codebase-cli 2.0.0-pre.0

package/dist/permissions/store.js

@@ -0,0 +1,172 @@
+import { shellNeedsPermission } from "../tools/permission.js";
+/**
+ * Tools that never need a permission prompt. The full read-only set
+ * (audit-flagged "read-only allowlist" from permission.go) plus the task
+ * read tools. Adding to this list requires careful thought: anything
+ * that lands here can run without ever asking the user.
+ */
+const ALWAYS_ALLOWED = new Set([
+    "read_file",
+    "list_files",
+    "glob",
+    "grep",
+    "web_fetch",
+    "web_search",
+    "git_status",
+    "git_diff",
+    "git_log",
+    "dispatch_agent",
+    "list_tasks",
+    "get_task",
+    "create_task",
+    "update_task",
+    // ask_user is a question, not a mutation — the user-query UI gates the
+    // actual interaction so a permission prompt on top is redundant.
+    "ask_user",
+    // Memory tools are user-context, not destructive code edits — auto-allow.
+    "save_memory",
+    "read_memory",
+]);
+/**
+ * Per-agent-instance permission store. Used by the agent's
+ * beforeToolCall hook to decide whether to allow, prompt, or block.
+ *
+ * Trust state is in-memory and session-scoped — restarting the CLI
+ * resets all per-tool/global trust. Persisting trust across sessions
+ * lands in Phase 6 (config) so users can choose what to remember.
+ */
+export class PermissionStore {
+    trustAll = false;
+    trustedTools = new Set();
+    queue = [];
+    listeners = new Set();
+    counter = 0;
+    async evaluate(toolName, args) {
+        if (this.shouldAutoAllow(toolName, args))
+            return "allow";
+        return new Promise((resolve) => {
+            const request = {
+                id: `perm-${++this.counter}`,
+                tool: toolName,
+                summary: summarize(toolName, args),
+                detail: detailFor(toolName, args),
+                risk: riskFor(toolName, args),
+            };
+            this.queue.push({ request, resolve });
+            this.notify();
+        });
+    }
+    current() {
+        return this.queue[0]?.request;
+    }
+    subscribe(listener) {
+        this.listeners.add(listener);
+        listener(this.current());
+        return () => {
+            this.listeners.delete(listener);
+        };
+    }
+    respond(id, choice) {
+        const head = this.queue[0];
+        if (!head || head.request.id !== id)
+            return;
+        if (choice === "trust-tool")
+            this.trustedTools.add(head.request.tool);
+        else if (choice === "trust-all")
+            this.trustAll = true;
+        head.resolve(choice === "deny" ? "block" : "allow");
+        this.queue.shift();
+        this.notify();
+    }
+    /** Wipe trust state. Used by /reset and tests. */
+    clear() {
+        this.trustAll = false;
+        this.trustedTools.clear();
+    }
+    shouldAutoAllow(toolName, args) {
+        if (ALWAYS_ALLOWED.has(toolName))
+            return true;
+        if (this.trustAll)
+            return true;
+        if (this.trustedTools.has(toolName))
+            return true;
+        if (toolName === "shell") {
+            const cmd = args?.command;
+            if (typeof cmd === "string" && !shellNeedsPermission(cmd))
+                return true;
+        }
+        // git_branch with no name (or just listing) is read-only.
