@vibgrate/cli 2026.813.1 → 2026.814.2

package/dist/{chunk-RHKJPTON.js → chunk-IHXNOY3R.js}

@@ -1,14 +1,15 @@
 import { isSecretPath, secretRefusal, secretEgressRefusal, redactText } from './chunk-543E6WDJ.js';
-import { buildAgentMessages, redactSecrets, unifiedDiff, applyEdit } from './chunk-ADP6ITGF.js';
-import { localGraphBackend } from './chunk-GOPANQZT.js';
+import { findMatchingRule, ruleLabel } from './chunk-TVDYEHIM.js';
+import { localGraphBackend } from './chunk-54RGT2T5.js';
 import { buildIdentifierTrieFromGraph, KvBlockRegistry, graphDraftCandidates, extractIdentifiers, scanIdentifiersAgainstTrie } from './chunk-5HYCB55P.js';
-import { summarizeCapsule, CAPSULE_RANKING_VERSION, buildCodeContext, buildTaskCapsule, capsuleToCodeContext, recordCliCall, CLI_TOOL_ALIASES } from './chunk-CJNWHXQD.js';
+import { buildAgentMessages, redactSecrets, unifiedDiff, applyEdit } from './chunk-N3XFY3PX.js';
 import { resolve } from './chunk-VIWZ4QT7.js';
-import { searchSymbols, resolveLib, loadCatalog, readDoc, localPackageDocs, resolveVersion } from './chunk-UZP623Y4.js';
+import { searchSymbols, resolveLib, loadCatalog, readDoc, localPackageDocs, resolveVersion } from './chunk-7QDHQLUS.js';
 import { resolveOne } from './chunk-J7LKEB2R.js';
-import { userAskFromInstruction, isLocateOnlyInstruction, extractLiteralNeedles, impactOf } from './chunk-YJU7S7N6.js';
+import { summarizeCapsule, CAPSULE_RANKING_VERSION, buildCodeContext, buildTaskCapsule, capsuleToCodeContext, recordCliCall, CLI_TOOL_ALIASES } from './chunk-DSUGC7F5.js';
+import { userAskFromInstruction, isLocateOnlyInstruction, extractLiteralNeedles, impactOf } from './chunk-KGPX4EUN.js';
 import { parseSource, langForExtension } from './chunk-UTNNGKKX.js';
-import { analyzeQuestion, loadTopicTags } from './chunk-EWZKOU66.js';
+import { analyzeQuestion, loadTopicTags } from './chunk-75LJM5XD.js';
 import { repositoryIdFromRoot } from './chunk-BWPBB45M.js';
 import { hashString, canonicalize } from './chunk-JFGYT6BI.js';
 import { spawnSync, spawn } from 'child_process';
@@ -24,7 +25,6 @@ function buildCapsuleDelta(previous, next) {
   const prevPrimary = keySet(previous.primary);
   const nextPrimary = keySet(next.primary);
   const prevSupport = keySet(previous.supporting);
-  keySet(next.supporting);
   const addedPrimary = next.primary.filter((p) => !prevPrimary.has(symKey(p))).map((p) => ({ qualifiedName: p.qualifiedName, file: p.file, kind: p.kind }));
   const removedPrimary = previous.primary.filter((p) => !nextPrimary.has(symKey(p))).map((p) => ({ qualifiedName: p.qualifiedName, file: p.file }));
   const addedSupporting = next.supporting.filter((p) => !prevSupport.has(symKey(p))).map((p) => ({ qualifiedName: p.qualifiedName, file: p.file, kind: p.kind }));
@@ -337,6 +337,154 @@ function normalize2(file) {
   return file.replace(/\\/g, "/").replace(/^\.\//, "");
 }
 
+// src/code/safety.ts
+var DANGEROUS = [
+  { pattern: /\brm\s+(-[a-z]*f[a-z]*\s+)?(-[a-z]*r[a-z]*\s+)?(-[a-z]*\s+)*(\/|~|\$HOME|\.)(\s|$)/i, reason: "recursive/forced delete of a root or home path" },
