QAAE,OAAO,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IAC1D,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,EAAE,CAAC,WAAW,EAAE;YAAE,OAAO,WAAW,CAAC,WAAW,EAAE,UAAU,MAAM,EAAE,CAAC,CAAA;QACzE,IAAI,EAAE,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;YAC7B,OAAO,WAAW,CAChB,WAAW,EACX,QAAQ,EAAE,CAAC,IAAI,SAAS,cAAc,mDAAmD,CAC1F,CAAA;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAA;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,IAAI,WAAW,CAAA;QAChE,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAA;IACxD,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,GAAa;IAC5C,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAA;IACpB,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAY,CAAA;QACjC,IAAI,OAAoB,CAAA;QACxB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,SAAQ,CAAC,+DAA+D;QAC1E,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YACvC,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAQ,CAAC,yCAAyC;YAC9E,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAQ;gBACvC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAChB,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAQ;YAC7B,IAAI,GAAG,CAAC,MAAM,IAAI,iBAAiB;gBAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;YAC/D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAA;AACtB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,QAAQ,CAAC,GAAY;IAClC,MAAM,KAAK,GAAI,GAAkD,EAAE,KAAK,IAAI,EAAE,CAAA;IAC9E,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;IACtE,IAAI,CAAC,OAAO;QAAE,OAAO,WAAW,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;IAC9D,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAA;IACrG,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAA;IAE9B,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACrC,MAAM,OAAO,GAAgB,EAAE,CAAA;IAC/B,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,2EAA2E;IAC3E,sEAAsE;IACtE,yEAAyE;IACzE,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,IAAI,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;IAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,MAAM,IAAI,iBAAiB,IAAI,UAAU,IAAI,eAAe,EAAE,CAAC;YACzE,SAAS,GAAG,IAAI,CAAA;YAChB,OAAO,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,UAAU,UAAU,SAAS,KAAK,CAAC,MAAM,SAAS,CAAC,CAAA;YACrF,MAAK;QACP,CAAC;QACD,IAAI,EAAY,CAAA;QAChB,IAAI,CAAC;YACH,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,GAAG,mBAAmB;YAAE,SAAQ;QAC3C,IAAI,MAAc,CAAA;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,SAAQ;QACV,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC;YAAE,SAAQ;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACpD,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,IAAI,SAAS,GAAG,CAAC,CAAA;QACjB,IAAI,aAAa,GAAG,CAAC,CAAA;QACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAQ;YAChC,aAAa,EAAE,CAAA;YACf,IAAI,CAAC,SAAS;gBAAE,SAAS,GAAG,CAAC,GAAG,CAAC,CAAA;YACjC,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,eAAe;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QACzG,CAAC;QACD,IAAI,CAAC,aAAa;YAAE,SAAQ;QAC5B,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YAChC,SAAS,GAAG,IAAI,CAAA;YAChB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,aAAa,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,CAAA;QACnF,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;QAC1D,UAAU,IAAI,IAAI,CAAC,MAAM,CAAA;IAC3B,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,CAAC,CAAC,QAAQ,CAAA;QACZ,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,SAAS;YACf,KAAK,EAAE;gBACL,UAAU,MAAM,WAAW,kBAAkB,QAAQ,iBAAiB,UAAU,eAAe,4CAA4C;aAC5I;YACD,IAAI,EAAE,CAAC;SACR,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AAC1B,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc;IAC5B,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAA;AACrD,CAAC"}

package/dist/host/v2-events.d.ts

@@ -0,0 +1,56 @@
+/**
+ * The v2 event feed — the seam `tm_join`'s settle detection was missing (#8).
+ *
+ * v1 handed the plugin a host `event` hook and `src/host/v1.ts` pumped every
+ * `session.idle` / `session.error` / `session.status` into
+ * `tmRuntime.observeDispatchEvent`. The v2 personality never subscribed to
+ * anything, so on 2.x the child registry learned nothing: a child that finished
+ * two seconds after the dispatch stayed "running" for the whole `waitMs` budget,
+ * `tm_join` answered 仍在运行 about a session that had already settled, and the
+ * lead's second wait was cut short by a streak counter that was measuring our own
+ * deafness. That is goal #6's failure shape — a tool reporting a state it never
+ * observed — and it was a bug, not a limitation.
+ *
+ * `ctx.event.subscribe()` is an async iterable on the Promise-based plugin API:
+ * measured on a live 2.0.16 (docs/research/agent-data-exchange.md), with no Effect
+ * runtime and no new dependency. Two properties of it are load-bearing here:
+ *
+ *  · the stream is SERVER-WIDE. Every session on the host appears in it, so the
+ *    feed forwards only event types on the whitelist below and the dispatcher
+ *    ignores any session id it has no record of — the plugin never reads a
+ *    stranger's session state into our context or trajectory.