+        if (toolName === "git_branch") {
+            const a = args;
+            if (!a?.name)
+                return true;
+        }
+        return false;
+    }
+    notify() {
+        const cur = this.current();
+        for (const listener of this.listeners)
+            listener(cur);
+    }
+}
+/** Tool-specific human-readable summary line. */
+function summarize(tool, args) {
+    const a = (args ?? {});
+    switch (tool) {
+        case "shell":
+            return `Run shell: ${truncate(stringOf(a.command), 80)}`;
+        case "write_file":
+            return `Create or overwrite: ${stringOf(a.path)}`;
+        case "edit_file":
+            return `Edit: ${stringOf(a.path)}`;
+        case "multi_edit":
+            return `Multi-edit: ${stringOf(a.path)}`;
+        case "notebook_edit":
+            return `${stringOf(a.operation) || "edit"} cell ${a.cell_index ?? ""} in ${stringOf(a.path)}`.trim();
+        case "git_commit":
+            return `git commit: ${truncate(stringOf(a.message), 80)}`;
+        case "git_branch": {
+            if (a.create)
+                return `Create branch: ${stringOf(a.name)}`;
+            if (a.name)
+                return `Switch to branch: ${stringOf(a.name)}`;
+            return "List branches";
+        }
+        case "enter_worktree":
+            return `Open worktree: ${stringOf(a.path)}`;
+        case "exit_worktree":
+            return "Exit worktree";
+        case "ask_user":
+            return `Ask user: ${truncate(stringOf(a.question), 80)}`;
+        default:
+            return `Run ${tool}`;
+    }
+}
+/** Multi-line detail for the prompt UI to expand. */
+function detailFor(tool, args) {
+    const a = (args ?? {});
+    if (tool === "shell" && typeof a.command === "string")
+        return a.command;
+    if (tool === "git_commit" && typeof a.message === "string")
+        return a.message;
+    return undefined;
+}
+function riskFor(tool, args) {
+    const a = (args ?? {});
+    if (tool === "shell") {
+        const cmd = stringOf(a.command);
+        if (/\brm\s+-r/.test(cmd) || /\bgit\s+push/.test(cmd) || />\s*\/dev\//.test(cmd))
+            return "high";
+        return "medium";
+    }
+    if (tool === "git_commit" || tool === "git_branch")
+        return "medium";
+    return "medium";
+}
+function stringOf(v) {
+    return typeof v === "string" ? v : "";
+}
+function truncate(s, max) {
+    return s.length > max ? `${s.slice(0, max - 1)}…` : s;
+}
+//# sourceMappingURL=store.js.map

package/dist/permissions/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/permissions/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAiB9D;;;;;GAKG;AACH,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IACnD,WAAW;IACX,YAAY;IACZ,MAAM;IACN,MAAM;IACN,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,SAAS;IACT,gBAAgB;IAChB,YAAY;IACZ,UAAU;IACV,aAAa;IACb,aAAa;IACb,uEAAuE;IACvE,iEAAiE;IACjE,UAAU;IACV,0EAA0E;IAC1E,aAAa;IACb,aAAa;CACb,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IACnB,QAAQ,GAAG,KAAK,CAAC;IACR,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,GAA0E,EAAE,CAAC;IAClF,SAAS,GAAG,IAAI,GAAG,EAAgD,CAAC;IAC7E,OAAO,GAAG,CAAC,CAAC;IAEpB,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,IAAa;QAC7C,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC;QAEzD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9B,MAAM,OAAO,GAAsB;gBAClC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE;gBAC5B,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC;gBAClC,MAAM,EAAE,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC;gBACjC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;aAC7B,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,OAAO;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;IAC/B,CAAC;IAED,SAAS,CAAC,QAAsD;QAC/D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACzB,OAAO,GAAG,EAAE;YACX,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,EAAU,EAAE,MAAsB;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE;YAAE,OAAO;QAE5C,IAAI,MAAM,KAAK,YAAY;YAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;aACjE,IAAI,MAAM,KAAK,WAAW;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAEtD,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,EAAE,CAAC;IACf,CAAC;IAED,kDAAkD;IAClD,KAAK;QACJ,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAEO,eAAe,CAAC,QAAgB,EAAE,IAAa;QACtD,IAAI,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/B,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACjD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAI,IAAyC,EAAE,OAAO,CAAC;YAChE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QACxE,CAAC;QACD,0DAA0D;QAC1D,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,IAAqC,CAAC;YAChD,IAAI,CAAC,CAAC,EAAE,IAAI;gBAAE,OAAO,IAAI,