clinkx 0.3.0 → 1.1.0

package/dist/context-builder/delegate.js

@@ -1,100 +1,252 @@
-import { CancellationError } from "../errors.js";
+import { CancellationError, InvalidParamsError } from "../errors.js";
 import { executePipeline } from "../pipeline.js";
+import { sanitizeDelegateFailureText } from "./diagnostics.js";
+// A corrective retry only makes sense when enough of the end-to-end ceiling is
+// left for a provider to actually answer; below this it would just time out.
+export const DELEGATE_CORRECTIVE_RETRY_MIN_REMAINING_SECONDS = 30;
+export const DELEGATE_CORRECTIVE_SUFFIX_MAX_CHARS = 1500;
+export const DELEGATE_CORRECTIVE_RETRY_FAILURE_SUFFIX = "(after 1 corrective JSON retry)";
+const CORRECTIVE_RETRY_ELIGIBLE_VIOLATIONS = new Set([
+    "invalid_json",
+    "non_object_json",
+    "json_salvaged",
+    "json_block_count",
+    "raw_fallback",
+]);
+// A truncated or killed response is not a formatting mistake the provider can
+// correct by being asked again; retrying would only burn the remaining budget.
+const CORRECTIVE_RETRY_BLOCKING_VIOLATIONS = new Set([
+    "capture_truncated",
+    "response_truncated",
+    "terminated",
+]);
+const PROVIDER_ERROR_SNIPPET_MAX_CHARS = 200;
 export async function runContextBuilderDelegateCall(input) {
     const child = new AbortController();
-    let timedOut = false;
-    let parentCancelled = input.signal?.aborted === true;
+    const state = {
+        timedOut: false,
+        parentCancelled: input.signal?.aborted === true,
+    };
     const timeoutMs = Math.max(0, Math.floor(input.timeout_seconds * 1_000));
+    // One deadline covers both attempts: delegate.timeout_seconds is an
+    // end-to-end ceiling, so a retry only gets what the first attempt left.
+    const deadlineMs = Date.now() + timeoutMs;
     const timeout = setTimeout(() => {
-        timedOut = true;
+        state.timedOut = true;
         child.abort();
     }, timeoutMs);
     const abortFromParent = () => {
-        parentCancelled = true;
+        state.parentCancelled = true;
         child.abort();
     };
-    if (parentCancelled) {
+    if (state.parentCancelled) {
         child.abort();
     }
     else {
         input.signal?.addEventListener("abort", abortFromParent, { once: true });
     }
+    try {
+        const first = await runDelegateAttempt(input, input.prompt, input.timeout_seconds, input.sessionLogOwner, child.signal, state);
+        if (first.result.ok || first.correctiveViolations == null) {
+            return first.result;
+        }
+        const remainingSeconds = (deadlineMs - Date.now()) / 1_000;
+        if (remainingSeconds < DELEGATE_CORRECTIVE_RETRY_MIN_REMAINING_SECONDS) {
+            return first.result;
+        }
+        if (state.parentCancelled) {
+            throw new CancellationError();
+        }
+        if (state.timedOut) {
+            return failure("timeout", "context_builder delegate call timed out");
+        }
+        const second = await runDelegateAttempt(input, `${input.prompt}${buildCorrectiveSuffix(first.correctiveViolations)}`, remainingSeconds, withAttempt(input.sessionLogOwner, 2), child.signal, state);
+        if (second.result.ok) {
+            return {
+                ...second.result,
+                corrective_retry: { attempted: true, outcome: "succeeded" },
+            };
+        }
+        // A different-class second failure would otherwise hide why the corrective
+        // retry was scheduled; keep the first machine reason code (never provider
+        // text) as a breadcrumb. The retry suffix stays last.
+        const firstFailureBreadcrumb = first.result.reason === second.result.reason
+            ? ""
+            : `; first_failure=${first.result.reason}`;
+        return {
+            ...second.result,
+            message: `${second.result.message}${firstFailureBreadcrumb} ${DELEGATE_CORRECTIVE_RETRY_FAILURE_SUFFIX}`,
+            corrective_retry: { attempted: true, outcome: "failed" },
+        };
+    }
+    finally {
+        clearTimeout(timeout);
+        input.signal?.removeEventListener("abort", abortFromParent);
+    }
+}
+async function runDelegateAttempt(input, prompt, timeoutSeconds, sessionLogOwner, signal, state) {
     try {
         const clinkInput = {
-            prompt: input.prompt,
+            prompt,
             cli_name: input.provider.cli_name,
             role: input.provider.role,
             expect_json: true,
             max_response_chars: input.max_response_chars,
-            timeout_seconds: input.timeout_seconds,
+            timeout_seconds: timeoutSeconds,
             debug: false,
             debug_keep_artifacts: false,
+            ...(input.provider.model === undefined
+                ? {}
+                : { model: input.provider.model }),
+            ...(input.provider.effort === undefined
+                ? {}
+                : { effort: input.provider.effort }),
         };
         const pipeline = await executePipeline(clinkInput, input.registry, {
-            signal: child.signal,
+            signal,
             jsonFidelity: "strict",
             allowTimeoutBelowAdapter: true,
+            // An adapter's short startup idle must not undercut the delegate's own
+            // ceiling (slow-to-first-token providers on large packets).
+            minIdleStartupSeconds: timeoutSeconds,
+            ...(sessionLogOwner == null ? {} : { sessionLogOwner }),
         });
-        const termination = pipeline.jsonFidelity?.termination;
-        if (parentCancelled) {
-            throw new CancellationError();
-        }
-        if (termination?.timedOut === true || termination?.reason === "wall") {
-            return failure("timeout", "context_builder delegate call timed out", pipeline);
-        }
-        if (termination?.reason === "cancel") {
-            throw new CancellationError();
-        }
-        const fidelity = pipeline.jsonFidelity;
-        const strict = fidelity?.strict;
-        if (fidelity == null ||
-            fidelity.mode !== "strict" ||
-            strict?.acceptable !== true) {
-            return failure("strict_json_fidelity", strictJsonFidelityMessage(fidelity), pipeline);
-        }
-        if (pipeline.isError === true) {
-            return failure("pipeline_error", "context_builder delegate pipeline returned an error", pipeline);
-        }
-        const raw = pipeline.content[0]?.text?.trim() ?? "";
-        if (raw.length === 0 || raw === "(no output)") {
-            return failure("empty_output", "context_builder delegate returned empty output", pipeline);
-        }
-        try {
-            const parsed = JSON.parse(raw);
-            if (parsed == null ||
-                typeof parsed !== "object" ||
