aiki-cli 0.3.0 → 0.3.1

package/dist/orchestration/url-sources.js

@@ -0,0 +1,200 @@
+import { createHash } from 'node:crypto';
+import { lookup } from 'node:dns/promises';
+import { isIP } from 'node:net';
+import { UrlSourceSet, } from '../schemas/index.js';
+const MAX_SOURCES = 5;
+const MAX_RESPONSE_BYTES = 500_000;
+const MAX_CONTENT_CHARS = 30_000;
+const MAX_REDIRECTS = 3;
+export function extractPublicUrls(input) {
+    const matches = input.match(/https?:\/\/[^\s<>"']+/gi) ?? [];
+    const seen = new Set();
+    const urls = [];
+    for (const match of matches) {
+        const cleaned = match.replace(/[.,;:!?\]\)}]+$/g, '');
+        if (seen.has(cleaned))
+            continue;
+        seen.add(cleaned);
+        urls.push(cleaned);
+        if (urls.length === MAX_SOURCES)
+            break;
+    }
+    return urls;
+}
+function isPrivateAddress(address) {
+    if (address === '::' || address === '::1')
+        return true;
+    if (address.toLowerCase().startsWith('fe80:') || address.toLowerCase().startsWith('fc') || address.toLowerCase().startsWith('fd'))
+        return true;
+    const mapped = address.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/i)?.[1];
+    const ipv4 = mapped ?? (isIP(address) === 4 ? address : undefined);
+    if (!ipv4)
+        return false;
+    const [a, b] = ipv4.split('.').map(Number);
+    return a === 0
+        || a === 10
+        || a === 127
+        || (a === 169 && b === 254)
+        || (a === 172 && b >= 16 && b <= 31)
+        || (a === 192 && b === 168)
+        || (a === 100 && b >= 64 && b <= 127)
+        || a >= 224;
+}
+async function assertPublicUrl(url, resolveHostname) {
+    if (url.protocol !== 'http:' && url.protocol !== 'https:')
+        throw new Error('only public http/https URLs are supported');
+    const hostname = url.hostname.toLowerCase().replace(/\.$/, '');
+    if (hostname === 'localhost' || hostname.endsWith('.localhost') || hostname.endsWith('.local') || hostname === '169.254.169.254') {
+        throw new Error('private or local URLs are not allowed');
+    }
+    if (isIP(hostname) && isPrivateAddress(hostname))
+        throw new Error('private or local URLs are not allowed');
+    if (!resolveHostname || isIP(hostname))
+        return;
+    const addresses = await lookup(hostname, { all: true });
+    if (addresses.length === 0 || addresses.some(({ address }) => isPrivateAddress(address))) {
+        throw new Error('private or local URLs are not allowed');
+    }
+}
+function npmRegistryUrl(url) {
+    if (url.hostname !== 'npmjs.com' && url.hostname !== 'www.npmjs.com')
+        return undefined;
+    const match = url.pathname.match(/^\/package\/(.+?)\/?$/);
+    if (!match)
+        return undefined;
+    const name = decodeURIComponent(match[1]);
+    return `https://registry.npmjs.org/${encodeURIComponent(name)}/latest`;
+}
+function decodeHtml(value) {
+    const named = { amp: '&', apos: "'", gt: '>', lt: '<', nbsp: ' ', quot: '"' };
+    return value.replace(/&(#x[\da-f]+|#\d+|\w+);/gi, (entity, code) => {
+        if (code[0] === '#') {
+            const radix = code[1]?.toLowerCase() === 'x' ? 16 : 10;
+            const value = Number.parseInt(code.slice(radix === 16 ? 2 : 1), radix);
+            return Number.isFinite(value) ? String.fromCodePoint(value) : entity;
+        }
+        return named[code.toLowerCase()] ?? entity;
+    });
+}
+function readableHtml(html) {
+    const titleMatch = html.match(/<title\b[^>]*>([\s\S]*?)<\/title>/i);
+    const title = titleMatch ? decodeHtml(titleMatch[1].replace(/<[^>]+>/g, ' ')).replace(/\s+/g, ' ').trim() : undefined;
+    const content = decodeHtml(html
+        .replace(/<(script|style|noscript|svg)\b[^>]*>[\s\S]*?<\/\1>/gi, ' ')
+        .replace(/<[^>]+>/g, ' '))
+        .replace(/\s+/g, ' ')
+        .trim();
+    return { title: title || undefined, content };
+}