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAEO,MAAM;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;CACD;AAED,iDAAiD;AACjD,SAAS,SAAS,CAAC,IAAY,EAAE,IAAa;IAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IAClD,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,OAAO;YACX,OAAO,cAAc,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1D,KAAK,YAAY;YAChB,OAAO,wBAAwB,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,KAAK,WAAW;YACf,OAAO,SAAS,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,KAAK,YAAY;YAChB,OAAO,eAAe,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,KAAK,eAAe;YACnB,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,MAAM,SAAS,CAAC,CAAC,UAAU,IAAI,EAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACtG,KAAK,YAAY;YAChB,OAAO,eAAe,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3D,KAAK,YAAY,CAAC,CAAC,CAAC;YACnB,IAAI,CAAC,CAAC,MAAM;gBAAE,OAAO,kBAAkB,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,CAAC,IAAI;gBAAE,OAAO,qBAAqB,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,OAAO,eAAe,CAAC;QACxB,CAAC;QACD,KAAK,gBAAgB;YACpB,OAAO,kBAAkB,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,KAAK,eAAe;YACnB,OAAO,eAAe,CAAC;QACxB,KAAK,UAAU;YACd,OAAO,aAAa,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1D;YACC,OAAO,OAAO,IAAI,EAAE,CAAC;IACvB,CAAC;AACF,CAAC;AAED,qDAAqD;AACrD,SAAS,SAAS,CAAC,IAAY,EAAE,IAAa;IAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IAClD,IAAI,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACxE,IAAI,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IAC7E,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,IAAa;IAC3C,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IAClD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;QAChG,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,QAAQ,CAAC;IACpE,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC3B,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACvC,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/plan/flow.js

@@ -0,0 +1,214 @@
+import { AGENT_PROMPT_FOOTER, AGENT_PROMPT_HEADER, PLAN_SYSTEM_PROMPT, QUESTION_SYSTEM_PROMPT, REVISE_SYSTEM_PROMPT, } from "./prompts.js";
+import { ANSWER_START_BUILDING } from "./types.js";
+export const MIN_QUESTIONS = 1;
+export const MAX_QUESTIONS = 5;
+/**
+ * Ask the smart-glue model for the next clarifying question.
+ *   - questionNum < MAX_QUESTIONS: returns a question or done=true
+ *   - questionNum >= MAX_QUESTIONS: forces done=true to bound the loop
+ *   - questionNum < MIN_QUESTIONS: refuses to mark done=true; if the
+ *     model insists, we keep going and synthesize a generic question.
+ */
+export async function generateQuestion(glue, originalPrompt, qaHistory, questionNum, signal) {
+    if (questionNum >= MAX_QUESTIONS) {
+        return { done: true, reason: `reached max ${MAX_QUESTIONS} questions` };
+    }
+    const prompt = buildQuestionPrompt(originalPrompt, qaHistory);
+    let raw;
+    try {
+        raw = await glue.smart(prompt, QUESTION_SYSTEM_PROMPT, signal);
+    }
+    catch (err) {
+        return { done: true, reason: `glue error: ${err instanceof Error ? err.message : String(err)}` };
+    }
+    const parsed = extractJson(raw);
+    if (!parsed)
+        return { done: true, reason: "LLM returned no parseable JSON" };
+    if (typeof parsed === "object" &&
+        parsed !== null &&
+        "done" in parsed &&
+        parsed.done === true) {
+        if (questionNum < MIN_QUESTIONS) {
+            // Model wants to stop too early — ask one synthesized fallback.
+            return {
+                question: {
+                    id: `q${questionNum + 1}`,
+                    question: "What's the most important constraint or non-goal for this work?",
+                },
+                done: false,
+            };
+        }
+        return { done: true };
+    }
+    const q = normalizeQuestion(parsed, questionNum);
+    if (!q)
+        return { done: true, reason: "could not normalize question payload" };
+    return { question: q, done: false };
+}
+/** Generate a complete plan markdown from the original prompt + Q&A history. */
+export async function generatePlan(glue, originalPrompt, qaHistory, signal) {
+    const prompt = buildPlanPrompt(originalPrompt, qaHistory);
+    const raw = await glue.smart(prompt, PLAN_SYSTEM_PROMPT, signal);
+    return raw.trim();
+}
+/** Apply user feedback to an existing plan and return the full revised plan. */
+export async function revisePlan(glue, currentPlan, feedback, signal) {
+    const prompt = `Current plan:\n\n${currentPlan}\n\nUser feedback:\n${feedback}`;
+    const raw = await glue.smart(prompt, REVISE_SYSTEM_PROMPT, signal);
+    return raw.trim();
+}
+/**
+ * Wrap the approved plan as the prompt the main agent will receive.