+ *  · event NAMES changed wholesale between generations. So the whitelist is a
+ *     living list with a counter behind it: an unseen type is counted and stays
+ *     unseen, rather than being forwarded on a guess or swallowed silently. After
+ *     the next host upgrade, `tm_stats` is where the renamed events show up.
+ *
+ * Nothing in here may break a session: every subscription and iteration step is
+ * wrapped, and a stream that throws ends the feed with a recorded reason instead
+ * of an exception in the host's event loop.
+ */
+import type { HostEvent } from "../types.js";
+import type { V2Registration } from "./v2-types.js";
+/** The types the dispatcher understands, plus the v2 spellings we have observed.
+ *  Anything else is counted, not forwarded. */
+export declare const FEED_TYPES: readonly ["session.idle", "session.error", "session.status", "session.statused", "session.updated"];
+export interface V2EventFeedReport {
+    /** subscribe() existed and returned something iterable */
+    active: boolean;
+    received: number;
+    forwarded: number;
+    /** type → count, for every type we did not recognise (names only, no payload) */
+    unknown: Record<string, number>;
+    /** what killed the loop, if anything — the difference between "no events" and
+     *  "we stopped listening" */
+    stopped?: string;
+}
+export interface V2EventFeed {
+    readonly report: V2EventFeedReport;
+    registrations: V2Registration[];
+    stop: () => Promise<void>;
+}
+export declare function applyV2EventFeed(ctx: unknown, opts: {
+    onEvent: (event: HostEvent) => void;
+    types?: readonly string[];
+}): Promise<V2EventFeed>;
+//# sourceMappingURL=v2-events.d.ts.map

package/dist/host/v2-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-events.d.ts","sourceRoot":"","sources":["../../src/host/v2-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnD;+CAC+C;AAC/C,eAAO,MAAM,UAAU,qGAMb,CAAA;AAEV,MAAM,WAAW,iBAAiB;IAChC,0DAA0D;IAC1D,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B;iCAC6B;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,aAAa,EAAE,cAAc,EAAE,CAAA;IAC/B,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1B;AAeD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE;IAAE,OAAO,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACvE,OAAO,CAAC,WAAW,CAAC,CAsGtB"}

package/dist/host/v2-events.js

@@ -0,0 +1,158 @@
+/**
+ * The v2 event feed — the seam `tm_join`'s settle detection was missing (#8).
+ *
+ * v1 handed the plugin a host `event` hook and `src/host/v1.ts` pumped every
+ * `session.idle` / `session.error` / `session.status` into
+ * `tmRuntime.observeDispatchEvent`. The v2 personality never subscribed to
+ * anything, so on 2.x the child registry learned nothing: a child that finished
+ * two seconds after the dispatch stayed "running" for the whole `waitMs` budget,
+ * `tm_join` answered 仍在运行 about a session that had already settled, and the
+ * lead's second wait was cut short by a streak counter that was measuring our own
+ * deafness. That is goal #6's failure shape — a tool reporting a state it never
+ * observed — and it was a bug, not a limitation.
+ *
+ * `ctx.event.subscribe()` is an async iterable on the Promise-based plugin API:
+ * measured on a live 2.0.16 (docs/research/agent-data-exchange.md), with no Effect
+ * runtime and no new dependency. Two properties of it are load-bearing here:
+ *
+ *  · the stream is SERVER-WIDE. Every session on the host appears in it, so the
+ *    feed forwards only event types on the whitelist below and the dispatcher
+ *    ignores any session id it has no record of — the plugin never reads a
+ *    stranger's session state into our context or trajectory.
+ *  · event NAMES changed wholesale between generations. So the whitelist is a
+ *     living list with a counter behind it: an unseen type is counted and stays
+ *     unseen, rather than being forwarded on a guess or swallowed silently. After
+ *     the next host upgrade, `tm_stats` is where the renamed events show up.
+ *
+ * Nothing in here may break a session: every subscription and iteration step is
+ * wrapped, and a stream that throws ends the feed with a recorded reason instead
+ * of an exception in the host's event loop.
+ */
+/** The types the dispatcher understands, plus the v2 spellings we have observed.