+function sha256(content) {
+    return createHash('sha256').update(content).digest('hex');
+}
+async function readLimited(response) {
+    if (!response.body)
+        return '';
+    const reader = response.body.getReader();
+    const decoder = new TextDecoder();
+    let bytes = 0;
+    let body = '';
+    while (true) {
+        const { done, value } = await reader.read();
+        if (done)
+            return body + decoder.decode();
+        bytes += value.byteLength;
+        if (bytes > MAX_RESPONSE_BYTES) {
+            await reader.cancel();
+            throw new Error(`response exceeds ${MAX_RESPONSE_BYTES} bytes`);
+        }
+        body += decoder.decode(value, { stream: true });
+    }
+}
+function failure(id, url, accessedAt, status, error, finalUrl) {
+    return { id, url, final_url: finalUrl, status, accessed_at: accessedAt, error };
+}
+async function fetchWithRedirects(startUrl, fetchImpl, resolveHostname) {
+    let current = new URL(startUrl);
+    for (let redirect = 0; redirect <= MAX_REDIRECTS; redirect++) {
+        await assertPublicUrl(current, resolveHostname);
+        const response = await fetchImpl(current.toString(), {
+            redirect: 'manual',
+            headers: { accept: 'text/html,application/json,text/plain;q=0.9,*/*;q=0.1' },
+        });
+        if (response.status < 300 || response.status >= 400)
+            return { response, finalUrl: current.toString() };
+        const location = response.headers.get('location');
+        if (!location)
+            return { response, finalUrl: current.toString() };
+        if (redirect === MAX_REDIRECTS)
+            throw new Error(`more than ${MAX_REDIRECTS} redirects`);
+        current = new URL(location, current);
+    }
+    throw new Error('redirect limit exceeded');
+}
+async function snapshotOne(sourceUrl, index, options) {
+    const id = `U${index + 1}`;
+    const accessedAt = (options.now?.() ?? new Date()).toISOString();
+    const fetchImpl = options.fetchImpl ?? fetch;
+    try {
+        const original = new URL(sourceUrl);
+        await assertPublicUrl(original, options.fetchImpl === undefined);
+        const adapterUrl = npmRegistryUrl(original);
+        const { response, finalUrl } = await fetchWithRedirects(adapterUrl ?? sourceUrl, fetchImpl, options.fetchImpl === undefined);
+        const declaredLength = Number(response.headers.get('content-length') ?? 0);
+        if (declaredLength > MAX_RESPONSE_BYTES) {
+            return failure(id, sourceUrl, accessedAt, 'FAILED', `response exceeds ${MAX_RESPONSE_BYTES} bytes`, finalUrl);
+        }
+        const body = await readLimited(response);
+        const contentType = response.headers.get('content-type')?.split(';')[0]?.trim() || 'text/plain';
+        const blocked = response.status === 403
+            || response.status === 429
+            || response.status === 503
+            || /cdn-cgi\/challenge|just a moment|captcha|access denied/i.test(body);
+        if (blocked) {
+            return failure(id, sourceUrl, accessedAt, 'BLOCKED', `site blocked automated access (HTTP ${response.status})`, finalUrl);
+        }
+        if (!response.ok)
+            return failure(id, sourceUrl, accessedAt, 'FAILED', `HTTP ${response.status}`, finalUrl);
+        let title;
+        let content;
+        if (adapterUrl) {
+            const metadata = JSON.parse(body);
+            const name = typeof metadata.name === 'string' ? metadata.name : original.pathname.split('/').at(-1) ?? 'npm package';
+            const version = typeof metadata.version === 'string' ? metadata.version : 'unknown version';
+            title = `${name} ${version}`;
+            content = [
+                `Package: ${name}`,
+                `Version: ${version}`,
+                typeof metadata.description === 'string' ? `Description: ${metadata.description}` : '',