+ * Header + footer phrasing is tuned to keep weaker models on-plan; do
+ * not casually rewrite them.
+ */
+export function buildAgentPrompt(originalPrompt, plan, qaHistory) {
+    const lines = [AGENT_PROMPT_HEADER, "", `Original request: ${originalPrompt}`];
+    if (qaHistory.length > 0) {
+        lines.push("", "Clarifications:");
+        for (const qa of qaHistory) {
+            lines.push(`- Q: ${qa.question}`);
+            lines.push(`  A: ${qa.answer}`);
+        }
+    }
+    lines.push("", "Plan:", plan, "", AGENT_PROMPT_FOOTER);
+    return lines.join("\n");
+}
+/**
+ * Interpret raw user input as an answer to a multiple-choice question.
+ *   - 1-based number matching an option → the option's label
+ *   - exact label match (case-insensitive) → the canonical label
+ *   - input that matches the "start building" escape number → ANSWER_START_BUILDING
+ *   - anything else → the trimmed raw input (free-form)
+ */
+export function parseAnswer(input, question) {
+    const trimmed = input.trim();
+    if (!trimmed)
+        return trimmed;
+    if (!question?.options || question.options.length === 0)
+        return trimmed;
+    const idx = Number.parseInt(trimmed, 10);
+    if (Number.isFinite(idx)) {
+        if (idx >= 1 && idx <= question.options.length) {
+            return question.options[idx - 1].label;
+        }
+        // Escape: option count + 1 means "start building, skip remaining questions".
+        if (idx === question.options.length + 1)
+            return ANSWER_START_BUILDING;
+    }
+    const exact = question.options.find((o) => o.label.toLowerCase() === trimmed.toLowerCase());
+    if (exact)
+        return exact.label;
+    return trimmed;
+}
+// ─── helpers ──────────────────────────────────────────────────
+function buildQuestionPrompt(originalPrompt, qaHistory) {
+    const lines = [`User request: ${originalPrompt}`];
+    if (qaHistory.length > 0) {
+        lines.push("", "Q&A so far:");
+        for (const qa of qaHistory) {
+            lines.push(`Q: ${qa.question}`);
+            lines.push(`A: ${qa.answer}`);
+        }
+    }
+    else {
+        lines.push("", "(no clarifications yet)");
+    }
+    return lines.join("\n");
+}
+function buildPlanPrompt(originalPrompt, qaHistory) {
+    const lines = [`User request: ${originalPrompt}`];
+    if (qaHistory.length > 0) {
+        lines.push("", "Clarifications:");
+        for (const qa of qaHistory) {
+            lines.push(`Q: ${qa.question}`);
+            lines.push(`A: ${qa.answer}`);
+        }
+    }
+    return lines.join("\n");
+}
+/**
+ * Extract a JSON object from a possibly-noisy LLM response. Some cheap
+ * models prefix or suffix prose; this finds the first balanced { ... }
+ * span and parses that. Returns null if nothing parses.
+ */
+export function extractJson(raw) {
+    const trimmed = raw.trim();
+    try {
+        return JSON.parse(trimmed);
+    }
+    catch {
+        // fall through
+    }
+    const start = trimmed.indexOf("{");
+    if (start === -1)
+        return null;
+    let depth = 0;
+    let inString = false;
+    let inEscape = false;
+    for (let i = start; i < trimmed.length; i++) {
+        const ch = trimmed[i];
+        if (inEscape) {
+            inEscape = false;
+            continue;
+        }
+        if (ch === "\\" && inString) {
+            inEscape = true;
+            continue;
+        }
+        if (ch === '"') {
+            inString = !inString;
+            continue;
+        }
+        if (inString)
+            continue;
+        if (ch === "{")
+            depth++;
+        else if (ch === "}") {
+            depth--;
+            if (depth === 0) {
+                const candidate = trimmed.slice(start, i + 1);
+                try {
+                    return JSON.parse(candidate);
+                }
+                catch {
+                    return null;
+                }
+            }
+        }
+    }
+    return null;
+}
+function normalizeQuestion(raw, questionNum) {
+    if (!raw || typeof raw !== "object")
+        return null;
+    const r = raw;
+    if (typeof r.question !== "string" || !r.question.trim())
+        return null;
+    let options;
+    if (Array.isArray(r.options)) {
+        options = r.options
+            .map((o, i) => normalizeOption(o, i))
+            .filter((o) => o !== null);
+        if (options.length === 0)
+            options = undefined;
+    }
+    return {
+        id: `q${questionNum + 1}`,
+        question: r.question.trim(),