+ *  Anything else is counted, not forwarded. */
+export const FEED_TYPES = [
+    "session.idle",
+    "session.error",
+    "session.status",
+    "session.statused",
+    "session.updated",
+];
+/** Event shapes the host has used across generations; read defensively because
+ *  none of them is a promised interface. */
+function eventOf(raw) {
+    const e = raw;
+    if (!e || typeof e !== "object")
+        return {};
+    const type = e.type ?? e.kind ?? e.name;
+    const props = e.properties ?? e.payload ?? e.data;
+    return {
+        ...(typeof type === "string" ? { type } : {}),
+        ...(props && typeof props === "object" ? { properties: props } : {}),
+    };
+}
+export async function applyV2EventFeed(ctx, opts) {
+    const allowed = new Set(opts.types ?? FEED_TYPES);
+    const report = { active: false, received: 0, forwarded: 0, unknown: {} };
+    let closed = false;
+    let closeStream;
+    const feed = {
+        report,
+        registrations: [],
+        async stop() {
+            closed = true;
+            try {
+                await closeStream?.();
+            }
+            catch {
+                /* the stream is already gone; the feed is closing either way */
+            }
+        },
+    };
+    const event = ctx?.event;
+    const subscribe = event?.subscribe;
+    if (typeof subscribe !== "function") {
+        report.stopped = "no ctx.event.subscribe on this host";
+        return feed;
+    }
+    let stream;
+    try {
+        // Property access, never a captured reference: a detached `subscribe` loses
+        // its receiver and the host's client throws (the dispatch.ts §10 rule).
+        stream = await event.subscribe();
+    }
+    catch (err) {
+        report.stopped = `subscribe threw: ${String(err?.message ?? err).slice(0, 120)}`;
+        return feed;
+    }
+    const iterable = stream;
+    if (!iterable || (typeof iterable[Symbol.asyncIterator] !== "function" && typeof iterable.subscribe !== "function" && typeof iterable.on !== "function")) {
+        report.stopped = "subscribe returned something we cannot iterate";
+        return feed;
+    }
+    report.active = true;
+    const handle = (raw) => {
+        if (closed)
+            return;
+        const ev = eventOf(raw);
+        report.received++;
+        const type = String(ev.type ?? "");
+        if (!type || !allowed.has(type)) {
+            const key = type || "(no type)";
+            report.unknown[key] = (report.unknown[key] ?? 0) + 1;
+            return;
+        }
+        report.forwarded++;
+        try {
+            opts.onEvent(ev);
+        }
+        catch (err) {
+            report.stopped = `consumer threw: ${String(err?.message ?? err).slice(0, 120)}`;
+            closed = true;
+        }
+    };
+    if (typeof iterable.subscribe === "function") {
+        try {
+            ;
+            iterable.subscribe(handle);
+        }
+        catch (err) {
+            report.stopped = `stream.subscribe threw: ${String(err?.message ?? err).slice(0, 120)}`;
+        }
+        return feed;
+    }
+    if (typeof iterable.on === "function") {
+        for (const t of allowed) {
+            try {
+                ;
+                iterable.on(t, handle);
+            }
+            catch {
+                /* one type missing is not a reason to lose the rest */
+            }
+        }
+        return feed;
+    }
+    // async-iterable path: pull until the host closes the stream or we stop.  The
+    // iterator is held rather than created inline by `for await` because teardown has
+    // to reach the SAME object — return() on a second, untouched iterator would
+    // "close" a subscription while the running one kept the host's stream alive.
