@toddzheng024/dscode-bundle 0.7.8 → 0.7.9

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.7.8",
+  "version": "0.7.9",
   "type": "module",
   "license": "MIT",
   "author": "Todd Zheng",

package/plugins/auto-review/audit.mjs

@@ -10,7 +10,11 @@ export function auditStore(directory) {
     read(id) {
       const path = pathFor(id);
       if (!existsSync(path)) return [];
-      return readFileSync(path, 'utf8').split('\n').filter(Boolean).map(line => JSON.parse(line));
+      // A torn or corrupt line is skipped, never allowed to break every later read.
+      // Audit rows are a telemetry sidecar: silent skips are accepted and the usable trail stays readable.
+      return readFileSync(path, 'utf8').split('\n').filter(Boolean).flatMap(line => {
+        try { return [JSON.parse(line)]; } catch { return []; }
+      });
     },
     append(id, record) {
       mkdirSync(directory, { recursive: true, mode: 0o700 });

package/plugins/auto-review/policy.mjs

@@ -25,7 +25,7 @@ export function redact(text) {
   return String(text)
     .replace(/-----BEGIN [^-]*PRIVATE KEY-----[\s\S]*?-----END [^-]*PRIVATE KEY-----/g, '[REDACTED]')
     .replace(/\b(?:sk-[A-Za-z0-9_-]{12,}|gh[pousr]_[A-Za-z0-9_]{16,}|github_pat_[A-Za-z0-9_]{16,}|AKIA[A-Z0-9]{16})\b/g, '[REDACTED]')
-    .replace(/\b(Bearer\s+)[A-Za-z0-9._~+\/-]{8,}=*/gi, '$1[REDACTED]')
+    .replace(/\b(Bearer\s+)[A-Za-z0-9._~+/-]{8,}=*/gi, '$1[REDACTED]')
     .replace(/((?:api[_-]?key|access[_-]?token|refresh[_-]?token|password|secret|authorization|cookie)["']?\s*[:=]\s*["']?)([^\s"',;}]+)/gi, '$1[REDACTED]')
     .replace(/(https?:\/\/)[^\s/@:]+:[^\s/@]+@/g, '$1[REDACTED]@');
 }
@@ -65,7 +65,7 @@ export function parseDecision(text) {
 const ESCALATION_DIAGNOSTICS = new Set(['ps', 'lsof', 'pgrep', 'sw_vers', 'uname', 'id', 'date', 'hostname', 'pwd', 'sysctl']);
 // Quotes, substitution, redirects and chaining all mean the command can do more
 // than the diagnostic whose name it starts with.
-const SHELL_META = /[;&|<>`$(){}\[\]\n\\'"]/;
+const SHELL_META = /[;&|<>`$()[\]\n\\'"]/;
 
 /**
  * Match one pending escalation against the read-only diagnostic allowlist.
@@ -80,5 +80,9 @@ export function escalationDiagnosticGrant(toolName, args) {
   if (command.length === 0 || command.length > 200 || SHELL_META.test(command)) return undefined;
   const argv = command.split(/\s+/);
   if (!ESCALATION_DIAGNOSTICS.has(argv[0])) return undefined;
+  // A diagnostic is only safe read-only: `sysctl -w` and assignment-like sysctl keys write
+  // kernel state, and arguments can turn hostname/date into a system change when privileged.
+  if (argv[0] === 'sysctl' && argv.some(token => token === '-w' || token.includes('='))) return undefined;
+  if ((argv[0] === 'hostname' || argv[0] === 'date') && argv.length > 1) return undefined;
   return { command, argv };
 }

package/plugins/clipboard-image/index.mjs

@@ -51,9 +51,9 @@ export async function readClipboardImage() {
     await execFile(binary, [path], { timeout: 10_000, maxBuffer: 1024 });
   } catch (error) {
     await rm(directory, { recursive: true, force: true });
-    if (error?.code === 2) throw Error('Clipboard has no image');
-    if (error?.code === 4) throw Error('Clipboard image is too large');
-    throw Error('Could not read clipboard image');
+    if (error?.code === 2) throw Error('Clipboard has no image', { cause: error });
+    if (error?.code === 4) throw Error('Clipboard image is too large', { cause: error });
+    throw Error('Could not read clipboard image', { cause: error });
   }
   clipboardDirs.add(directory);
   if (!cleanupRegistered) {

package/plugins/code-review/baseline.mjs

@@ -39,7 +39,7 @@ async function git(dir, cwd, args, { index, signal, env = {} } = {}) {
     });
     return stdout;
   } catch (error) {
-    if (error.code === 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER') throw Error('Review diff exceeds 160 KiB. Use --path to review a smaller part.');
+    if (error.code === 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER') throw Error('Review diff exceeds 160 KiB. Use --path to review a smaller part.', { cause: error });
     throw error;
   }
 }

package/plugins/code-review/git.mjs

@@ -39,7 +39,7 @@ const matchesPath = (file, path) => !path || file === path || file.startsWith(`$
 const safeLabel = value => JSON.stringify(value);
 const sensitiveFile = file => /^(?:\.env(?:\..*)?|\.npmrc|\.pypirc|id_(?:rsa|ed25519))$|\.(?:pem|p12|pfx|key)$/i.test(posix.basename(file));
 