+                typeof metadata.homepage === 'string' ? `Homepage: ${metadata.homepage}` : '',
+                typeof metadata.readme === 'string' ? `README:\n${metadata.readme}` : '',
+            ].filter(Boolean).join('\n');
+        }
+        else if (contentType === 'text/html' || /<html\b|<body\b/i.test(body)) {
+            ({ title, content } = readableHtml(body));
+        }
+        else {
+            content = body.replace(/\s+/g, ' ').trim();
+        }
+        content = content.slice(0, MAX_CONTENT_CHARS).trim();
+        if (!content)
+            return failure(id, sourceUrl, accessedAt, 'FAILED', 'source contained no readable text', finalUrl);
+        return {
+            id,
+            url: sourceUrl,
+            final_url: finalUrl,
+            status: 'FETCHED',
+            title,
+            content_type: contentType,
+            accessed_at: accessedAt,
+            sha256: sha256(content),
+            content,
+        };
+    }
+    catch (error) {
+        return failure(id, sourceUrl, accessedAt, 'FAILED', error instanceof Error ? error.message : String(error));
+    }
+}
+export async function snapshotUrlSources(input, options = {}) {
+    const sources = await Promise.all(extractPublicUrls(input).map((url, index) => snapshotOne(url, index, options)));
+    return UrlSourceSet.parse({ sources });
+}

package/dist/schemas/index.js

@@ -19,6 +19,34 @@ export const TaskTypeSchema = z.enum(['idea-refinement', 'code-review', 'other']
 export const WorkflowIdSchema = z.enum(['idea-refinement', 'code-review']);
 /** Explicit user-selected idea protocol. There is deliberately no learned mode router. */
 export const IdeaModeSchema = z.enum(['quick', 'council', 'research']);
+export const RequestedOutputSchema = z.enum([
+    'DECISION',
+    'FEATURE_BACKLOG',
+    'IMPLEMENTATION_PLAN',
+]);
+export const UrlSourceStatusSchema = z.enum(['FETCHED', 'BLOCKED', 'FAILED']);
+export const UrlSourceSnapshot = z.object({
+    id: z.string().regex(/^U[1-5]$/),
+    url: z.string().url(),
+    final_url: z.string().url().optional(),
+    status: UrlSourceStatusSchema,
+    title: z.string().min(1).optional(),
+    content_type: z.string().min(1).optional(),
+    accessed_at: z.string().datetime(),
+    sha256: z.string().regex(/^[a-f0-9]{64}$/).optional(),
+    content: z.string().min(1).optional(),
+    error: z.string().min(1).optional(),
+}).strict().superRefine((source, ctx) => {
+    if (source.status === 'FETCHED' && (!source.content || !source.sha256)) {
+        ctx.addIssue({ code: z.ZodIssueCode.custom, message: 'FETCHED source requires content and sha256' });
+    }
+    if (source.status !== 'FETCHED' && !source.error) {
+        ctx.addIssue({ code: z.ZodIssueCode.custom, message: `${source.status} source requires an error` });
+    }
+});
+export const UrlSourceSet = z.object({
+    sources: z.array(UrlSourceSnapshot).max(5),
+}).strict();
 export const DomainDimension = z
     .object({
     id: z.string().regex(/^D[1-5]$/),
@@ -46,6 +74,7 @@ export const DecisionContract = IntentContract.extend({
     core_rubric: z.array(z.string().min(1)).min(1),
     user_confirmed: z.boolean(),
     confirmation: z.enum(['user-confirmed', 'headless-defaulted']),
+    requested_outputs: z.array(RequestedOutputSchema).min(1).max(4).optional(),
 }).strict();
 /** Code review and old idea runs keep the smaller v1 contract. */
 export const DecisionContractArtifact = z.union([DecisionContract, IntentContract]);
@@ -88,7 +117,7 @@ const RunBriefDraftBase = z
     evidence_supplied: z.array(z.string().min(1)).max(8),
     missing_axes: z.array(z.string().min(1)).max(8),
     domain_dimensions: z.array(DomainDimension).min(3).max(5),
-    questions: z.array(RunBriefQuestion).min(3).max(4),
+    questions: z.array(RunBriefQuestion).max(4),
 })
     .strict();
 function checkQuestionIds(questions, ctx) {
@@ -121,7 +150,7 @@ export const GrillAnswer = z