-                Array.isArray(parsed)) {
-                return failure("invalid_json", "context_builder delegate output must be one JSON object", pipeline);
-            }
-            return {
-                ok: true,
-                json: parsed,
-                raw,
-                pipeline,
-            };
-        }
-        catch {
-            return failure("invalid_json", "context_builder delegate output was not valid JSON", pipeline);
-        }
+        return classifyPipelineResult(pipeline, state);
     }
     catch (err) {
         if (err instanceof CancellationError) {
-            if (parentCancelled) {
+            if (state.parentCancelled) {
                 throw err;
             }
-            if (timedOut) {
-                return failure("timeout", "context_builder delegate call timed out");
+            if (state.timedOut) {
+                return notEligible(failure("timeout", "context_builder delegate call timed out"));
             }
             throw err;
         }
-        return failure("pipeline_error", err instanceof Error
+        // Unsupported invocation overrides are request errors, not delegate
+        // execution failures. Preserve the original error so handleToolError (or
+        // the workflow admission/dispatch bridge) emits MCP -32602 instead of
+        // degrading to pipeline_error and, under fallback, silently proceeding.
+        if (err instanceof InvalidParamsError) {
+            throw err;
+        }
+        return notEligible(failure("pipeline_error", err instanceof Error
             ? `context_builder delegate pipeline failed: ${err.message}`
-            : "context_builder delegate pipeline failed");
+            : "context_builder delegate pipeline failed"));
     }
-    finally {
-        clearTimeout(timeout);
-        input.signal?.removeEventListener("abort", abortFromParent);
+}
+function classifyPipelineResult(pipeline, state) {
+    const fidelity = pipeline.jsonFidelity;
+    const termination = fidelity?.termination;
+    if (state.parentCancelled) {
+        throw new CancellationError();
+    }
+    // Termination outranks everything: the strict block also flags a killed run
+    // as a fidelity violation, which would otherwise mislabel an idle stall as a
+    // permanent JSON failure.
+    if (termination?.timedOut === true ||
+        termination?.reason === "wall" ||
+        termination?.reason === "idle") {
+        return notEligible(failure("timeout", termination.reason === "idle"
+            ? "context_builder delegate call timed out (idle: provider produced no output)"
+            : "context_builder delegate call timed out", pipeline));
+    }
+    if (termination?.reason === "cancel") {
+        throw new CancellationError();
+    }
+    // A provider failure (bad model, billing error, non-zero exit) is flagged
+    // isError before the strict block runs; only a JSON-shaped primary failure
+    // belongs to strict fidelity.
+    if (fidelity?.preStrictIsError === true &&
+        fidelity.semanticFailureReason !== "invalid_json_output") {
+        return notEligible(failure("pipeline_error", providerErrorMessage(pipeline), pipeline));
+    }
+    const strict = fidelity?.strict;
+    if (fidelity == null ||
+        fidelity.mode !== "strict" ||
+        strict?.acceptable !== true) {
+        return {
+            result: failure("strict_json_fidelity", strictJsonFidelityMessage(fidelity), pipeline),
+            correctiveViolations: correctiveViolations(strict?.violations ?? []),
+        };
+    }
+    if (pipeline.isError === true) {
+        return notEligible(failure("pipeline_error", "context_builder delegate pipeline returned an error", pipeline));
+    }
+    const raw = pipeline.content[0]?.text?.trim() ?? "";
+    if (raw.length === 0 || raw === "(no output)") {
+        return notEligible(failure("empty_output", "context_builder delegate returned empty output", pipeline));
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
     }
+    catch {
+        return {
+            result: failure("invalid_json", "context_builder delegate output was not valid JSON", pipeline),
+            correctiveViolations: ["invalid_json"],
+        };
+    }
+    if (parsed == null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return {
+            result: failure("invalid_json", "context_builder delegate output must be one JSON object", pipeline),
+            correctiveViolations: ["non_object_json"],
+        };
+    }
+    return {
+        result: {
+            ok: true,
+            json: parsed,
+            raw,
+            pipeline,
+        },
+        correctiveViolations: null,
+    };
+}
+function notEligible(result) {
+    return { result, correctiveViolations: null };
+}
+function correctiveViolations(violations) {
+    if (violations.some((v) => CORRECTIVE_RETRY_BLOCKING_VIOLATIONS.has(v))) {
+        return null;
+    }
+    const eligible = violations.filter((v) => CORRECTIVE_RETRY_ELIGIBLE_VIOLATIONS.has(v));
+    return eligible.length === 0 ? null : eligible;
+}
+/**
+ * Appended to the ORIGINAL prompt only (never to a previous corrective
+ * prompt), so at most one suffix is ever present.
+ */
+function buildCorrectiveSuffix(violations) {
+    const head = "\n\n---\nCORRECTIVE RETRY: your previous response was rejected by the " +
+        "server's strict JSON check (violations: ";
+    const tail = "). Answer the task above again. Respond with exactly one JSON object and " +
+        "nothing else: no prose, no markdown code fences, no second JSON value. " +
+        "Keep the same output schema the task requires.\n";
+    const budget = DELEGATE_CORRECTIVE_SUFFIX_MAX_CHARS - head.length - tail.length;
+    let list = violations.join(", ");
+    if (list.length > budget) {
+        list = `${list.slice(0, Math.max(0, budget - 3))}...`;
+    }
+    return `${head}${list}${tail}`;
+}
+function withAttempt(owner, attempt) {
+    if (owner == null) {
+        return undefined;
+    }
+    // Only owners that already carry attempt identity get a new lane; stamping
+    // attempt onto one without it would violate the owner schema.
+    if (owner.family === "activity" || owner.attempt === undefined) {
+        return owner;
+    }
+    return { ...owner, attempt };
+}
+function providerErrorMessage(pipeline) {
+    const text = pipeline.content[0]?.text ?? "";
+    const snippet = sanitizeDelegateFailureText(text, PROVIDER_ERROR_SNIPPET_MAX_CHARS);
+    return snippet.length === 0
+        ? "context_builder delegate pipeline returned an error"
+        : `context_builder delegate pipeline returned an error: ${snippet}`;
 }
 function failure(reason, message, pipeline) {
     return {

