chainlesschain 0.166.10 → 0.166.14

package/src/lib/llm-pricing.js

@@ -65,11 +65,21 @@ export const PRICE_TABLE = Object.freeze({
     { match: "o1", in: 15, out: 60 },
   ],
   deepseek: [
+    // DeepSeek V4 launch-list rates for the versioned 2026-04 model ids.
+    // Keep these ahead of the legacy aliases so formal budget gates never
+    // treat the current V4 models as unpriced remote usage.
+    { match: "deepseek-v4-pro", in: 0.435, out: 0.87 },
+    { match: "deepseek-v4-flash", in: 0.14, out: 0.28 },
     { match: "reasoner", in: 0.55, out: 2.19 },
     { match: "chat", in: 0.27, out: 1.1 },
   ],
   // Volcengine Doubao — rough USD conversion of public RMB list pricing.
   volcengine: [
+    // Third-party DeepSeek V4 ids exposed by Ark use the same token-accounting
+    // shape. Pricing them explicitly is required by USD-capped Agent/Team runs;
+    // falling through to the Doubao patterns would fail closed as unpriced.
+    { match: "deepseek-v4-pro", in: 0.435, out: 0.87 },
+    { match: "deepseek-v4-flash", in: 0.14, out: 0.28 },
     // Doubao Seed 2.0 family (2026, e.g. doubao-seed-2-0-lite-260215) is
     // natively multimodal. Rates ≈ official CNY ÷ ~7.2 (lite ≤32k is 0.6/3.6
     // CNY → $0.08/$0.50); the generic "seed" rate below underprices 2.0 output.

package/src/lib/memory-manager.js

@@ -8,6 +8,18 @@
 import fs from "fs";
 import path from "path";
 import { likePrefix, escapeLike } from "./sql-like.js";
+import {
+  assertLegacyMutationAllowed,
+  resolveCliContextMemoryCutover,
+} from "./context-memory-kernel/authority.js";
+
+function assertLegacyMemoryManagerMutationAllowed(operation) {
+  assertLegacyMutationAllowed(
+    resolveCliContextMemoryCutover({
+      scopeKey: `cli:legacy-memory-manager:${operation}`,
+    }),
+  );
+}
 
 /**
  * Atomically write a UTF-8 file: a crash mid-write must not truncate MEMORY.md
@@ -57,6 +69,15 @@ function ensureMemoryTable(db) {
   `);
 }
 
+function memoryTableExists(db) {
+  const row = db
+    .prepare(
+      "SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'memory_entries'",
+    )
+    .get();
+  return Boolean(row);
+}
+
 /**
  * Get the memory directory path
  */
@@ -68,6 +89,7 @@ export function getMemoryDir(dataDir) {
  * Add an entry to memory (stored in DB)
  */
 export function addMemory(db, content, options = {}) {
+  assertLegacyMemoryManagerMutationAllowed("add");
   ensureMemoryTable(db);
 
   if (!content || !content.trim()) {
@@ -142,7 +164,9 @@ export function listMemory(db, options = {}) {
  * ordered deterministically so the same DB exports identically.
  */
 export function exportMemory(db) {
-  ensureMemoryTable(db);
+  // Canonical cutover calls this as a one-time read-only importer. Do not
+  // create a legacy table merely because no legacy data exists.
+  if (!memoryTableExists(db)) return [];
   return db
     .prepare(
       `SELECT id, content, category, importance, source, created_at, updated_at
@@ -162,6 +186,7 @@ function _nowSqlite() {
  * updated_at. Never aborts mid-batch; returns {ok, imported, failed, errors}.
  */
 export function importMemory(db, entries) {
+  assertLegacyMemoryManagerMutationAllowed("import");
   ensureMemoryTable(db);
   if (!Array.isArray(entries)) {
     throw new Error("importMemory: entries must be a JSON array");
@@ -208,6 +233,7 @@ export function importMemory(db, entries) {
  * Delete a memory entry
  */
 export function deleteMemory(db, id) {
+  assertLegacyMemoryManagerMutationAllowed("delete");
   ensureMemoryTable(db);
 