 })
     .strict();
 export const RunBrief = RunBriefDraftBase.extend({
-    answers: z.array(GrillAnswer).min(3).max(4),
+    answers: z.array(GrillAnswer).max(4),
 }).superRefine((brief, ctx) => {
     checkQuestionIds(brief.questions, ctx);
     checkDomainDimensionIds(brief.domain_dimensions, ctx);
@@ -156,7 +185,7 @@ export const PreflightReading = z.object({
     evidence_supplied: z.array(z.string().min(1)).max(8),
     missing_evidence: z.array(z.string().min(1)).max(8),
     domain_dimensions: z.array(DomainDimension).min(3).max(5),
-    questions: z.array(RunBriefQuestion).min(3).max(4),
+    questions: z.array(RunBriefQuestion).max(4),
 }).strict().superRefine((reading, ctx) => {
     checkQuestionIds(reading.questions, ctx);
     checkDomainDimensionIds(reading.domain_dimensions, ctx);
@@ -837,6 +866,39 @@ export const IdeaChairReportModel = JudgeReportModel.omit({ adjudications: true
     adjudications: z.array(IdeaChairRuling),
 });
 // ── S9b: ActionPlan (idea-refinement report v3) ─────────────────────────────
+export const FeatureBacklog = z.object({
+    must: z.array(z.object({
+        feature: z.string().min(1),
+        user_value: z.string().min(1),
+        rationale: z.string().min(1),
+        effort: z.enum(['S', 'M', 'L']),
+    }).strict()).min(1).max(6),
+    should: z.array(z.object({
+        feature: z.string().min(1),
+        user_value: z.string().min(1),
+        rationale: z.string().min(1),
+        effort: z.enum(['S', 'M', 'L']),
+    }).strict()).max(6),
+    later: z.array(z.object({
+        feature: z.string().min(1),
+        user_value: z.string().min(1),
+        rationale: z.string().min(1),
+        effort: z.enum(['S', 'M', 'L']),
+    }).strict()).max(6),
+    wont: z.array(z.object({
+        feature: z.string().min(1),
+        reason: z.string().min(1),
+    }).strict()).max(6),
+}).strict();
+export const ImplementationPlan = z.object({
+    milestones: z.array(z.object({
+        order: z.number().int().min(1),
+        timebox: z.string().min(1),
+        outcome: z.string().min(1),
+        tasks: z.array(z.string().min(1)).min(1).max(6),
+        acceptance_test: z.string().min(1),
+    }).strict()).min(1).max(7),
+}).strict();
 export const ActionPlan = z
     .object({
     actions: z
@@ -853,6 +915,8 @@ export const ActionPlan = z
         .min(1)
         .max(7),
     sequencing_note: z.string().min(1),
+    feature_backlog: FeatureBacklog.optional(),
+    implementation_plan: ImplementationPlan.optional(),
 })
     .strict();
 export const PlannerUnavailable = z.object({

package/dist/storage/runs.js

@@ -12,7 +12,7 @@
 //   an invalid payload throws and writes nothing.
 import { mkdir, rename, writeFile } from 'node:fs/promises';
 import { dirname, join } from 'node:path';
-import { ActionPlanArtifact, DecisionContractArtifact, DecisionGraph, DisagreementMap, IdeaRoleOutput, JudgeReport, PreflightArtifact, RebuttalEventSet, ReviewMap, RoleOutput, RunBrief, RunMeta, VerificationArtifact } from '../schemas/index.js';
+import { ActionPlanArtifact, DecisionContractArtifact, DecisionGraph, DisagreementMap, IdeaRoleOutput, JudgeReport, PreflightArtifact, RebuttalEventSet, ReviewMap, RoleOutput, RunBrief, RunMeta, UrlSourceSet, VerificationArtifact } from '../schemas/index.js';
 export class OutOfOrderWriteError extends Error {
     constructor(slot, ord, maxOrd) {
         super(`out-of-order write: "${slot}" (stage ${ord}) after stage ${maxOrd} already written`);
@@ -28,6 +28,7 @@ export class DuplicateWriteError extends Error {
 /** JSON stage slots. Composites without a T4 core schema (misunderstanding-guard, drift, claims)
  *  are written as-is; their schemas land with S2/S5/S6 (T5–T6). */
 const JSON_SLOTS = {
+    'url-sources': { ord: 0.25, path: '00a-url-sources.json', schema: UrlSourceSet },
     'run-brief': { ord: 0.5, path: '00b-run-brief.json', schema: RunBrief },
