@zixt/host 0.0.163 → 0.0.165

package/dist/index.js

@@ -28,7 +28,7 @@ import { homedir as homedir6 } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.163",
+  version: "0.0.165",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -14672,6 +14672,8 @@ var ID_PREFIXES = {
   conversationEvent: "cve",
   /** One human-confirmed integration action prepared by the Manager. */
   managerIntegrationAction: "mia",
+  /** One human-confirmed destructive cleanup prepared by the Manager (MG-16). */
+  managerDestructiveAction: "mda",
   /** One Manager-prepared secure Credential entry card (MG-17). */
   managerCredentialRequest: "mcr",
   /** One Manager-prepared generic API setup or invocation card (MG-20). */
@@ -14774,6 +14776,10 @@ var ManagerIntegrationActionId = idSchema(
   ID_PREFIXES.managerIntegrationAction,
   "Manager integration action id"
 );
+var ManagerDestructiveActionId = idSchema(
+  ID_PREFIXES.managerDestructiveAction,
+  "Manager destructive action id"
+);
 var ManagerCredentialRequestId = idSchema(
   ID_PREFIXES.managerCredentialRequest,
   "Manager credential request id"
@@ -20363,6 +20369,8 @@ var ConversationEventProjection = external_exports.discriminatedUnion("kind", [
     agentId: AgentId.nullable(),
     /** Present only for a confirmation card; OAuth authority never appears here. */
     integrationActionId: ManagerIntegrationActionId.nullable().optional(),
+    /** Present only for a permanent-deletion confirmation card (MG-16). */
+    destructiveActionId: ManagerDestructiveActionId.nullable().optional(),
     /** Present only for a secure Credential entry card; never a value (MG-17). */
     credentialRequestId: ManagerCredentialRequestId.nullable().optional(),
     /** Present only for a generic API setup/invocation card; never credentials (MG-20). */
@@ -20458,6 +20466,33 @@ var ManagerIntegrationActionResponse = external_exports.object({
   action: ManagerIntegrationActionProjection,
   oauth: ManagerIntegrationOAuthStart.nullable()
 }).strict();
+var ManagerDestructiveActionStatus = external_exports.enum([
+  "awaiting_confirmation",
+  "working",
+  "completed",
+  "cancelled",
+  "failed",
+  "expired"
+]);
+var ManagerDestructiveActionProjection = external_exports.object({
+  id: ManagerDestructiveActionId,
+  conversationId: ConversationId,
+  status: ManagerDestructiveActionStatus,
+  title: external_exports.string().min(1).max(200),
+  /** The exact inventory of what Confirm destroys, one line per item. */
+  description: external_exports.string().min(1).max(4e3),
+  /**
+   * Rises whenever the Manager adds to the card. Confirmation binds to the
+   * revision the person read, so an inventory that grew after they looked
+   * authorizes nothing (GR-3).
+   */
+  revision: external_exports.number().int().min(1),
+  confirmLabel: external_exports.string().min(1).max(100),
+  outcome: external_exports.string().max(2e3).nullable(),
+  createdAt: external_exports.string(),
+  expiresAt: external_exports.string()
+}).strict();
+var ConfirmManagerDestructiveActionRequest = external_exports.object({ requestId: external_exports.string().uuid(), revision: external_exports.number().int().min(1) }).strict();
 var ManagerEmailSetupPrefill = external_exports.object({
   /** Connection name as it will appear under Integrations. */
   name: external_exports.string().min(1).max(120).optional(),
@@ -28045,7 +28080,7 @@ function probeFailureText(err) {
   const cause = err instanceof Error ? err.cause : void 0;
   const code = cause && typeof cause === "object" && "code" in cause && typeof cause.code === "string" ? cause.code : cause instanceof Error && cause.message ? cause.message : "";
   const reason = code === "ENOTFOUND" || code === "EAI_AGAIN" ? "the server address could not be found" : code === "ECONNREFUSED" ? "nothing is listening at that address" : code === "ETIMEDOUT" || code === "UND_ERR_CONNECT_TIMEOUT" ? "the server did not answer in time" : /certificate|TLS|SSL/i.test(code) ? "the secure connection could not be established" : "the server could not be reached";
-  return `The Machine could not connect: ${reason} \u2014 check the URL and that the server is running${code ? ` (${code})` : ""}`;
+  return `The Machine could not connect: ${reason}. Check the URL and that the server is running${code ? ` (${code})` : ""}`;
 }
 
 // src/updater.ts
@@ -33237,6 +33272,18 @@ function createBrowserToolPack(deps) {
     provider: "browser",
     version: 1,
     tools: BROWSER_TOOL_DEFINITIONS,
+    // These narrate their own execution above; the runner's line would be a
+    // duplicate — the customer read "Opened a page in the browser" and then
+    // the same step again as a bare URL (QA-007).