+  { pattern: /\brm\s+-[a-z]*r[a-z]*f|\brm\s+-[a-z]*f[a-z]*r/i, reason: "recursive force delete" },
+  { pattern: /\bmkfs\b|\bmke2fs\b/i, reason: "formats a filesystem" },
+  { pattern: /\bdd\b[^|]*\bof=\/dev\//i, reason: "writes raw to a device" },
+  { pattern: />\s*\/dev\/(sd|nvme|hd|disk)/i, reason: "writes raw to a disk device" },
+  { pattern: /:\s*\(\s*\)\s*\{[^}]*\}\s*;\s*:/, reason: "fork bomb" },
+  { pattern: /\b(curl|wget|fetch)\b[^\n|]*\|\s*(sudo\s+)?(sh|bash|zsh|python|node|ruby|perl)\b/i, reason: "pipes a download straight into a shell/interpreter" },
+  { pattern: /\bgit\s+push\b[^\n]*(--force\b|-f\b)/i, reason: "force-push (rewrites remote history)" },
+  { pattern: /\bgit\s+(reset\s+--hard|clean\s+-[a-z]*f)/i, reason: "destroys uncommitted work" },
+  { pattern: /\b(shutdown|reboot|halt|poweroff)\b/i, reason: "powers off / reboots the machine" },
+  { pattern: /\bchmod\s+-R\s+0*777\s+(\/|~)/i, reason: "world-writable on a root/home path" },
+  { pattern: /\bsudo\b/i, reason: "runs as root (never automatic)" },
+  { pattern: /\beval\b\s+["'`]?\$\(/i, reason: "evaluates dynamically-constructed shell" }
+];
+function dangerousCommand(command, extraDeny = []) {
+  const cmd = command.trim();
+  for (const { pattern, reason } of DANGEROUS) {
+    if (pattern.test(cmd)) return reason;
+  }
+  for (const raw of extraDeny) {
+    if (!raw) continue;
+    try {
+      if (new RegExp(raw, "i").test(cmd)) return `matches a project denylist rule (${raw})`;
+    } catch {
+      if (cmd.toLowerCase().includes(raw.toLowerCase())) return `matches a project denylist rule (${raw})`;
+    }
+  }
+  return null;
+}
+var READ_ONLY_ANY_ARGS = /* @__PURE__ */ new Set([
+  "ls",
+  "pwd",
+  "cat",
+  "head",
+  "tail",
+  "wc",
+  "cut",
+  "tr",
+  "nl",
+  "column",
+  "grep",
+  "egrep",
+  "fgrep",
+  "rg",
+  "file",
+  "stat",
+  "du",
+  "df",
+  "tree",
+  "which",
+  "whereis",
+  "whoami",
+  "id",
+  "uname",
+  "hostname",
+  "uptime",
+  "basename",
+  "dirname",
+  "realpath",
+  "readlink",
+  "echo",
+  "printf",
+  "true",
+  "false",
+  "diff",
+  "cmp",
+  "strings",
+  "md5sum",
+  "sha1sum",
+  "sha256sum",
+  "shasum",
+  "cksum",
+  // jq has no write-to-file flag of its own; file writes need a redirect,
+  // which the metacharacter screen already disqualifies. Membership here also
+  // applies the shared `--output` screen, unlike the old always-true guard.
+  "jq"
+]);
+var GUARDED = {
+  // find can write via -exec/-delete/-ok and the f* output actions.
+  find: (args) => !args.some((a) => /^-(exec|execdir|ok|okdir|delete|fprint|fprintf|fprint0|fls)$/.test(a)),
+  // date -s / --set sets the clock. Prefix match catches the attached getopt
+  // form too (`-s2020-01-01`).
+  date: (args) => !args.some((a) => a.startsWith("-s") || a.startsWith("--set")),
+  // sort -o / --output writes a file — including the attached form (`-oFILE`).
+  sort: (args) => !args.some((a) => a.startsWith("-o") || a.startsWith("--output")),
+  // uniq's second positional argument is an output file.