package/dist/context-builder/delegate.js.map

@@ -1 +1 @@
-{"version":3,"file":"delegate.js","sourceRoot":"","sources":["../../src/context-builder/delegate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,eAAe,EAAuB,MAAM,gBAAgB,CAAC;AAmCtE,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAAsC;IAEtC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,eAAe,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;QAC9B,QAAQ,GAAG,IAAI,CAAC;QAChB,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,EAAE,SAAS,CAAC,CAAC;IACd,MAAM,eAAe,GAAG,GAAS,EAAE;QACjC,eAAe,GAAG,IAAI,CAAC;QACvB,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC;IAEF,IAAI,eAAe,EAAE,CAAC;QACpB,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAe;YAC7B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;YACjC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YACzB,WAAW,EAAE,IAAI;YACjB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,KAAK,EAAE,KAAK;YACZ,oBAAoB,EAAE,KAAK;SAC5B,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE;YACjE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,QAAQ;YACtB,wBAAwB,EAAE,IAAI;SAC/B,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;QACvD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,WAAW,EAAE,QAAQ,KAAK,IAAI,IAAI,WAAW,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;YACrE,OAAO,OAAO,CACZ,SAAS,EACT,yCAAyC,EACzC,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC;QACvC,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC;QAChC,IACE,QAAQ,IAAI,IAAI;YAChB,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAC1B,MAAM,EAAE,UAAU,KAAK,IAAI,EAC3B,CAAC;YACD,OAAO,OAAO,CACZ,sBAAsB,EACtB,yBAAyB,CAAC,QAAQ,CAAC,EACnC,QAAQ,CACT,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO,OAAO,CACZ,gBAAgB,EAChB,qDAAqD,EACrD,QAAQ,CACT,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACpD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC9C,OAAO,OAAO,CACZ,cAAc,EACd,gDAAgD,EAChD,QAAQ,CACT,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;YAC1C,IACE,MAAM,IAAI,IAAI;gBACd,OAAO,MAAM,KAAK,QAAQ;gBAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACrB,CAAC;gBACD,OAAO,OAAO,CACZ,cAAc,EACd,yDAAyD,EACzD,QAAQ,CACT,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,MAAiC;gBACvC,GAAG;gBACH,QAAQ;aACT,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CACZ,cAAc,EACd,oDAAoD,EACpD,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YACrC,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,OAAO,CAAC,SAAS,EAAE,yCAAyC,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,OAAO,OAAO,CACZ,gBAAgB,EAChB,GAAG,YAAY,KAAK;YAClB,CAAC,CAAC,6CAA6C,GAAG,CAAC,OAAO,EAAE;YAC5D,CAAC,CAAC,0CAA0C,CAC/C,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,MAA2C,EAC3C,OAAe,EACf,QAAyB;IAEzB,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM;QACN,OAAO;QACP,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,QAAwC;IAExC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,QAAQ,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,cAAc,QAAQ,CAAC,MAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,wDAAwD;QAC1D,CAAC,CAAC,2DAA2D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACtF,CAAC"}
+{"version":3,"file":"delegate.js","sourceRoot":"","sources":["../../src/context-builder/delegate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,eAAe,EAAuB,MAAM,gBAAgB,CAAC;AAGtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AA0C/D,+EAA+E;AAC/E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,+CAA+C,GAAG,EAAE,CAAC;AAClE,MAAM,CAAC,MAAM,oCAAoC,GAAG,IAAI,CAAC;AACzD,MAAM,CAAC,MAAM,wCAAwC,GACnD,iCAAiC,CAAC;AAEpC,MAAM,oCAAoC,GAAwB,IAAI,GAAG,CAAC;IACxE,cAAc;IACd,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,cAAc;CACf,CAAC,CAAC;AACH,8EAA8E;AAC9E,+EAA+E;AAC/E,MAAM,oCAAoC,GAAwB,IAAI,GAAG,CAAC;IACxE,mBAAmB;IACnB,oBAAoB;IACpB,YAAY;CACb,CAAC,CAAC;AACH,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAQ7C,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAAsC;IAEtC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG;QACZ,QAAQ,EAAE,KAAK;QACf,eAAe,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;KAChD,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC;IACzE,oEAAoE;IACpE,wEAAwE;IACxE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;QAC9B,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,EAAE,SAAS,CAAC,CAAC;IACd,MAAM,eAAe,GAAG,GAAS,EAAE;QACjC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC;QAC7B,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC;IAEF,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,kBAAkB,CACpC,KAAK,EACL,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,eAAe,EACrB,KAAK,CAAC,eAAe,EACrB,KAAK,CAAC,MAAM,EACZ,KAAK,CACN,CAAC;QACF,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,CAAC,oBAAoB,IAAI,IAAI,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;QAED,MAAM,gBAAgB,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;QAC3D,IAAI,gBAAgB,GAAG,+CAA+C,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;QACD,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YAC1B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,OAAO,CAAC,SAAS,EAAE,yCAAyC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,KAAK,EACL,GAAG,KAAK,CAAC,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