+    narratedTools: [
+      "browser_navigate",
+      "browser_open_tab",
+      "browser_switch_tab",
+      "browser_close_tab",
+      "browser_click",
+      "browser_type",
+      "browser_login"
+    ],
     call,
     currentSignInWall: () => signInWall ? { origin: signInWall.origin } : null,
     async close() {
@@ -42984,7 +43031,8 @@ function createCliRunner(adapter, opts = {}) {
               alwaysLoad: server.alwaysLoad,
               narrated: server.narrated
             }))
-          )
+          ),
+          narratedTools: toolPacks.filter((pack) => !pack.mcpServers).flatMap((pack) => [...pack.narratedTools ?? []])
         },
         preparedWorkspace,
         gitDetected,
@@ -43810,8 +43858,8 @@ import { homedir as homedir10 } from "node:os";
 import { dirname as dirname10, join as join23 } from "node:path";
 
 // src/runners/feed-labels.ts
-var SENTENCE_KEYS = ["title", "question", "description", "url", "query"];
-var LOCATOR_KEYS = ["file_path", "path", "pattern", "name"];
+var SENTENCE_KEYS = ["title", "question", "description", "query"];
+var LOCATOR_KEYS = ["file_path", "path", "pattern", "name", "url"];
 function capLine(text, max = 100) {
   if (text.length <= max) return text;
   const cut = text.slice(0, max - 1);
@@ -43819,7 +43867,7 @@ function capLine(text, max = 100) {
   return `${(space > max * 0.6 ? cut.slice(0, space) : cut).trimEnd()}\u2026`;
 }
 function tidyPath(text) {
-  return text.replace(/[A-Za-z]:[\\/]Users[\\/][^\\/\s"']+/g, "~").replace(/\/(?:home|Users)\/[^\\/\s"']+/g, "~");
+  return text.replace(/\\\\/g, "\\").replace(/[A-Za-z]:[\\/]Users[\\/][^\\/\s"']+/g, "~").replace(/\/(?:home|Users)\/[^\\/\s"']+/g, "~");
 }
 var FILE_SUFFIX = /^(?:js|cjs|mjs|ts|tsx|py|sh|ps1|exe|cmd|bat|json|md|txt)$/i;
 function humanToolName(tool) {
@@ -43943,6 +43991,7 @@ function createCodexAdapter(threadIndexRoot, providerSessionStateRoot2) {
       flags.push("-c", "mcp_servers.zixt.tool_timeout_sec=86400");
       const taken = /* @__PURE__ */ new Set(["zixt"]);
       const narratedServers = /* @__PURE__ */ new Set();
+      const narratedTools = new Set(mcp.narratedTools);
       for (const server of mcp.localServers) {
         const key = serverKeyFor(server.name, taken);
         if (server.narrated) narratedServers.add(key);
@@ -44040,8 +44089,13 @@ ${value}` : value;
             ...runner.effort ? { effort: runner.effort } : {},
             developerInstructions: platformInstructions ?? "",
             onThreadStarted,
-            narratedServers
-          }) : createCodexStreamParser(onStream, { onThreadStarted, narratedServers });
+            narratedServers,
+            narratedTools
+          }) : createCodexStreamParser(onStream, {
+            onThreadStarted,
+            narratedServers,
+            narratedTools
+          });
         },
         // Only one flip is meaningful: a resume whose rollout vanished starts
         // over. Codex assigns new-session ids itself, so a new session can
@@ -44153,8 +44207,10 @@ function createCodexAppServerParser(onStream, options) {
     }
     if (type === "mcpToolCall") {
       const server = String(item["server"] ?? "mcp");
+      const toolName = String(item["tool"] ?? "tool");
       if (options.narratedServers?.has(server)) return;
-      const tool = `${server}.${String(item["tool"] ?? "tool")}`.slice(0, 200);
+      if (server === "zixt" && options.narratedTools?.has(toolName)) return;
+      const tool = `${server}.${toolName}`.slice(0, 200);
       const args = item["arguments"];
       const parameter = (typeof args === "string" ? args : args ? JSON.stringify(args) : "").slice(
         0,
@@ -44378,8 +44434,10 @@ function createCodexStreamParser(onStream, hooks = {}) {
       });
     } else if (phase === "item.started" && itemType === "mcp_tool_call") {
       const server = String(item["server"] ?? "mcp");
+      const toolName = String(item["tool"] ?? "tool");
       if (hooks.narratedServers?.has(server)) return;
-      const tool = `${server}.${String(item["tool"] ?? "tool")}`.slice(0, 200);
+      if (server === "zixt" && hooks.narratedTools?.has(toolName)) return;
+      const tool = `${server}.${toolName}`.slice(0, 200);
       const args = item["arguments"];