+  uniq: (args) => args.filter((a) => !a.startsWith("-")).length <= 1
+};
+var GIT_READ_ONLY = /* @__PURE__ */ new Set([
+  "status",
+  "log",
+  "diff",
+  "show",
+  "blame",
+  "shortlog",
+  "describe",
+  "ls-files",
+  "rev-parse",
+  "grep",
+  "show-ref",
+  "cat-file",
+  "count-objects",
+  "reflog"
+]);
+var PKG_READ_ONLY = /* @__PURE__ */ new Set(["ls", "list", "ll", "why", "view", "info", "outdated"]);
+function readOnlySegment(segment) {
+  const tokens = segment.split(/\s+/).filter(Boolean);
+  if (!tokens.length) return false;
+  const head = tokens[0];
+  const args = tokens.slice(1);
+  if (head.includes("=")) return false;
+  if (args.length === 1 && /^(--version|--help)$/.test(args[0]) && /^[\w@-][\w.@-]*$/.test(head) && !head.includes("/") && !head.includes("\\")) {
+    return true;
+  }
+  if (READ_ONLY_ANY_ARGS.has(head)) {
+    if (args.some((a) => a.startsWith("--output"))) return false;
+    return true;
+  }
+  const guard = GUARDED[head];
+  if (guard) return guard(args);
+  if (head === "git") {
+    const sub = args[0];
+    if (!sub || sub.startsWith("-")) return false;
+    const rest = args.slice(1);
+    if (rest.some((a) => a.startsWith("--output"))) return false;
+    if (GIT_READ_ONLY.has(sub)) return true;
+    if (sub === "branch") return rest.every((a) => /^(-a|-r|-v|-vv|-l|--list|--all|--verbose)$/.test(a));
+    if (sub === "remote") return rest.every((a) => a === "-v" || a === "--verbose");
+    if (sub === "tag") return rest.every((a) => /^(-l|--list|-n\d*)$/.test(a));
+    if (sub === "stash") return rest[0] === "list" || rest[0] === "show";
+    if (sub === "config") return rest[0] === "-l" || rest[0] === "--list" || rest[0] === "--get" || rest[0] === "--get-all" || rest[0] === "--get-regexp";
+    return false;
+  }
+  if (head === "npm" || head === "pnpm" || head === "yarn") {
+    const sub = args[0];
+    return !!sub && PKG_READ_ONLY.has(sub);
+  }
+  return false;
+}
+function readOnlyCommand(command) {
+  const cmd = command.trim();
+  if (!cmd) return false;
+  if (/[><;&`\n(){}]|\$\(/.test(cmd)) return false;
+  return cmd.split("|").every((seg) => readOnlySegment(seg));
+}
+
 // src/code/patch-ir.ts
 var PATCH_IR_SCHEMA_VERSION = "patch-ir/0";
 function patchIRToCodeEdits(patch) {
@@ -593,38 +741,6 @@ function previewSides(before, after) {
   return { before: b, after: a };
 }
 
-// src/code/safety.ts
-var DANGEROUS = [
-  { pattern: /\brm\s+(-[a-z]*f[a-z]*\s+)?(-[a-z]*r[a-z]*\s+)?(-[a-z]*\s+)*(\/|~|\$HOME|\.)(\s|$)/i, reason: "recursive/forced delete of a root or home path" },
-  { pattern: /\brm\s+-[a-z]*r[a-z]*f|\brm\s+-[a-z]*f[a-z]*r/i, reason: "recursive force delete" },
-  { pattern: /\bmkfs\b|\bmke2fs\b/i, reason: "formats a filesystem" },
-  { pattern: /\bdd\b[^|]*\bof=\/dev\//i, reason: "writes raw to a device" },
-  { pattern: />\s*\/dev\/(sd|nvme|hd|disk)/i, reason: "writes raw to a disk device" },
-  { pattern: /:\s*\(\s*\)\s*\{[^}]*\}\s*;\s*:/, reason: "fork bomb" },
-  { pattern: /\b(curl|wget|fetch)\b[^\n|]*\|\s*(sudo\s+)?(sh|bash|zsh|python|node|ruby|perl)\b/i, reason: "pipes a download straight into a shell/interpreter" },
-  { pattern: /\bgit\s+push\b[^\n]*(--force\b|-f\b)/i, reason: "force-push (rewrites remote history)" },
-  { pattern: /\bgit\s+(reset\s+--hard|clean\s+-[a-z]*f)/i, reason: "destroys uncommitted work" },
-  { pattern: /\b(shutdown|reboot|halt|poweroff)\b/i, reason: "powers off / reboots the machine" },
-  { pattern: /\bchmod\s+-R\s+0*777\s+(\/|~)/i, reason: "world-writable on a root/home path" },
-  { pattern: /\bsudo\b/i, reason: "runs as root (never automatic)" },