,EACrE,gBAAgB,EAChB,WAAW,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,EACrC,KAAK,CAAC,MAAM,EACZ,KAAK,CACN,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO;gBACL,GAAG,MAAM,CAAC,MAAM;gBAChB,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE;aAC5D,CAAC;QACJ,CAAC;QACD,2EAA2E;QAC3E,0EAA0E;QAC1E,sDAAsD;QACtD,MAAM,sBAAsB,GAC1B,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM;YAC1C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,mBAAmB,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC/C,OAAO;YACL,GAAG,MAAM,CAAC,MAAM;YAChB,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,sBAAsB,IAAI,wCAAwC,EAAE;YACxG,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;SACzD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAAsC,EACtC,MAAc,EACd,cAAsB,EACtB,eAA8C,EAC9C,MAAmB,EACnB,KAAsD;IAEtD,IAAI,CAAC;QACH,MAAM,UAAU,GAAe;YAC7B,MAAM;YACN,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;YACjC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YACzB,WAAW,EAAE,IAAI;YACjB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,eAAe,EAAE,cAAc;YAC/B,KAAK,EAAE,KAAK;YACZ,oBAAoB,EAAE,KAAK;YAC3B,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS;gBACpC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;SACvC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE;YACjE,MAAM;YACN,YAAY,EAAE,QAAQ;YACtB,wBAAwB,EAAE,IAAI;YAC9B,uEAAuE;YACvE,4DAA4D;YAC5D,qBAAqB,EAAE,cAAc;YACrC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;SACxD,CAAC,CAAC;QACH,OAAO,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC1B,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO,WAAW,CAChB,OAAO,CAAC,SAAS,EAAE,yCAAyC,CAAC,CAC9D,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,oEAAoE;QACpE,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;YACtC,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,OAAO,WAAW,CAChB,OAAO,CACL,gBAAgB,EAChB,GAAG,YAAY,KAAK;YAClB,CAAC,CAAC,6CAA6C,GAAG,CAAC,OAAO,EAAE;YAC5D,CAAC,CAAC,0CAA0C,CAC/C,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAAwB,EACxB,KAAsD;IAEtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC;IACvC,MAAM,WAAW,GAAG,QAAQ,EAAE,WAAW,CAAC;IAC1C,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,MAAM,IAAI,iBAAiB,EAAE,CAAC;IAChC,CAAC;IACD,4EAA4E;IAC5E,6EAA6E;IAC7E,0BAA0B;IAC1B,IACE,WAAW,EAAE,QAAQ,KAAK,IAAI;QAC9B,WAAW,EAAE,MAAM,KAAK,MAAM;QAC9B,WAAW,EAAE,MAAM,KAAK,MAAM,EAC9B,CAAC;QACD,OAAO,WAAW,CAChB,OAAO,CACL,SAAS,EACT,WAAW,CAAC,MAAM,KAAK,MAAM;YAC3B,CAAC,CAAC,6EAA6E;YAC/E,CAAC,CAAC,yCAAyC,EAC7C,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,iBAAiB,EAAE,CAAC;IAChC,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,8BAA8B;IAC9B,IACE,QAAQ,EAAE,gBAAgB,KAAK,IAAI;QACnC,QAAQ,CAAC,qBAAqB,KAAK,qBAAqB,EACxD,CAAC;QACD,OAAO,WAAW,CAChB,OAAO,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC;IAChC,IACE,QAAQ,IAAI,IAAI;QAChB,QAAQ,CAAC,IAAI,KAAK,QAAQ;QAC1B,MAAM,EAAE,UAAU,KAAK,IAAI,EAC3B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,OAAO,CACb,sBAAsB,EACtB,yBAAyB,CAAC,QAAQ,CAAC,EACnC,QAAQ,CACT;YACD,oBAAoB,EAAE,oBAAoB,CAAC,MAAM,EAAE,UAAU,IAAI,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC9B,OAAO,WAAW,CAChB,OAAO,CACL,gBAAgB,EAChB,qDAAqD,EACrD,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;QAC9C,OAAO,WAAW,CAChB,OAAO,CACL,cAAc,EACd,gDAAgD,EAChD,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,MAAM,EAAE,OAAO,CACb,cAAc,EACd,oDAAoD,EACpD,QAAQ,CACT;YACD,oBAAoB,EAAE,CAAC,cAAc,CAAC;SACvC,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,OAAO;YACL,MAAM,EAAE,OAAO,CACb,cAAc,EACd,yDAAyD,EACzD,QAAQ,CACT;YACD,oBAAoB,EAAE,CAAC,iBAAiB,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,MAAiC;YACvC,GAAG;YACH,QAAQ;SACT;QACD,oBAAoB,EAAE,IAAI;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,MAAwC;IAExC,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,oBAAoB,CAAC,UAA6B;IACzD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oCAAoC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACvC,oCAAoC,CAAC,GAAG,CAAC,CAAC,CAAC,CAC5C,CAAC;IACF,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,UAA6B;IAC1D,MAAM,IAAI,GACR,wEAAwE;QACxE,0CAA0C,CAAC;IAC7C,MAAM,IAAI,GACR,2EAA2E;QAC3E,yEAAyE;QACzE,kDAAkD,CAAC;IACrD,MAAM,MAAM,GAAG,oCAAoC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAChF,IAAI,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QACzB,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAClB,KAAoC,EACpC,OAAe;IAEf,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,2EAA2E;IAC3E,8DAA8D;IAC9D,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAwB;IACpD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,2BAA2B,CACzC,IAAI,EACJ,gCAAgC,CACjC,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,qDAAqD;QACvD,CAAC,CAAC,wDAAwD,OAAO,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,OAAO,CACd,MAA2C,EAC3C,OAAe,EACf,QAAyB;IAEzB,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM;QACN,OAAO;QACP,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,QAAwC;IAExC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,QAAQ,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,cAAc,QAAQ,CAAC,MAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,wDAAwD;QAC1D,CAAC,CAAC,2DAA2D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACtF,CAAC"}