   // Try exact match first, then prefix match
@@ -228,6 +254,7 @@ export function deleteMemory(db, id) {
  * Append to today's daily note
  */
 export function appendDailyNote(memoryDir, content) {
+  assertLegacyMemoryManagerMutationAllowed("append-daily-note");
   ensureMemoryDirs(memoryDir);
 
   const today = new Date().toISOString().slice(0, 10); // YYYY-MM-DD
@@ -260,8 +287,6 @@ export function getDailyNote(memoryDir, date) {
  * List available daily notes
  */
 export function listDailyNotes(memoryDir, options = {}) {
-  ensureMemoryDirs(memoryDir);
-
   const dailyDir = path.join(memoryDir, "daily");
   const limit = Math.max(1, parseInt(options.limit) || 30);
 
@@ -291,13 +316,13 @@ export function listDailyNotes(memoryDir, options = {}) {
  * Read or update the MEMORY.md file (long-term knowledge)
  */
 export function getMemoryFile(memoryDir) {
-  ensureMemoryDirs(memoryDir);
   const filePath = path.join(memoryDir, "MEMORY.md");
   if (!fs.existsSync(filePath)) return "";
   return fs.readFileSync(filePath, "utf8");
 }
 
 export function updateMemoryFile(memoryDir, content) {
+  assertLegacyMemoryManagerMutationAllowed("update-memory-file");
   ensureMemoryDirs(memoryDir);
   const filePath = path.join(memoryDir, "MEMORY.md");
   atomicWriteFileSync(filePath, content);

package/src/lib/model-context-window.js

@@ -0,0 +1,52 @@
+export const CONTEXT_WINDOWS = Object.freeze({
+  "qwen2.5:7b": 32768,
+  "qwen2.5:14b": 32768,
+  "qwen2.5-coder:14b": 32768,
+  "qwen2:7b": 32768,
+  "llama3:8b": 8192,
+  "mistral:7b": 32768,
+  "codellama:7b": 16384,
+  "gpt-4o": 128000,
+  "gpt-4o-mini": 128000,
+  "gpt-4-turbo": 128000,
+  "gpt-3.5-turbo": 16385,
+  o1: 200000,
+  "claude-opus-4-6": 200000,
+  "claude-sonnet-4-6": 200000,
+  "claude-haiku-4-5-20251001": 200000,
+  "deepseek-chat": 64000,
+  "deepseek-coder": 64000,
+  "deepseek-reasoner": 64000,
+  "qwen-turbo": 131072,
+  "qwen-plus": 131072,
+  "qwen-max": 32768,
+  "gemini-2.0-flash": 1048576,
+  "gemini-2.0-pro": 1048576,
+  "gemini-1.5-flash": 1048576,
+  "moonshot-v1-auto": 131072,
+  "moonshot-v1-8k": 8192,
+  "moonshot-v1-32k": 32768,
+  "moonshot-v1-128k": 131072,
+  "doubao-seed-1-6-251015": 32768,
+  "doubao-seed-2-1-pro-260628": 32768,
+  _provider_defaults: Object.freeze({
+    ollama: 32768,
+    openai: 128000,
+    anthropic: 200000,
+    deepseek: 64000,
+    dashscope: 131072,
+    gemini: 1048576,
+    kimi: 131072,
+    volcengine: 32768,
+    minimax: 32768,
+    mistral: 32768,
+  }),
+});
+
+export function getContextWindow(model, provider) {
+  if (model && CONTEXT_WINDOWS[model]) return CONTEXT_WINDOWS[model];
+  if (provider && CONTEXT_WINDOWS._provider_defaults[provider]) {
+    return CONTEXT_WINDOWS._provider_defaults[provider];
+  }
+  return 32768;
+}

package/src/lib/permanent-memory.js

@@ -9,6 +9,18 @@
 import fs from "fs";
 import path from "path";
 import { BM25Search } from "./bm25-search.js";
+import {
+  assertLegacyMutationAllowed,
+  resolveCliContextMemoryCutover,
+} from "./context-memory-kernel/authority.js";
+
+function assertLegacyPermanentMemoryMutationAllowed(operation) {
+  assertLegacyMutationAllowed(
+    resolveCliContextMemoryCutover({
+      scopeKey: `cli:legacy-permanent-memory:${operation}`,
+    }),
+  );
+}
 