-  { pattern: /\beval\b\s+["'`]?\$\(/i, reason: "evaluates dynamically-constructed shell" }
-];
-function dangerousCommand(command, extraDeny = []) {
-  const cmd = command.trim();
-  for (const { pattern, reason } of DANGEROUS) {
-    if (pattern.test(cmd)) return reason;
-  }
-  for (const raw of extraDeny) {
-    if (!raw) continue;
-    try {
-      if (new RegExp(raw, "i").test(cmd)) return `matches a project denylist rule (${raw})`;
-    } catch {
-      if (cmd.toLowerCase().includes(raw.toLowerCase())) return `matches a project denylist rule (${raw})`;
-    }
-  }
-  return null;
-}
-
 // src/code/network-policy.ts
 var NETWORK_POLICY_SCHEMA_VERSION = "network-policy/0";
 var NETWORK_POLICY_VERSION = "network-policy@2026.07.0";
@@ -1822,8 +1938,8 @@ async function runSubagent(host, req) {
     text: `Subagent starting${worktreePath ? ` in worktree ${worktreePath}` : " in-place"}\u2026`
   });
   try {
-    const { runAgent: runAgent2 } = await import('./agent-N3CP3SPI.js');
-    const { nodeCodeFs } = await import('./session-WS7SOVJE.js');
+    const { runAgent: runAgent2 } = await import('./agent-5ANHRYEI.js');
+    const { nodeCodeFs } = await import('./session-4BGYASOH.js');
     const childFs = childRoot === host.root ? host.fsImpl : nodeCodeFs(childRoot);
     const childApprove = async (action) => {
       host.onEvent?.({
@@ -2222,10 +2338,10 @@ async function executeTool(call, ctx) {
           finalSummary: `aborted: ${str(a.reason) || "no reason given"}`
         };
       default:
-        return { content: `unknown tool "${call.name}". Available: ${AGENT_TOOLS.map((t) => t.name).join(", ")}`, mutated: false };
+        return { content: `unknown tool "${call.name}". Available: ${AGENT_TOOLS.map((t) => t.name).join(", ")}`, mutated: false, failed: true };
     }
   } catch (e) {
-    return { content: `tool ${call.name} failed: ${e.message}`, mutated: false };
+    return { content: `tool ${call.name} failed: ${e.message}`, mutated: false, failed: true };
   }
 }
 async function askUser(ctx, question, options) {
@@ -2317,7 +2433,7 @@ ${lines.join("\n")}`, mutated: false };
 function readFile(ctx, path4, start, end) {
   if (isSecretPath(path4)) return { content: secretRefusal(path4), mutated: false };
   const content = ctx.fsImpl.read(path4);
-  if (content === null) return { content: `${path4} not found`, mutated: false };
+  if (content === null) return { content: `${path4} not found`, mutated: false, failed: true };
   const lines = content.split("\n");
   const from = start && start > 0 ? start - 1 : 0;
   const to = end && end > 0 ? end : lines.length;
@@ -2403,7 +2519,7 @@ async function createFile(ctx, path4, content) {
   }
   const existing = ctx.fsImpl.read(path4);
   if (existing !== null) return { content: `${path4} already exists \u2014 use edit_file`, mutated: false };
-  if (!await ctx.approve({ kind: "create", file: path4, bytes: Buffer.byteLength(content) })) {
+  if (!await ctx.approve({ kind: "create", file: path4, bytes: Buffer.byteLength(content), sides: previewSides("", content) })) {
     return { content: `creating ${path4} was declined by the user`, mutated: false };
   }
   ctx.fsImpl.write(path4, content);
@@ -2412,7 +2528,7 @@ async function createFile(ctx, path4, content) {
 async function deleteFile(ctx, path4) {
   const before = ctx.fsImpl.read(path4);
   if (before === null) return { content: `${path4} does not exist`, mutated: false };
-  if (!await ctx.approve({ kind: "delete", file: path4 })) {
+  if (!await ctx.approve({ kind: "delete", file: path4, sides: previewSides(before, "") })) {
     return { content: `deleting ${path4} was declined by the user`, mutated: false };
   }
   ctx.fsImpl.remove(path4);