     'intent-contract': { ord: 1, path: '01-intent-contract.json', schema: DecisionContractArtifact },
     'preflight-readings': { ord: 2, path: '02-preflight-readings.json', schema: PreflightArtifact },

package/dist/tui/app.js

@@ -23,7 +23,7 @@ import { computeDiff, computeWorkingTreeDiff, detectRepoStatus } from '../orches
 import { loadCouncilView } from '../council/view.js';
 import { openCouncilHtml } from '../council/open.js';
 import { readJsonArtifact } from '../storage/runs-read.js';
-import { defaultBudgetFor } from '../orchestration/modes.js';
+import { defaultBudgetFor, defaultDeadlineFor, inferIdeaMode } from '../orchestration/modes.js';
 import { GLYPH, displayNames, elapsedLabel, initTimeline, markEnd, markStart, progressBar, runningPhrase, totalElapsed } from './timeline.js';
 import { formatCompletion, formatError } from './format.js';
 import { COMMANDS, PRODUCT_LINE, filterCommands, parseCommand, routeInput, scopeRedirect, suggestCommand } from './smart-entry.js';
@@ -260,7 +260,20 @@ export function App(props) {
                 setPhase('clarify');
             }),
         };
-        const ctx = new RunCtx({ runId, workflow: wf, mode, handles, roles: rs, writer, cwd: cwd ?? writer.dir, budget: budgetOverride, signal: controller.signal, events, replay });
+        const ctx = new RunCtx({
+            runId,
+            workflow: wf,
+            mode,
+            handles,
+            roles: rs,
+            writer,
+            cwd: cwd ?? writer.dir,
+            budget: budgetOverride,
+            deadlineMs: defaultDeadlineFor(wf, mode),
+            signal: controller.signal,
+            events,
+            replay,
+        });
         ctxRef.current = ctx;
         setWorkflow(wf);
         setRows(initTimeline(stages, rs, available));
@@ -286,7 +299,9 @@ export function App(props) {
             setPhase('finished');
         });
     };
-    const startIdea = (text) => startRun('idea-refinement', text, null, runIdeaRefinement, IDEA_STAGES);
+    const startIdea = (text) => {
+        startRun('idea-refinement', text, null, runIdeaRefinement, IDEA_STAGES, undefined, inferIdeaMode(text));
+    };
     const startCodeReview = async (action) => {
         if (!repo || !repo.defaultBranch) {
             setRouterMessage('code review needs a git repo with a detectable default branch');
@@ -447,7 +462,7 @@ export function App(props) {
                                     : _jsx(Text, { color: "yellow", children: _jsx(Spinner, { type: "dots" }) }), ' ', line ? line.label : `${DISPLAY_NAME[id]} — checking…`, line?.fix ? _jsxs(Text, { dimColor: true, children: ["  \u2192  ", line.fix] }) : null] }, id));
                     }), preflightFail && (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [_jsxs(Text, { color: "red", bold: true, children: ["preflight failed \u2014 ", preflightFail.ready, "/3 providers ready (aiki needs 2)"] }), _jsx(Text, { dimColor: true, children: "apply the fix shown next to each \u2716, then run `aiki` again \u00B7 `aiki doctor --fresh` re-checks live \u00B7 q quits" })] }))] })), (phase === 'input' || phase === 'running' || phase === 'grill' || phase === 'clarify' || phase === 'finished') && handles.length > 0 && (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [repo && (_jsxs(Text, { children: ["repo: ", repo.name, " \u2014 ", repo.changedFiles, " changed files vs ", repo.defaultBranch ?? 