+    const pull = iterable[Symbol.asyncIterator]?.();
+    if (pull)
+        closeStream = () => pull.return?.();
+    void (async () => {
+        try {
+            if (!pull)
+                return;
+            for await (const raw of { [Symbol.asyncIterator]: () => pull }) {
+                if (closed)
+                    break;
+                handle(raw);
+            }
+        }
+        catch (err) {
+            report.stopped = `stream threw: ${String(err?.message ?? err).slice(0, 120)}`;
+        }
+    })();
+    return feed;
+}
+//# sourceMappingURL=v2-events.js.map

package/dist/host/v2-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-events.js","sourceRoot":"","sources":["../../src/host/v2-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAKH;+CAC+C;AAC/C,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,kBAAkB;IAClB,iBAAiB;CACT,CAAA;AAoBV;4CAC4C;AAC5C,SAAS,OAAO,CAAC,GAAY;IAC3B,MAAM,CAAC,GAAG,GAAiD,CAAA;IAC3D,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAA;IAC1C,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAA;IACvC,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAA;IACjD,OAAO;QACL,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAgC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChG,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAY,EACZ,IAAwE;IAExE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,CAAA;IACjD,MAAM,MAAM,GAAsB,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAC3F,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,IAAI,WAAwC,CAAA;IAE5C,MAAM,IAAI,GAAgB;QACxB,MAAM;QACN,aAAa,EAAE,EAAE;QACjB,KAAK,CAAC,IAAI;YACR,MAAM,GAAG,IAAI,CAAA;YACb,IAAI,CAAC;gBACH,MAAM,WAAW,EAAE,EAAE,CAAA;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;QACH,CAAC;KACF,CAAA;IAED,MAAM,KAAK,GAAI,GAA8D,EAAE,KAAK,CAAA;IACpF,MAAM,SAAS,GAAG,KAAK,EAAE,SAAS,CAAA;IAClC,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,CAAC,OAAO,GAAG,qCAAqC,CAAA;QACtD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,4EAA4E;QAC5E,wEAAwE;QACxE,MAAM,GAAG,MAAO,KAAmD,CAAC,SAAS,EAAE,CAAA;IACjF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,OAAO,GAAG,oBAAoB,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;QAC3F,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,QAAQ,GAAG,MAET,CAAA;IACR,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,UAAU,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,UAAU,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE,CAAC;QACzJ,MAAM,CAAC,OAAO,GAAG,gDAAgD,CAAA;QACjE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,CAAC,MAAM,GAAG,IAAI,CAAA;IAEpB,MAAM,MAAM,GAAG,CAAC,GAAY,EAAE,EAAE;QAC9B,IAAI,MAAM;YAAE,OAAM;QAClB,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QACvB,MAAM,CAAC,QAAQ,EAAE,CAAA;QACjB,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;QAClC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,IAAI,IAAI,WAAW,CAAA;YAC/B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;YACpD,OAAM;QACR,CAAC;QACD,MAAM,CAAC,SAAS,EAAE,CAAA;QAClB,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,OAAO,GAAG,mBAAmB,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;YAC1F,MAAM,GAAG,IAAI,CAAA;QACf,CAAC;IACH,CAAC,CAAA;IAED,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,CAAC;YAAC,QAAiE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,OAAO,GAAG,2BAA2B,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;QACpG,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,CAAC;gBAAC,QAAqE,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;YACvF,CAAC;YAAC,MAAM,CAAC;gBACP,uDAAuD;YACzD,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,8EAA8E;IAC9E,kFAAkF;IAClF,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,IAAI,GAAI,QAAmC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,CAAA;IAC3E,IAAI,IAAI;QAAE,WAAW,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAA;IAC7C,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,IAAI,CAAC,IAAI;gBAAE,OAAM;YACjB,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAA4B,EAAE,CAAC;gBACzF,IAAI,MAAM;oBAAE,MAAK;gBACjB,MAAM,CAAC,GAAG,CAAC,CAAA;YACb,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,OAAO,GAAG,iBAAiB,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;QAC1F,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IAEJ,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/host/v2-guard.d.ts

@@ -0,0 +1,101 @@
+/**
+ * The v2 permission-guard layer (#7).
+ *
+ * v1 enforced two things in code that v2 can enforce one level lower — at the
+ * host's own `permission.hook("evaluate")`, whose `effect` is mutable and whose
+ * `resources` carry the concrete command line or URL (live-probed: `action`
+ * arrives as shell / read / edit / external_directory with the real payload).
+ *
+ *  1. THE EGRESS RED LINE ON THE HOST'S OWN WEB TOOL.  v1 never had to think
+ *     about this because native `webfetch` was denied in the whitelist; on v2 a
+ *     Build-class agent has it, and it has no notion of `169.254.169.254` — the
+ *     cloud metadata endpoint whose response is temporary credentials.  The
+ *     domain allowlist answers "is this host on the list"; only `checkWebUrl`
+ *     asks the address question, and that question has to be asked of the native
+ *     path too or the port becomes a way around it.
+ *  2. R6's per-command precision.  v2's closest thing to v1's pattern-object
+ *     escalation is currently "ask on every shell command", which is honest but
+ *     coarse.  The classifier can restore the per-command shape — but only if
+ *     the host actually calls `evaluate` for shell, which has not been proven on
+ *     a live 2.0.16 yet.  So the strictening hook is installed either way and
+ *     COUNTS what it sees, while the config-level coarse ask stays in force
+ *     until `TM_R6_FINE_ASK=on` says otherwise.  A guard that fails open because
+ *     we trusted an unproven hook is the opposite of this product.
+ *
+ * The hook only ever makes a decision STRICTER (allow -> ask, anything -> deny on
+ * a red line).  It never loosens what the host or the user's own rules chose.