-async function untracked(cwd, path, signal) {
+export async function untracked(cwd, path, signal) {
   const args = ['ls-files', '--others', '--exclude-standard', '-z', '--', ...(path ? [path] : [])];
   const names = (await git(cwd, args, signal)).split('\0').filter(Boolean).filter(file => matchesPath(file, path));
   const chunks = [], omitted = [];
@@ -51,13 +51,21 @@ async function untracked(cwd, path, signal) {
       continue;
     }
     const full = join(cwd, file);
-    const info = await lstat(full);
-    if (!info.isFile() || info.size > 128 * 1024) {
+    let data;
+    try {
+      const info = await lstat(full);
+      if (!info.isFile() || info.size > 128 * 1024) {
+        omitted.push(file);
+        chunks.push(`Untracked file omitted from review: ${safeLabel(file)} (not a small regular file)\n`);
+        continue;
+      }
+      data = await readFile(full);
+    } catch {
+      // A file that vanishes or turns unreadable between listing and reading is omitted, never fatal.
       omitted.push(file);
-      chunks.push(`Untracked file omitted from review: ${safeLabel(file)} (not a small regular file)\n`);
+      chunks.push(`Untracked file omitted from review: ${safeLabel(file)} (unreadable or vanished during collection)\n`);
       continue;
     }
-    const data = await readFile(full);
     if (data.includes(0)) {
       omitted.push(file);
       chunks.push(`Untracked binary file omitted from review: ${safeLabel(file)}\n`);
@@ -88,7 +96,7 @@ export function isGitWorkspaceSync(cwd, run = execFileSync, now = Date.now()) {
   // Any failure (no repository, missing directory, git unavailable) means the review tool cannot work here.
   let value = false;
   try { run('git', ['rev-parse', '--is-inside-work-tree'], { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], timeout: 3000 }); value = true; }
-  catch { value = false; }
+  catch { /* any failure means the review tool cannot work here */ }
   gitWorkspaceCache.set(cwd, { at: now, value });
   return value;
 }
@@ -99,7 +107,7 @@ export function isGitAvailableSync(run = execFileSync) {
   if (run === execFileSync && gitAvailable !== undefined) return gitAvailable;
   let value = false;
   try { run('git', ['--version'], { stdio: 'ignore', timeout: 3000 }); value = true; }
-  catch { value = false; }
+  catch { /* git is unavailable */ }
   if (run === execFileSync) gitAvailable = value;
   return value;
 }

package/plugins/email/gmail.mjs

@@ -186,7 +186,7 @@ export function createGmailConnector({ inbox = createEmailInbox(), directory = j
           store.write('state.json', next); return { accepted: next.accepted, skipped: next.skipped };
         } catch (error) {
           const safe = error.status ? error.message : /^(Google|Gmail|Grant|Set DSCODE_|Cannot read|Invalid Gmail)/.test(error.message) ? error.message : 'Gmail sync interrupted. Retry sync.';
-          store.write('state.json', { ...state, error: safe }); throw Error(safe);
+          store.write('state.json', { ...state, error: safe }); throw Error(safe, { cause: error });
         }
       });
     },

package/plugins/email/inbox.mjs

@@ -52,7 +52,7 @@ export function createEmailInbox({ directory = process.env.DSCODE_EMAIL_DIR || j
       try {
         writeFileSync(temp, json, { flag: 'wx', mode: 0o600 });
         renameSync(temp, target);
-      } finally { try { unlinkSync(temp); } catch (error) { if (error.code !== 'ENOENT') throw error; } }
+      } finally { try { unlinkSync(temp); } catch { /* best-effort cleanup: never mask the write's own outcome */ } }
       return mail;
     },
     list() {

package/plugins/email/store.mjs

@@ -6,7 +6,7 @@ import { tryLockExclusive } from '@deepseek-ai/node-addon-system/flock';
 export function emailStore(directory, label = 'email') {
   const read = name => {
     try { return JSON.parse(readFileSync(join(directory, name), 'utf8')); }
-    catch (error) { if (error.code === 'ENOENT') return null; throw Error('Cannot read local ' + label + ' configuration.'); }
+    catch (error) { if (error.code === 'ENOENT') return null; throw Error('Cannot read local ' + label + ' configuration.', { cause: error }); }
   };
   return {
     directory, read,
@@ -17,7 +17,7 @@ export function emailStore(directory, label = 'email') {
       try {
         writeFileSync(temp, JSON.stringify(value), { flag: 'wx', mode: 0o600 });
         renameSync(temp, join(directory, name));
-      } finally { try { unlinkSync(temp); } catch (error) { if (error.code !== 'ENOENT') throw error; } }
+      } finally { try { unlinkSync(temp); } catch { /* best-effort cleanup: never mask the write's own outcome */ } }
     },
     async locked(action) {
       mkdirSync(directory, { recursive: true, mode: 0o700 });