package/dist/context-builder/diagnostics.d.ts

@@ -11,7 +11,7 @@ export type ContextBuilderOmission = {
     omitted_path_count?: number;
 };
 export declare const CONTEXT_BUILDER_REQUESTED_EVIDENCE_OMISSION_REASON = "requested_evidence_omission";
-export type ContextBuilderRequestedEvidenceOmissionKind = "unavailable" | "too_large" | "candidate_cap" | "discovery_candidate_cap" | "packet_token_cap" | "pruned";
+export type ContextBuilderRequestedEvidenceOmissionKind = "unavailable" | "too_large" | "candidate_cap" | "discovery_candidate_cap" | "packet_token_cap" | "packet_json_byte_cap";
 export declare function requestedEvidenceOmission(input: {
     root_index?: number;
     kind: ContextBuilderRequestedEvidenceOmissionKind;
@@ -22,6 +22,15 @@ export declare function isRequestedEvidenceOmission(omission: Pick<ContextBuilde
 export declare function boundContextBuilderWarnings(warnings: ContextBuilderWarning[], caps?: Pick<ContextBuilderInternalCaps, "max_warnings">): ContextBuilderWarning[];
 export declare function boundContextBuilderOmissions(omissions: ContextBuilderOmission[], caps?: Pick<ContextBuilderInternalCaps, "max_omissions" | "max_paths_per_omission">): ContextBuilderOmission[];
 export declare function boundContextBuilderPathList(paths: string[], maxPaths?: number): string[];
-export declare function sanitizeDiagnosticText(text: string): string;
+export declare function sanitizeDiagnosticText(text: string, allowSecrets?: boolean): string;
+/**
+ * Bounded sanitizer dedicated to delegate-failure reasons. Applies the exact
+ * redaction guarantees of sanitizeDiagnosticText (whitespace collapse,
+ * secret-material fail-closed redaction, embedded absolute-path redaction) but
+ * with a wider ceiling and an explicit truncation marker instead of a bare
+ * trailing "...", so a truncated failure reason is never mistaken for a
+ * complete one.
+ */
+export declare function sanitizeDelegateFailureText(text: string, maxLength?: number): string;
 export declare function hasEmbeddedAbsolutePath(text: string): boolean;
 export declare function sanitizeProgressMessage(message: string): string;

package/dist/context-builder/diagnostics.js

@@ -1,5 +1,5 @@
 import { CONTEXT_BUILDER_INTERNAL_CAP_DEFAULTS, } from "./config.js";
-import { hasHighConfidenceSecret, scanSecretPath } from "./secrets.js";
+import { hasDisallowedSecretMaterial, hasHighConfidenceSecret, scanSecretPath, } from "./secrets.js";
 export const CONTEXT_BUILDER_REQUESTED_EVIDENCE_OMISSION_REASON = "requested_evidence_omission";
 export function requestedEvidenceOmission(input) {
     return {
@@ -15,7 +15,17 @@ export function isRequestedEvidenceOmission(omission) {
 const MAX_DIAGNOSTIC_TEXT_LENGTH = 240;
 const MAX_PROGRESS_TEXT_LENGTH = 120;
 const MAX_PATH_TEXT_LENGTH = 300;
-const EMBEDDED_ABSOLUTE_PATH_PATTERN = /(^|[\s=:(\["'`])((?:~\/|\/(?!\/)|[A-Za-z]:[\\/]|\\\\)[^\s"'`,;)\]}]*)/g;
+// Dedicated ceiling for delegate-failure reasons. These messages aggregate
+// many per-omission entries, so the general 240-char diagnostic bound silently
+// dropped every entry past the first one or two. The wider bound is scoped to
+// this one error path; other callers keep MAX_DIAGNOSTIC_TEXT_LENGTH.
+const MAX_DELEGATE_FAILURE_TEXT_LENGTH = 2000;
+const DELEGATE_FAILURE_TRUNCATION_MARKER = " [truncated]";
+// Leading boundary is the negated class [^\w] to bias toward over-redaction: any
+// non-word char before an absolute-path start counts as a boundary, so delimiter-glued
+// paths can't slip through. Word-char glue is left unflagged on purpose (word/Users is a
+// relative path, not an absolute disclosure).
+const EMBEDDED_ABSOLUTE_PATH_PATTERN = /(^|[^\w])((?:~\/|\/(?!\/)|[A-Za-z]:[\\/]|\\\\)[^\s"'`,;)\]}]*)/g;
 export function boundContextBuilderWarnings(warnings, caps = CONTEXT_BUILDER_INTERNAL_CAP_DEFAULTS) {
     return warnings.slice(0, caps.max_warnings).map((warning) => ({
         code: sanitizeDiagnosticText(warning.code),
@@ -38,16 +48,39 @@ export function boundContextBuilderOmissions(omissions, caps = CONTEXT_BUILDER_I
 export function boundContextBuilderPathList(paths, maxPaths = CONTEXT_BUILDER_INTERNAL_CAP_DEFAULTS.max_paths_per_omission) {
     return paths.slice(0, maxPaths).map(sanitizePathText);
 }
-export function sanitizeDiagnosticText(text) {
-    const collapsed = redactEmbeddedAbsolutePaths(text.replace(/\s+/g, " ").trim());
-    if (hasHighConfidenceSecret(collapsed)) {
-        return "[redacted-sensitive]";
+export function sanitizeDiagnosticText(text, allowSecrets = false) {
+    if (allowSecrets === true) {
+        return text;
     }
+    const collapsed = collapseAndRedactDiagnosticText(text);
     const bounded = collapsed.length > MAX_DIAGNOSTIC_TEXT_LENGTH
         ? `${collapsed.slice(0, MAX_DIAGNOSTIC_TEXT_LENGTH - 3)}...`
         : collapsed;
     return bounded;
 }
+/**
+ * Bounded sanitizer dedicated to delegate-failure reasons. Applies the exact
+ * redaction guarantees of sanitizeDiagnosticText (whitespace collapse,
+ * secret-material fail-closed redaction, embedded absolute-path redaction) but
+ * with a wider ceiling and an explicit truncation marker instead of a bare
+ * trailing "...", so a truncated failure reason is never mistaken for a
+ * complete one.
+ */
+export function sanitizeDelegateFailureText(text, maxLength = MAX_DELEGATE_FAILURE_TEXT_LENGTH) {
+    const collapsed = collapseAndRedactDiagnosticText(text);
+    if (collapsed.length <= maxLength) {
+        return collapsed;
+    }
+    const sliceLength = Math.max(0, maxLength - DELEGATE_FAILURE_TRUNCATION_MARKER.length);
+    return `${collapsed.slice(0, sliceLength)}${DELEGATE_FAILURE_TRUNCATION_MARKER}`;
+}
+function collapseAndRedactDiagnosticText(text) {
+    const collapsedWhitespace = text.replace(/\s+/g, " ").trim();
+    if (hasDisallowedSecretMaterial(collapsedWhitespace, false)) {
+        return "[redacted-sensitive]";
+    }
+    return redactEmbeddedAbsolutePaths(collapsedWhitespace);
+}
 export function hasEmbeddedAbsolutePath(text) {
     EMBEDDED_ABSOLUTE_PATH_PATTERN.lastIndex = 0;
     return EMBEDDED_ABSOLUTE_PATH_PATTERN.test(text);