@@ -2425,7 +2541,7 @@ async function applyPatchTool(ctx, raw) {
   }
   const structural = validatePatchIR(patch);
   if (!structural.ok) {
-    return { content: `invalid PatchIR: ${structural.errors.join("; ")}`, mutated: false };
+    return { content: `invalid PatchIR: ${structural.errors.join("; ")}`, mutated: false, failed: true };
   }
   if (ctx.enforceIdentifiers !== false && ctx.identifierTrie) {
     const idCheck = enforceIdentifiersInPatch(patch, ctx.identifierTrie, {
@@ -2582,7 +2698,7 @@ function readNotebookTool(ctx, filePath, cell) {
   if (!filePath) return { content: "read_notebook needs a path", mutated: false };
   if (isSecretPath(filePath)) return { content: secretRefusal(filePath), mutated: false };
   const raw = ctx.fsImpl.read(filePath);
-  if (raw == null) return { content: `file not found: ${filePath}`, mutated: false };
+  if (raw == null) return { content: `file not found: ${filePath}`, mutated: false, failed: true };
   if (cell == null || Number.isNaN(cell)) {
     const sum = summarizeNotebook(raw);
     if (!sum.ok) return { content: sum.error, mutated: false };
@@ -2596,7 +2712,7 @@ async function editNotebookTool(ctx, filePath, cell, source) {
   if (!filePath) return { content: "edit_notebook_cell needs a path", mutated: false };
   if (isSecretPath(filePath)) return { content: secretRefusal(filePath), mutated: false };
   const raw = ctx.fsImpl.read(filePath);
-  if (raw == null) return { content: `file not found: ${filePath}`, mutated: false };
+  if (raw == null) return { content: `file not found: ${filePath}`, mutated: false, failed: true };
   const edited = editNotebookCell(raw, cell, source);
   if (!edited.ok) return { content: edited.error, mutated: false };
   const cellPreviewDiff = unifiedDiff(edited.before, edited.after, `${filePath}#cell${cell}`);
@@ -3481,9 +3597,26 @@ async function runAgent(options) {
     if (action.kind === "patch") return action.files.map((f) => f.file);
     return "file" in action && action.file ? [action.file] : [];
   };
+  const autoApproval = (action) => {
+    if (action.kind === "run" && dangerousCommand(action.command, options.denyCommands)) return null;
+    if (action.kind === "run" && readOnlyCommand(action.command)) return { note: null };
+    const rules = options.approvalRules?.();
+    if (rules?.length) {
+      const rule = findMatchingRule(action, rules);
+      if (rule) return { note: `Auto-approved by standing rule: ${ruleLabel(rule)}` };
+    }
+    return null;
+  };
   const approveAndCheckpoint = async (action) => {
     if (options.plan) return false;
-    const approved = await options.approve(action);
+    let approved;
+    const shortCircuit = autoApproval(action);
+    if (shortCircuit) {
+      approved = true;
+      if (shortCircuit.note) onEvent({ type: "notice", text: shortCircuit.note });
+    } else {
+      approved = await options.approve(action);
+    }
     if (!approved || !options.checkpoint) return approved;
     const files = actionFiles(action);
     if (!files.length) return approved;
@@ -3749,6 +3882,15 @@ Fix the failing tests, then call finish again.${verifyRounds === 0 ? " (last ver
     }
     currentStep = step;
     onEvent({ type: "step", n: step });
+    const injected = options.takeInjected?.();
+    if (injected) {
+      onEvent({ type: "injected", text: injected });
+      messages.push({
+        role: "user",
+        content: `[The user sent this while you were working \u2014 factor it in before continuing:]
+${injected}`
+      });
+    }
     const compacted = options.llmCompaction ? await compactWithModel(
       messages,
       contextBudget,