package/plugins/session-bridge/communication.mjs

@@ -57,7 +57,7 @@ export class CommunicationService {
     };
     agent.cancel = state.cancelWrapper;
     this.states.set(agent.id, state);
-    state.ready = this.background(this.recover(state));
+    this.ensureReady(state);
   }
   state(agent) {
     const state = this.states.get(agent.id);
@@ -65,6 +65,15 @@ export class CommunicationService {
     this.store.authenticate(state.auth);
     return state;
   }
+  /** Recovery runs once per agent; a failed attempt fails closed for the step that awaited
+   * it and is retried by the next step, instead of failing every later step forever. */
+  ensureReady(state) {
+    if (!state.ready || state.readyFailed) {
+      state.readyFailed = false;
+      state.ready = this.background(this.recover(state).catch(error => { state.readyFailed = true; throw error; }));
+    }
+    return state.ready;
+  }
   async remove(agent) {
     const state = this.states.get(agent.id);
     if (!state || state.agent !== agent) return;
@@ -161,7 +170,7 @@ export class CommunicationService {
     for (const m of messages) if (communicationId(m)) {
       batch.add(communicationId(m)); this.store.transition(state.auth, communicationId(m), 'admitted', `${state.auth.generation}:${turn}`);
     }
-    await state.ready;
+    await this.ensureReady(state);
     await this.confirm(state);
     signal.throwIfAborted();
     if (step === 1 && !state.cutoffs.has(turn)) fail('missing_cutoff', 'Missing turn-start mailbox cutoff');
@@ -193,7 +202,7 @@ export class CommunicationService {
   }
   async receive(agent, payload) {
     const state = this.state(agent);
-    await state.ready;
+    await this.ensureReady(state);
     this.store.authenticate(state.auth);
     // Reply routing is checked both here and by the shared admission transaction.
     let admission;
@@ -210,7 +219,7 @@ export class CommunicationService {
   }
   async send(agent, args, reply = false) {
     if (agent.session.header.origin === 'subagent') fail('root_session_required', 'Cross-session requests and replies belong to the root session; report this to your parent agent.');
-    const state = this.state(agent); await state.ready;
+    const state = this.state(agent); await this.ensureReady(state);
     let destination = args.session_id, kind = args.kind, inReplyTo = args.in_reply_to;
     if (reply) {
       const original = this.store.get(args.request_message_id);

package/plugins/session-bridge/index.mjs

@@ -39,7 +39,7 @@ export async function apply(ctx) {
   }, async ({ project, workspace, cursor = 0, limit = 20 }) => {
     if (!Number.isSafeInteger(cursor) || cursor < 0 || !Number.isSafeInteger(limit) || limit < 1 || limit > 100) throw Error('Invalid pagination');
     const all = (await discover(home)).filter(s => (!project || s.card?.project?.id === project) && (!workspace || s.cwd === workspace)).sort((a, b) => a.id.localeCompare(b.id));
-    return { sessions: all.slice(cursor, cursor + limit).map(({ socket, ...s }) => s), nextCursor: cursor + limit < all.length ? cursor + limit : null };
+    return { sessions: all.slice(cursor, cursor + limit).map(({ socket: _socket, ...s }) => s), nextCursor: cursor + limit < all.length ? cursor + limit : null };
   });
   register('read_session', 'Read a session event page without waking it or collecting deferred notes.', {
     session_id: field('Complete active session ID', true), after: field('Last seen session event sequence', false, 'number'), limit: field('1..100', false, 'number'),

package/vendor/tui/dscode-clipboard-image/index.mjs

@@ -51,9 +51,9 @@ export async function readClipboardImage() {
     await execFile(binary, [path], { timeout: 10_000, maxBuffer: 1024 });
   } catch (error) {
     await rm(directory, { recursive: true, force: true });
-    if (error?.code === 2) throw Error('Clipboard has no image');
-    if (error?.code === 4) throw Error('Clipboard image is too large');
-    throw Error('Could not read clipboard image');
+    if (error?.code === 2) throw Error('Clipboard has no image', { cause: error });
+    if (error?.code === 4) throw Error('Clipboard image is too large', { cause: error });
+    throw Error('Could not read clipboard image', { cause: error });
   }
   clipboardDirs.add(directory);
   if (!cleanupRegistered) {