package/dist/context-builder/diagnostics.js.map

@@ -1 +1 @@
-{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../src/context-builder/diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qCAAqC,GAEtC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAevE,MAAM,CAAC,MAAM,kDAAkD,GAC7D,6BAA6B,CAAC;AAUhC,MAAM,UAAU,yBAAyB,CAAC,KAKzC;IACC,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;QACrE,MAAM,EAAE,kDAAkD;QAC1D,OAAO,EAAE,qCAAqC,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,OAAO,EAAE;QAC7E,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAgD;IAEhD,OAAO,QAAQ,CAAC,MAAM,KAAK,kDAAkD,CAAC;AAChF,CAAC;AAED,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,8BAA8B,GAClC,wEAAwE,CAAC;AAE3E,MAAM,UAAU,2BAA2B,CACzC,QAAiC,EACjC,OACE,qCAAqC;IAEvC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC;QAC1C,OAAO,EAAE,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC;KACjD,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,SAAmC,EACnC,OAGI,qCAAqC;IAEzC,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC3E,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC/C,OAAO,EAAE,sBAAsB,CAAC,QAAQ,CAAC,OAAO,CAAC;QACjD,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI;YACxB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,KAAK,EAAE,2BAA2B,CAChC,QAAQ,CAAC,KAAK,EACd,IAAI,CAAC,sBAAsB,CAC5B;gBACD,kBAAkB,EAAE,IAAI,CAAC,GAAG,CAC1B,CAAC,EACD,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,sBAAsB,CACpD;aACF,CAAC;KACP,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAe,EACf,QAAQ,GAAG,qCAAqC,CAAC,sBAAsB;IAEvE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,SAAS,GAAG,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,IAAI,uBAAuB,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED,MAAM,OAAO,GACX,SAAS,CAAC,MAAM,GAAG,0BAA0B;QAC3C,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,0BAA0B,GAAG,CAAC,CAAC,KAAK;QAC5D,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,8BAA8B,CAAC,SAAS,GAAG,CAAC,CAAC;IAC7C,OAAO,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAY;IAC/C,8BAA8B,CAAC,SAAS,GAAG,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,OAAO,CACjB,8BAA8B,EAC9B,4BAA4B,CAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAClD,OAAO,SAAS,CAAC,MAAM,GAAG,wBAAwB;QAChD,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,GAAG,CAAC,CAAC,KAAK;QAC1D,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IACtD,IACE,cAAc,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;QACrC,uBAAuB,CAAC,UAAU,CAAC,EACnC,CAAC;QACD,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAE1D,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../src/context-builder/diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qCAAqC,GAEtC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,cAAc,GACf,MAAM,cAAc,CAAC;AAetB,MAAM,CAAC,MAAM,kDAAkD,GAC7D,6BAA6B,CAAC;AAUhC,MAAM,UAAU,yBAAyB,CAAC,KAKzC;IACC,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;QACrE,MAAM,EAAE,kDAAkD;QAC1D,OAAO,EAAE,qCAAqC,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,OAAO,EAAE;QAC7E,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAgD;IAEhD,OAAO,QAAQ,CAAC,MAAM,KAAK,kDAAkD,CAAC;AAChF,CAAC;AAED,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,2EAA2E;AAC3E,+EAA+E;AAC/E,8EAA8E;AAC9E,sEAAsE;AACtE,MAAM,gCAAgC,GAAG,IAAI,CAAC;AAC9C,MAAM,kCAAkC,GAAG,cAAc,CAAC;AAC1D,iFAAiF;AACjF,uFAAuF;AACvF,yFAAyF;AACzF,8CAA8C;AAC9C,MAAM,8BAA8B,GAClC,iEAAiE,CAAC;AAEpE,MAAM,UAAU,2BAA2B,CACzC,QAAiC,EACjC,OACE,qCAAqC;IAEvC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC;QAC1C,OAAO,EAAE,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC;KACjD,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,SAAmC,EACnC,OAGI,qCAAqC;IAEzC,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC3E,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC/C,OAAO,EAAE,sBAAsB,CAAC,QAAQ,CAAC,OAAO,CAAC;QACjD,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI;YACxB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,KAAK,EAAE,2BAA2B,CAChC,QAAQ,CAAC,KAAK,EACd,IAAI,CAAC,sBAAsB,CAC5B;gBACD,kBAAkB,EAAE,IAAI,CAAC,GAAG,CAC1B,CAAC,EACD,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,sBAAsB,CACpD;aACF,CAAC;KACP,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAe,EACf,QAAQ,GAAG,qCAAqC,CAAC,sBAAsB;IAEvE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,YAAY,GAAG,KAAK;IAEpB,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;IAExD,MAAM,OAAO,GACX,SAAS,CAAC,MAAM,GAAG,0BAA0B;QAC3C,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,0BAA0B,GAAG,CAAC,CAAC,KAAK;QAC5D,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAY,EACZ,SAAS,GAAG,gCAAgC;IAE5C,MAAM,SAAS,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAC1B,CAAC,EACD,SAAS,GAAG,kCAAkC,CAAC,MAAM,CACtD,CAAC;IACF,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,GAAG,kCAAkC,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,+BAA+B,CAAC,IAAY;IACnD,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,2BAA2B,CAAC,mBAAmB,EAAE,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,OAAO,2BAA2B,CAAC,mBAAmB,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,8BAA8B,CAAC,SAAS,GAAG,CAAC,CAAC;IAC7C,OAAO,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAY;IAC/C,8BAA8B,CAAC,SAAS,GAAG,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,OAAO,CACjB,8BAA8B,EAC9B,4BAA4B,CAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAClD,OAAO,SAAS,CAAC,MAAM,GAAG,wBAAwB;QAChD,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,GAAG,CAAC,CAAC,KAAK;QAC1D,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IACtD,IACE,cAAc,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;QACrC,uBAAuB,CAAC,UAAU,CAAC,EACnC,CAAC;QACD,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAE1D,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/context-builder/discovery-progress.d.ts