'unknown default branch'] })), _jsxs(Text, { children: [handles.map((h, i) => (_jsxs(Text, { children: [i > 0 ? _jsx(Text, { dimColor: true, children: " \u00B7 " }) : null, _jsx(Text, { color: "green", children: "\u2714" }), " ", DISPLAY_NAME[h.id], h.version ? _jsxs(Text, { dimColor: true, children: [" ", h.version] }) : null] }, h.id))), _jsx(Text, { dimColor: true, children: " \u2014 council ready" })] }), degraded.length > 0 && (_jsxs(Text, { color: "yellow", children: ["\u26A0 ", degraded.map((line) => `${line.label}${line.fix ? ` (${line.fix})` : ''}`).join(' · '), " \u2014 continuing with ", Math.max(handles.length - degraded.length, 0), "/3 providers"] }))] })), phase === 'input' && (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [_jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [_jsxs(Text, { children: [_jsx(Text, { color: "cyan", children: "/idea " }), _jsx(Text, { dimColor: true, children: '<text>' }), '   stress-test an idea'] }), _jsxs(Text, { children: [_jsx(Text, { color: "cyan", children: "/review " }), _jsx(Text, { dimColor: true, children: "[--branch]" }), '  review your changes', repo ? '' : _jsx(Text, { dimColor: true, children: "  (needs a git repo)" })] }), _jsxs(Text, { children: [_jsx(Text, { color: "cyan", children: "/resume " }), _jsx(Text, { dimColor: true, children: '<id>' }), '   continue a stopped run  ·  ', _jsx(Text, { color: "cyan", children: "/sessions" }), '  ', _jsx(Text, { color: "cyan", children: "/models" }), '  ', _jsx(Text, { color: "cyan", children: "/config" }), '  ', _jsx(Text, { color: "cyan", children: "/help" })] })] }), pendingIdea !== null ? (
                     /* V10 confirm gate — nothing spends model calls until Enter. */
-                    _jsxs(Box, { flexDirection: "column", borderStyle: "round", paddingX: 1, children: [_jsx(Text, { children: "Run the idea council on:" }), _jsxs(Text, { color: "cyan", children: ["  \u201C", pendingIdea.length > 100 ? `${pendingIdea.slice(0, 97)}…` : pendingIdea, "\u201D"] }), _jsxs(Text, { dimColor: true, children: ["  10-stage pipeline \u00B7 up to ", budgetOverride ?? defaultBudgetFor('idea-refinement', 'council'), " model calls \u00B7 Ctrl+C aborts mid-run"] }), _jsxs(Text, { children: [_jsx(Text, { color: "green", children: "enter" }), " run  \u00B7  ", _jsx(Text, { color: "yellow", children: "esc" }), " cancel"] })] })) : (_jsxs(_Fragment, { children: [_jsx(Text, { dimColor: true, children: "Type a command, or just describe your idea and press Enter:" }), _jsxs(Box, { borderStyle: "round", paddingX: 1, children: [_jsx(Text, { children: "\u25B8 " }), _jsx(TextInput, { value: idea, onChange: (v) => setIdea(v.replace(/\s*[\r\n]+\s*/g, ' ').replace(/\t/g, '')), onSubmit: submitInput }, inputEpoch)] })] })), paletteMatches.length > 0 && (
+                    _jsxs(Box, { flexDirection: "column", borderStyle: "round", paddingX: 1, children: [_jsx(Text, { children: "Run the idea council on:" }), _jsxs(Text, { color: "cyan", children: ["  \u201C", pendingIdea.length > 100 ? `${pendingIdea.slice(0, 97)}…` : pendingIdea, "\u201D"] }), _jsxs(Text, { dimColor: true, children: ["  10-stage pipeline \u00B7 ", inferIdeaMode(pendingIdea), " mode \u00B7 up to ", budgetOverride ?? defaultBudgetFor('idea-refinement', inferIdeaMode(pendingIdea)), " model calls \u00B7 Ctrl+C aborts mid-run"] }), _jsxs(Text, { children: [_jsx(Text, { color: "green", children: "enter" }), " run  \u00B7  ", _jsx(Text, { color: "yellow", children: "esc" }), " cancel"] })] })) : (_jsxs(_Fragment, { children: [_jsx(Text, { dimColor: true, children: "Type a command, or just describe your idea and press Enter:" }), _jsxs(Box, { borderStyle: "round", paddingX: 1, children: [_jsx(Text, { children: "\u25B8 " }), _jsx(TextInput, { value: idea, onChange: (v) => setIdea(v.replace(/\s*[\r\n]+\s*/g, ' ').replace(/\t/g, '')), onSubmit: submitInput }, inputEpoch)] })] })), paletteMatches.length > 0 && (
                     /* V10 live command palette — filtered as you type; ↑↓ move, Tab completes, Enter runs. */