package/vendor/tui/dscode-email/gmail.mjs

@@ -186,7 +186,7 @@ export function createGmailConnector({ inbox = createEmailInbox(), directory = j
           store.write('state.json', next); return { accepted: next.accepted, skipped: next.skipped };
         } catch (error) {
           const safe = error.status ? error.message : /^(Google|Gmail|Grant|Set DSCODE_|Cannot read|Invalid Gmail)/.test(error.message) ? error.message : 'Gmail sync interrupted. Retry sync.';
-          store.write('state.json', { ...state, error: safe }); throw Error(safe);
+          store.write('state.json', { ...state, error: safe }); throw Error(safe, { cause: error });
         }
       });
     },

package/vendor/tui/dscode-email/inbox.mjs

@@ -52,7 +52,7 @@ export function createEmailInbox({ directory = process.env.DSCODE_EMAIL_DIR || j
       try {
         writeFileSync(temp, json, { flag: 'wx', mode: 0o600 });
         renameSync(temp, target);
-      } finally { try { unlinkSync(temp); } catch (error) { if (error.code !== 'ENOENT') throw error; } }
+      } finally { try { unlinkSync(temp); } catch { /* best-effort cleanup: never mask the write's own outcome */ } }
       return mail;
     },
     list() {

package/vendor/tui/dscode-email/store.mjs

@@ -6,7 +6,7 @@ import { tryLockExclusive } from '@deepseek-ai/node-addon-system/flock';
 export function emailStore(directory, label = 'email') {
   const read = name => {
     try { return JSON.parse(readFileSync(join(directory, name), 'utf8')); }
-    catch (error) { if (error.code === 'ENOENT') return null; throw Error('Cannot read local ' + label + ' configuration.'); }
+    catch (error) { if (error.code === 'ENOENT') return null; throw Error('Cannot read local ' + label + ' configuration.', { cause: error }); }
   };
   return {
     directory, read,
@@ -17,7 +17,7 @@ export function emailStore(directory, label = 'email') {
       try {
         writeFileSync(temp, JSON.stringify(value), { flag: 'wx', mode: 0o600 });
         renameSync(temp, join(directory, name));
-      } finally { try { unlinkSync(temp); } catch (error) { if (error.code !== 'ENOENT') throw error; } }
+      } finally { try { unlinkSync(temp); } catch { /* best-effort cleanup: never mask the write's own outcome */ } }
     },
     async locked(action) {
       mkdirSync(directory, { recursive: true, mode: 0o700 });

package/vendor/tui/index.mjs

@@ -32390,7 +32390,7 @@ function Header({ cwd = "", model = "", effort = "", animated = false }) {
     if (!full) return (0, import_react.createElement)(Box, { flexDirection: "column", paddingX: 2, marginBottom: 1 },
       (0, import_react.createElement)(Text, { wrap: "truncate-end" },
         (0, import_react.createElement)(Text, { color: inkColor(getPalette().brandBright), bold: true }, "❄ DSCODE"),
-        (0, import_react.createElement)(Text, { color: inkColor(getPalette().dim) }, "  v0.7.8")),
+        (0, import_react.createElement)(Text, { color: inkColor(getPalette().dim) }, "  v0.7.9")),
       (0, import_react.createElement)(Text, { wrap: "truncate-end" }, truncateColumns(modelName + " · " + effortName, width)),
       (0, import_react.createElement)(Text, { color: inkColor(getPalette().dim), wrap: "truncate-end" }, welcomePath(cwd, width)));
     return (0, import_react.createElement)(Box, { flexDirection: "column", width, borderStyle: "round", borderColor: inkColor(getPalette().brand), paddingX: 1 },
@@ -32401,7 +32401,7 @@ function Header({ cwd = "", model = "", effort = "", animated = false }) {
         (0, import_react.createElement)(Box, { flexDirection: "column", width: detailsWidth, marginTop: 2 },
           (0, import_react.createElement)(Text, { color: inkColor(getPalette().text), bold: true }, "DSCODE"),
           (0, import_react.createElement)(Text, { color: inkColor(getPalette().brandDeep) }, "────────────"),
-          (0, import_react.createElement)(Text, { color: inkColor(getPalette().dim) }, "v0.7.8"),
+          (0, import_react.createElement)(Text, { color: inkColor(getPalette().dim) }, "v0.7.9"),
           (0, import_react.createElement)(Text, { wrap: "truncate-end" }, truncateColumns(dscodePadEnd(dscodeT("welcome.model"), 9) + modelName, detailsWidth)),
           (0, import_react.createElement)(Text, { wrap: "truncate-end" }, truncateColumns(dscodePadEnd(dscodeT("welcome.effort"), 9) + effortName, detailsWidth)),
           (0, import_react.createElement)(Text, null, " "),