@@ -0,0 +1,25 @@
+import type { ContextBuilderDiscoveryMetrics } from "./discovery.js";
+import type { ContextBuilderLifecycleController } from "./lifecycle-observer.js";
+/** Discovery invokes the progress sink at most once per this many file boundaries. */
+export declare const CONTEXT_BUILDER_SCAN_PROGRESS_EVERY_FILES = 250;
+/** Minimum wall-clock gap between two published mid-scan transitions. */
+export declare const CONTEXT_BUILDER_SCAN_PROGRESS_MIN_INTERVAL_MS = 2000;
+export type ContextBuilderScanProgressPublisher = (metrics: Readonly<ContextBuilderDiscoveryMetrics>) => void;
+/**
+ * Throttled mid-scan lifecycle publisher for the discovery walk: turns
+ * sampled discovery metrics into `scanning → scanning` count transitions so a
+ * long scan stays observable in `state.json` and `workflow_run_status`.
+ *
+ * Emits at most once per {@link CONTEXT_BUILDER_SCAN_PROGRESS_EVERY_FILES}
+ * newly seen files AND {@link CONTEXT_BUILDER_SCAN_PROGRESS_MIN_INTERVAL_MS}
+ * apart. No final emission: the handler's `searching` transition publishes the
+ * authoritative end-of-scan counts.
+ *
+ * Fire-and-forget: the walk never awaits publication, and a rejected
+ * transition is swallowed here so it never becomes an unhandled rejection. The
+ * controller's own fail-closed contract still applies — an observer rejection
+ * poisons the controller, so the next awaited transition fails the run.
+ */
+export declare function createScanProgressPublisher(lifecycle: Pick<ContextBuilderLifecycleController, "transition"> | undefined, options?: {
+    readonly now?: () => number;
+}): ContextBuilderScanProgressPublisher;

package/dist/context-builder/discovery-progress.js

@@ -0,0 +1,64 @@
+/** Discovery invokes the progress sink at most once per this many file boundaries. */
+export const CONTEXT_BUILDER_SCAN_PROGRESS_EVERY_FILES = 250;
+/** Minimum wall-clock gap between two published mid-scan transitions. */
+export const CONTEXT_BUILDER_SCAN_PROGRESS_MIN_INTERVAL_MS = 2_000;
+/**
+ * Throttled mid-scan lifecycle publisher for the discovery walk: turns
+ * sampled discovery metrics into `scanning → scanning` count transitions so a
+ * long scan stays observable in `state.json` and `workflow_run_status`.
+ *
+ * Emits at most once per {@link CONTEXT_BUILDER_SCAN_PROGRESS_EVERY_FILES}
+ * newly seen files AND {@link CONTEXT_BUILDER_SCAN_PROGRESS_MIN_INTERVAL_MS}
+ * apart. No final emission: the handler's `searching` transition publishes the
+ * authoritative end-of-scan counts.
+ *
+ * Fire-and-forget: the walk never awaits publication, and a rejected
+ * transition is swallowed here so it never becomes an unhandled rejection. The
+ * controller's own fail-closed contract still applies — an observer rejection
+ * poisons the controller, so the next awaited transition fails the run.
+ */
+export function createScanProgressPublisher(lifecycle, options = {}) {
+    if (lifecycle == null) {
+        return () => { };
+    }
+    const now = options.now ?? (() => performance.now());
+    let lastFilesSeen = 0;
+    let lastEmittedAt;
+    return (metrics) => {
+        if (metrics.files_seen - lastFilesSeen < CONTEXT_BUILDER_SCAN_PROGRESS_EVERY_FILES) {
+            return;
+        }
+        const at = now();
+        if (lastEmittedAt != null &&
+            at - lastEmittedAt < CONTEXT_BUILDER_SCAN_PROGRESS_MIN_INTERVAL_MS) {
+            return;
+        }
+        lastFilesSeen = metrics.files_seen;
+        lastEmittedAt = at;
+        try {
+            lifecycle
+                .transition("scanning", { counts: scanCountsFromMetrics(metrics) })
+                .catch(() => { });
+        }
+        catch {
+            // A synchronously throwing controller is equally non-fatal to discovery.
+        }
+    };
+}
+/**
+ * Mid-scan projection of the counts shape `lifecycleCountsFromDiscovery`
+ * publishes at `searching`. Omissions, search results, selection, and writes
+ * are not known until the walk ends, so they stay zero here.
+ */
+function scanCountsFromMetrics(metrics) {
+    return {
+        files_seen: metrics.files_seen,
+        files_considered: metrics.files_considered,
+        files_selected: 0,
+        files_omitted: 0,
+        search_results: 0,
+        bytes_read: metrics.bytes_read,
+        bytes_written: 0,
+    };
+}
+//# sourceMappingURL=discovery-progress.js.map