 // Exported for test injection
 export const _deps = {
@@ -66,6 +78,7 @@ export class CLIPermanentMemory {
    */
   initialize() {
     if (this._initialized) return;
+    assertLegacyPermanentMemoryMutationAllowed("initialize");
     this._initialized = true;
 
     // Ensure directories
@@ -120,6 +133,7 @@ export class CLIPermanentMemory {
    */
   appendDailyNote(content) {
     if (!this.memoryDir || !content) return null;
+    assertLegacyPermanentMemoryMutationAllowed("append-daily-note");
 
     try {
       const today = new Date().toISOString().slice(0, 10);
@@ -154,6 +168,7 @@ export class CLIPermanentMemory {
    */
   updateMemoryFile(section, content) {
     if (!this.memoryDir) return null;
+    assertLegacyPermanentMemoryMutationAllowed("update-memory-file");
 
     try {
       const filePath = _deps.path.join(this.memoryDir, "MEMORY.md");
@@ -228,6 +243,7 @@ export class CLIPermanentMemory {
    */
   autoSummarize(sessionMessages) {
     if (!sessionMessages || sessionMessages.length < 4) return [];
+    assertLegacyPermanentMemoryMutationAllowed("auto-summarize");
 
     const facts = [];
 
@@ -281,6 +297,7 @@ export class CLIPermanentMemory {
    */
   _storeEntry(content, source = "auto", importance = 0.5) {
     if (!this.db) return null;
+    assertLegacyPermanentMemoryMutationAllowed("store-entry");
     try {
       const id = `pm-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
       this.db

package/src/lib/plan-mode.js

@@ -1530,10 +1530,14 @@ export class PlanModeManager extends EventEmitter {
    */
   _fireHook(eventName, context) {
     if (!this._hookDb) return;
-    // Dynamic import to avoid circular deps
-    import("./hook-manager.js")
-      .then(({ executeHooks }) => {
-        executeHooks(this._hookDb, eventName, context).catch(() => {});
+    // Dynamic import avoids a constructor-time dependency while keeping the
+    // legacy SQLite registry behind the canonical Hooks v2 adapter.
+    import("./hooks-v2-producers.js")
+      .then(({ executeHooksV2Event }) => {
+        executeHooksV2Event(eventName, context, {
+          hookDb: this._hookDb,
+          matchTarget: context?.target || eventName,
+        }).catch(() => {});
       })
       .catch(() => {});
   }

package/src/lib/process-execution-broker/credential-transport.js

@@ -375,4 +375,35 @@ export async function resolveCredentialRefOverTransport(refId, options = {}) {
   });
 }
 
+/**
+ * Resolve one named environment credential without copying plaintext back into
+ * process.env. Direct launches keep accepting the original environment value;
+ * brokered launches exchange the short-lived, target-bound reference that the
+ * ProcessExecutionBroker placed in CC_CRED_REF_<NAME>.
+ */
+export async function resolveCredentialEnvironmentValue(key, options = {}) {
+  if (!/^[A-Z][A-Z0-9_]*$/u.test(String(key || ""))) {
+    throw transportError(
+      "CC_CREDENTIAL_INVALID_REQUEST",
+      "Credential environment key is invalid",
+    );
+  }
+  const env = options.env || process.env;
+  const value = env[key];
+  const refId = env[`CC_CRED_REF_${key}`];
+  const hasValue = typeof value === "string" && value.length > 0;
+  const hasReference = typeof refId === "string" && refId.length > 0;
+  if (hasValue && hasReference) {
+    throw transportError(
+      "CC_CREDENTIAL_INVALID_REQUEST",
+      "Credential environment contains both plaintext and a broker reference",
+    );
+  }
+  if (hasValue) return value;
+  if (!hasReference) return null;
+  const resolveReference =
+    options.resolveReference || resolveCredentialRefOverTransport;
+  return await resolveReference(refId, { env });
+}
+
 export { TRANSPORT_VERSION };