                     _jsxs(Box, { flexDirection: "column", borderStyle: "round", paddingX: 1, children: [paletteMatches.map((m, i) => (_jsxs(Text, { children: [_jsxs(Text, { color: i === selIdx ? 'cyan' : undefined, bold: i === selIdx, children: [i === selIdx ? '▸ ' : '  ', "/", m.name] }), _jsx(Text, { dimColor: true, children: `  ${m.usage.replace(`/${m.name}`, '').trim().padEnd(10)}  ${m.help}` })] }, m.name))), _jsx(Text, { dimColor: true, children: "\u2191\u2193 select \u00B7 tab complete \u00B7 enter run" })] })), routerMessage ? _jsx(Text, { color: "yellow", children: routerMessage }) : null, panel ? (_jsx(Box, { flexDirection: "column", marginTop: 1, borderStyle: "round", paddingX: 1, children: panel.split('\n').map((l, i) => (_jsx(Text, { children: l }, i))) })) : (_jsx(Text, { dimColor: true, children: "new here? /help explains how aiki works \u00B7 long idea? `aiki run idea-refinement ./idea.md`" }))] })), (phase === 'running' || phase === 'grill' || phase === 'clarify' || phase === 'finished') && rows.length > 0 && (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [rows.map((r) => {
                         const color = r.status === 'done' ? 'green' : r.status === 'failed' ? 'red' : r.status === 'running' ? 'yellow' : 'gray';

package/dist/workflows/idea-refinement.js

@@ -15,6 +15,7 @@ import { loadSkill } from '../orchestration/skills.js';
 import { buildLanePrompts } from '../orchestration/idea-lanes.js';
 import { preflight, renderDecisionInput } from '../orchestration/preflight.js';
 import { buildQuickPrompt, quickActionPlan, quickJudgeReport, s4QuickAnalyze } from '../orchestration/quick-analysis.js';
+import { snapshotUrlSources } from '../orchestration/url-sources.js';
 /** Idea-vetting core rubric: 13 mandatory coverage items. S0 adds 3-5 domain dimensions per run.
  *  Inlined here (like the S4 template) while the skill/`rubric.json` loader (§11)
  *  is deferred; it moves to skills/idea-refinement/rubric.json when that loader lands. */
@@ -112,8 +113,15 @@ export const IDEA_STAGES = [
 export async function runIdeaRefinement(ctx, input) {
     if (ctx.evidencePack)
         await ctx.writer.writeInput('evidence-pack.json', JSON.stringify(ctx.evidencePack, null, 2));
-    const { contract, brief } = await runStage(ctx, 'S0', () => preflight(ctx, input, IDEA_RUBRIC.map((item) => item.label)));
-    const grilledInput = renderDecisionInput(input, brief);
+    const urlSources = await snapshotUrlSources(input);
+    await ctx.writer.writeJson('url-sources', urlSources);
+    const unreadableSources = urlSources.sources.filter((source) => source.status !== 'FETCHED');
+    if (ctx.mode === 'research' && unreadableSources.length > 0) {
+        const details = unreadableSources.map((source) => `${source.url} (${source.status}: ${source.error})`).join('; ');
+        throw new StageError('S0', 'SOURCE_UNREADABLE', `research stopped before model calls because a supplied source could not be read: ${details}. Paste the relevant text or provide a public export, then rerun.`);
+    }
+    const { contract, brief } = await runStage(ctx, 'S0', () => preflight(ctx, input, IDEA_RUBRIC.map((item) => item.label), urlSources));
+    const grilledInput = renderDecisionInput(input, brief, urlSources);
     // Persist the input as a file so S4's "read the file at {{INPUT_PATH}}" resolves (not a stage).
     await ctx.writer.writeInput('idea.md', input);
     await ctx.writer.writeInput('idea-brief.md', grilledInput);
@@ -144,7 +152,7 @@ export async function runIdeaRefinement(ctx, input) {
             return report;
         });
         const actionPlan = await runStage(ctx, 'S9b', async () => {
-            const plan = quickActionPlan(ctx, quick.seat.provider, quick.decision, graph);
+            const plan = quickActionPlan(ctx, quick.seat.provider, quick.decision, graph, contract);
             await ctx.writer.writeJson('action-plan', plan);
             return plan;
         });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiki-cli",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Local-first AI model council for code review and idea stress-testing using Claude Code, Codex, and Gemini/Antigravity CLIs. No API keys.",
   "type": "module",
   "license": "MIT",