package/dist/context-builder/discovery-progress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-progress.js","sourceRoot":"","sources":["../../src/context-builder/discovery-progress.ts"],"names":[],"mappings":"AAMA,sFAAsF;AACtF,MAAM,CAAC,MAAM,yCAAyC,GAAG,GAAG,CAAC;AAE7D,yEAAyE;AACzE,MAAM,CAAC,MAAM,6CAA6C,GAAG,KAAK,CAAC;AAMnE;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,2BAA2B,CACzC,SAA4E,EAC5E,UAA2C,EAAE;IAE7C,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACtB,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IACrD,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,aAAiC,CAAC;IACtC,OAAO,CAAC,OAAO,EAAE,EAAE;QACjB,IAAI,OAAO,CAAC,UAAU,GAAG,aAAa,GAAG,yCAAyC,EAAE,CAAC;YACnF,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;QACjB,IACE,aAAa,IAAI,IAAI;YACrB,EAAE,GAAG,aAAa,GAAG,6CAA6C,EAClE,CAAC;YACD,OAAO;QACT,CAAC;QACD,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC;QACnC,aAAa,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,SAAS;iBACN,UAAU,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;iBAClE,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,OAAiD;IAEjD,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,cAAc,EAAE,CAAC;QACjB,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE,CAAC;QACjB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,aAAa,EAAE,CAAC;KACjB,CAAC;AACJ,CAAC"}

package/dist/context-builder/discovery-watchdog.d.ts

@@ -0,0 +1,15 @@
+/** Same window as the write watchdog and the dashboard write-phase stale overlay. */
+export declare const CONTEXT_BUILDER_DISCOVERY_WATCHDOG_MS: number;
+/**
+ * Bound the discovery/scanning phase wall clock. MCP cancel still wins when
+ * the caller signal aborts first; a watchdog-only abort becomes
+ * ExecutionError so the lifecycle records a failure, not a cancellation.
+ *
+ * The abort is observed at the walk's file-boundary checks and event-loop
+ * yields, so a single synchronous stretch (one sanitize call) runs to
+ * completion before the timer can take effect.
+ */
+export declare function withContextBuilderDiscoveryWatchdog<T>(work: (signal: AbortSignal) => Promise<T>, options?: {
+    readonly signal?: AbortSignal | undefined;
+    readonly timeoutMs?: number;
+}): Promise<T>;

package/dist/context-builder/discovery-watchdog.js

@@ -0,0 +1,39 @@
+import { ExecutionError } from "../errors.js";
+/** Same window as the write watchdog and the dashboard write-phase stale overlay. */
+export const CONTEXT_BUILDER_DISCOVERY_WATCHDOG_MS = 10 * 60 * 1_000;
+/**
+ * Bound the discovery/scanning phase wall clock. MCP cancel still wins when
+ * the caller signal aborts first; a watchdog-only abort becomes
+ * ExecutionError so the lifecycle records a failure, not a cancellation.
+ *
+ * The abort is observed at the walk's file-boundary checks and event-loop
+ * yields, so a single synchronous stretch (one sanitize call) runs to
+ * completion before the timer can take effect.
+ */
+export async function withContextBuilderDiscoveryWatchdog(work, options = {}) {
+    const timeoutMs = options.timeoutMs ?? CONTEXT_BUILDER_DISCOVERY_WATCHDOG_MS;
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1) {
+        throw new ExecutionError("context_builder discovery watchdog timeout is invalid");
+    }
+    const watchdog = new AbortController();
+    const timer = setTimeout(() => {
+        watchdog.abort();
+    }, timeoutMs);
+    timer.unref();
+    const signal = options.signal == null
+        ? watchdog.signal
+        : AbortSignal.any([options.signal, watchdog.signal]);
+    try {
+        return await work(signal);
+    }
+    catch (error) {
+        if (watchdog.signal.aborted && options.signal?.aborted !== true) {
+            throw new ExecutionError(`context_builder discovery phase exceeded ${String(timeoutMs)}ms`);
+        }
+        throw error;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=discovery-watchdog.js.map

package/dist/context-builder/discovery-watchdog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-watchdog.js","sourceRoot":"","sources":["../../src/context-builder/discovery-watchdog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,qFAAqF;AACrF,MAAM,CAAC,MAAM,qCAAqC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAErE;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,IAAyC,EACzC,UAGI,EAAE;IAEN,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,qCAAqC,CAAC;IAC7E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,cAAc,CAAC,uDAAuD,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC,EAAE,SAAS,CAAC,CAAC;IACd,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI;QACnC,CAAC,CAAC,QAAQ,CAAC,MAAM;QACjB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;YAChE,MAAM,IAAI,cAAc,CACtB,4CAA4C,MAAM,CAAC,SAAS,CAAC,IAAI,CAClE,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}