+ */
+import { type EnvProtectMode } from "../envprotect.js";
+import type { TeamScope } from "./v2-scope.js";
+import type { V2Context, V2Registration } from "./v2-types.js";
+export interface GuardDecision {
+    effect: "allow" | "deny" | "ask";
+    message?: string;
+    /** the rule that answered, in words the agent reads back — never a bare code */
+    why: string;
+}
+/** The address question, asked of the host's native web path. */
+export declare function webGuard(resources: readonly string[]): GuardDecision | null;
+/** R6's env face and R2's danger face, per command line. */
+export declare function shellGuard(command: string | undefined, mode: EnvProtectMode): GuardDecision | null;
+export interface GuardReport {
+    seen: number;
+    byAction: Record<string, number>;
+    strictened: number;
+    denied: number;
+    /** what the classifier WOULD have asked for, counted even while the coarse
+     *  config-level ask is still in force — this is the evidence that decides
+     *  whether TM_R6_FINE_ASK can become the default. */
+    shellMatched: number;
+    /** evaluations skipped because the session belongs to a non-Team agent (#22) —
+     *  the number that tells the user how much of this floor is not ours to hold */
+    foreignSkipped: number;
+}
+export interface BackgroundForceReport {
+    seen: number;
+    forced: number;
+}
+/**
+ * Every sub-agent dispatch runs in the background.
+ *
+ * The user's standing instruction (2026-09-25). It is not a preference tweak: a
+ * foreground `subagent` call blocks the lead for the whole child run, which is
+ * the one thing the throughput mandate cannot survive — and on v2 background is
+ * a first-class host capability (`subagent {background:true}` returns
+ * immediately and the parent is notified when the child finishes), so nothing
+ * has to be opted into at the environment level the way v1 needed
+ * `OPENCODE_EXPERIMENTAL_BACKGROUND_SUBAGENTS`.
+ *
+ * `execute.before` takes a mutable `input` (docs say "inspect or REPLACE"; a
+ * live host confirmed the write lands), so this is the honest place to enforce
+ * it — a prompt rule thousands of tokens earlier is not the same thing.  An
+ * input that is not an object is left alone rather than invented.
+ */
+export declare function applyV2BackgroundForce(ctx: V2Context, opts?: {
+    scope?: TeamScope;
+}): Promise<{
+    registrations: V2Registration[];
+    report: BackgroundForceReport;
+}>;
+export declare function applyV2PermissionGuards(ctx: V2Context, opts: {
+    envProtectMode: EnvProtectMode;
+    scope?: TeamScope;
+}): Promise<{
+    registrations: V2Registration[];
+    report: GuardReport;
+    installed: boolean;
+}>;
+/** Does the config still need the coarse `shell -> ask` escalation?  Only while
+ *  the fine path is switched off; with the classifier in charge, escalating every
+ *  command would mask it.
+ *  Was the coarse default until a live host proved the seam exists: a
+ * `--standalone` run of the v2 personality recorded
+ * `{action:"shell", resourceCount:1, hasUrl:false}` reaching `evaluate` for a real
+ * `git status --short` (2026-09-25), which is the observation this function was
+ * waiting for.  So the classifier is in charge by default and the escalation is
+ * the fallback again — `TM_R6_FINE_ASK=off` restores "every command asks", which is
+ * what a user should reach for if their host build turns out not to fire the hook.
+ * An absent hook still forces coarse: no seam, no per-command judgement.
+ */
+export declare function needsCoarseShellAsk(env: NodeJS.ProcessEnv, guardsInstalled: boolean): boolean;
+//# sourceMappingURL=v2-guard.d.ts.map

package/dist/host/v2-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-guard.d.ts","sourceRoot":"","sources":["../../src/host/v2-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9D,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAA;IAChC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAA;CACZ;AAqBD,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa,GAAG,IAAI,CAyB3E;AAED,4DAA4D;AAC5D,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,cAAc,GAAG,aAAa,GAAG,IAAI,CAUlG;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd;;yDAEqD;IACrD,YAAY,EAAE,MAAM,CAAA;IACpB;oFACgF;IAChF,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,SAAS,EACd,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,SAAS,CAAA;CAAO,GAC/B,OAAO,CAAC;IAAE,aAAa,EAAE,cAAc,EAAE,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,CAAC,CAoB7E;AAED,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,SAAS,EACd,IAAI,EAAE;IAAE,cAAc,EAAE,cAAc,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,GAC1D,OAAO,CAAC;IAAE,aAAa,EAAE,cAAc,EAAE,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CA0CvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,eAAe,EAAE,OAAO,GAAG,OAAO,CAO7F"}