       const parameter = (typeof args === "string" ? args : args ? JSON.stringify(args) : "").slice(
         0,
@@ -46208,7 +46266,11 @@ function createClaudeCodeAdapter(providerSessionStateRoot2) {
     missingApiKeyMessage: 'Runner auth is set to "API key" but no ANTHROPIC_API_KEY Credential is granted to this Task. Add it in Project settings \u2192 Credentials for the whole Project or selected AI teammates.',
     async prepareRun(input) {
       const liveInput = input.liveInput && input.task.followUps !== void 0;
-      const { args: baseArgs, narratedServers } = await buildArgs(
+      const {
+        args: baseArgs,
+        narratedServers,
+        narratedTools
+      } = await buildArgs(
         input.task,
         input.runner,
         input.artifacts,
@@ -46244,7 +46306,11 @@ function createClaudeCodeAdapter(providerSessionStateRoot2) {
         ],
         prompt: buildRunnerPrompt(input.task),
         recoveryPrompt: buildRunnerPrompt(input.task, true),
-        createParser: (onStream) => liveInput ? createClaudeLiveParser(onStream, observeRuntime, narratedServers) : createStreamParser(onStream, { onSessionModel: observeRuntime, narratedServers }),
+        createParser: (onStream) => liveInput ? createClaudeLiveParser(onStream, observeRuntime, narratedServers, narratedTools) : createStreamParser(onStream, {
+          onSessionModel: observeRuntime,
+          narratedServers,
+          narratedTools
+        }),
         // Self-heal both directions: a crashed first run leaves a transcript
         // (new → conflict), a lost workspace breaks resume (resume → not
         // found). One flip covers both.
@@ -46321,6 +46387,7 @@ async function buildArgs(task, runner, artifacts, mcp, preparedWorkspace, taskRo
   const allowedTools = ["mcp__zixt"];
   const taken = /* @__PURE__ */ new Set(["zixt"]);
   const narratedServers = /* @__PURE__ */ new Set();
+  const narratedTools = new Set(mcp.narratedTools);
   for (const server of mcp.localServers) {
     const key = serverKeyFor(server.name, taken);
     if (server.narrated) narratedServers.add(key);
@@ -46344,9 +46411,9 @@ async function buildArgs(task, runner, artifacts, mcp, preparedWorkspace, taskRo
     "--disallowedTools",
     [...CLAUDE_SESSION_CRON_TOOLS, ...CLAUDE_REINVOCATION_TOOLS].join(",")
   );
-  return { args, narratedServers };
+  return { args, narratedServers, narratedTools };
 }
-function createClaudeLiveParser(onStream, onSessionModel, narratedServers) {
+function createClaudeLiveParser(onStream, onSessionModel, narratedServers, narratedTools) {
   let write = null;
   const acknowledgements = /* @__PURE__ */ new Map();
   const input = (uuid3, text) => `${JSON.stringify({
@@ -46359,6 +46426,7 @@ function createClaudeLiveParser(onStream, onSessionModel, narratedServers) {
   const parser = createStreamParser(onStream, {
     onSessionModel,
     ...narratedServers ? { narratedServers } : {},
+    ...narratedTools ? { narratedTools } : {},
     onUserReplay: (uuid3) => {
       const acknowledge = acknowledgements.get(uuid3);
       if (!acknowledge) return;
@@ -46434,8 +46502,9 @@ function createStreamParser(onStream, hooks = {}) {
           const input = block["input"];
           const target = input?.["description"] ?? input?.["command"] ?? input?.["pattern"] ?? input?.["file_path"] ?? (typeof input?.["question"] === "string" ? input["question"] : void 0) ?? "";
           const tool = String(block["name"]).slice(0, 200);
-          const mcpServer = /^mcp__([\w-]+?)__/.exec(tool)?.[1];
-          if (mcpServer && hooks.narratedServers?.has(mcpServer)) continue;
+          const mcpParts = /^mcp__([\w-]+?)__([\w-]+)$/.exec(tool);
+          if (mcpParts && hooks.narratedServers?.has(mcpParts[1])) continue;
+          if (mcpParts?.[1] === "zixt" && hooks.narratedTools?.has(mcpParts[2])) continue;
           const parameter = String(target).slice(0, 2e3);
           const localPath = typeof input?.["file_path"] === "string" ? input["file_path"] : null;
           const label = typeof input?.["command"] === "string" && input["command"].trim() ? shellCommandLabel(input["command"]) : toolCallLabel(tool, input ?? {});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.163",
+  "version": "0.0.165",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",