@@ -3783,7 +3925,8 @@ Fix the failing tests, then call finish again.${verifyRounds === 0 ? " (last ver
         options.modelProfile,
         identifierTrie,
         draftCandidates,
-        promptSegments
+        promptSegments,
+        options.reasoningEffort
       );
       result = c.result;
       providerInfo = { id: c.provider.id, model: c.provider.model, fellBack: c.fellBack };
@@ -3796,7 +3939,12 @@ Fix the failing tests, then call finish again.${verifyRounds === 0 ? " (last ver
       usage.promptTokens += result.usage.promptTokens ?? 0;
       usage.completionTokens += result.usage.completionTokens ?? 0;
       trajectory.recordUsage(result.usage.promptTokens ?? 0, result.usage.completionTokens ?? 0);
-      onEvent({ type: "usage", promptTokens: result.usage.promptTokens ?? 0, completionTokens: result.usage.completionTokens ?? 0 });
+      onEvent({
+        type: "usage",
+        promptTokens: result.usage.promptTokens ?? 0,
+        completionTokens: result.usage.completionTokens ?? 0,
+        ...result.usage.cachedPromptTokens !== void 0 ? { cachedPromptTokens: result.usage.cachedPromptTokens } : {}
+      });
     }
     const displayText = sanitizeAgentDisplayText(result.text ?? "");
     if (displayText) onEvent({ type: "assistant", text: displayText });
@@ -3890,7 +4038,7 @@ ${gateNote}`;
 (note: you have called this exact tool call ${n} times with no change \u2014 try a different approach, read more context, or call finish.)`;
       }
       trajectory.recordTool(call.name, step, toolResult.mutated);
-      onEvent({ type: "tool-result", name: call.name, content, mutated: toolResult.mutated });
+      onEvent({ type: "tool-result", name: call.name, content, mutated: toolResult.mutated, ...toolResult.failed ? { failed: true } : {} });
       messages.push({ role: "tool", content, toolCallId: call.id, name: call.name });
       if (toolResult.finished) {
         if (await verifyOnFinish() === "retry") break;
@@ -3908,9 +4056,10 @@ ${gateNote}`;
   }
   return finish("max-steps", "reached the step limit before finishing", maxSteps);
 }
-async function complete(providers, messages, tools, onEvent, stream, modelProfile, identifierTrie, draftCandidates, promptSegments) {
+async function complete(providers, messages, tools, onEvent, stream, modelProfile, identifierTrie, draftCandidates, promptSegments, reasoningEffort) {
   if (providers.length === 0) throw new Error("no model provider available");
   const onToken = stream ? (t) => onEvent({ type: "token", text: t }) : void 0;
+  const onReasoningToken = stream ? (t) => onEvent({ type: "thinking", text: t }) : void 0;
   let lastErr;
   for (let i = 0; i < providers.length; i++) {
     try {
@@ -3919,10 +4068,13 @@ async function complete(providers, messages, tools, onEvent, stream, modelProfil
         tools,
         stream,
         onToken,
+        onReasoningToken,
+        ...reasoningEffort ? { reasoningEffort } : {},
         identifierTrie,
         draftCandidates,
         promptSegments
       });
+      if (!stream && result.reasoning) onEvent({ type: "thinking", text: result.reasoning });
       return { result, provider: providers[i], fellBack: i > 0 };
     } catch (e) {
       lastErr = e;
@@ -4125,5 +4277,5 @@ function buildSpanIndex(graph) {
 }
 
 export { CONTEXT_POLICY_VERSION, DISCOVERY_TOOLS, MUTATION_TOOLS, compact, compactWithModel, computeFcsReport, createTrajectoryCollector, lookupModelCapabilities, renderFcsReportMarkdown, runAgent };
-//# sourceMappingURL=chunk-RHKJPTON.js.map
-//# sourceMappingURL=chunk-RHKJPTON.js.map
+//# sourceMappingURL=chunk-IHXNOY3R.js.map
+//# sourceMappingURL=chunk-IHXNOY3R.js.map