+        options,
+    };
+}
+function normalizeOption(raw, idx) {
+    if (!raw || typeof raw !== "object")
+        return null;
+    const r = raw;
+    if (typeof r.label !== "string" || !r.label.trim())
+        return null;
+    return {
+        id: typeof r.id === "string" && r.id.trim() ? r.id : `opt${idx + 1}`,
+        label: r.label.trim(),
+        description: typeof r.description === "string" ? r.description : undefined,
+    };
+}
+//# sourceMappingURL=flow.js.map

package/dist/plan/flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow.js","sourceRoot":"","sources":["../../src/plan/flow.ts"],"names":[],"mappings":"AACA,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,qBAAqB,EAAkC,MAAM,YAAY,CAAC;AAEnF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAQ/B;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,IAAgB,EAChB,cAAsB,EACtB,SAAmB,EACnB,WAAmB,EACnB,MAAoB;IAEpB,IAAI,WAAW,IAAI,aAAa,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,aAAa,YAAY,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACJ,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAClG,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IAE7E,IACC,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,MAAM,IAAI,MAAM;QACf,MAA6B,CAAC,IAAI,KAAK,IAAI,EAC3C,CAAC;QACF,IAAI,WAAW,GAAG,aAAa,EAAE,CAAC;YACjC,gEAAgE;YAChE,OAAO;gBACN,QAAQ,EAAE;oBACT,EAAE,EAAE,IAAI,WAAW,GAAG,CAAC,EAAE;oBACzB,QAAQ,EAAE,iEAAiE;iBAC3E;gBACD,IAAI,EAAE,KAAK;aACX,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IAC9E,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACrC,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,IAAgB,EAChB,cAAsB,EACtB,SAAmB,EACnB,MAAoB;IAEpB,MAAM,MAAM,GAAG,eAAe,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACjE,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACnB,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,IAAgB,EAChB,WAAmB,EACnB,QAAgB,EAChB,MAAoB;IAEpB,MAAM,MAAM,GAAG,oBAAoB,WAAW,uBAAuB,QAAQ,EAAE,CAAC;IAChF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,CAAC,CAAC;IACnE,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,cAAsB,EAAE,IAAY,EAAE,SAAmB;IACzF,MAAM,KAAK,GAAa,CAAC,mBAAmB,EAAE,EAAE,EAAE,qBAAqB,cAAc,EAAE,CAAC,CAAC;IACzF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAClC,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QACjC,CAAC;IACF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACvD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,QAAkC;IAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAC7B,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAExE,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAChD,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACxC,CAAC;QACD,6EAA6E;QAC7E,IAAI,GAAG,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,qBAAqB,CAAC;IACvE,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5F,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC;IAE9B,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,iEAAiE;AAEjE,SAAS,mBAAmB,CAAC,cAAsB,EAAE,SAAmB;IACvE,MAAM,KAAK,GAAa,CAAC,iBAAiB,cAAc,EAAE,CAAC,CAAC;IAC5D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;QAC9B,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/B,CAAC;IACF,CAAC;SAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,cAAsB,EAAE,SAAmB;IACnE,MAAM,KAAK,GAAa,CAAC,iBAAiB,cAAc,EAAE,CAAC,CAAC;IAC5D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAClC,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/B,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACtC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACR,eAAe;IAChB,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,KAAK,CAAC;YACjB,SAAS;QACV,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC7B,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAChB,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACrB,SAAS;QACV,CAAC;QACD,IAAI,QAAQ;YAAE,SAAS;QACvB,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACnB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACrB,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC9C,IAAI,CAAC;oBACJ,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC9B,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,IAAI,CAAC;gBACb,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY,EAAE,WAAmB;IAC3D,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAAgD,CAAC;IAC3D,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACtE,IAAI,OAAgC,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,CAAC,OAAO;aACjB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aACpC,MAAM,CAAC,CAAC,CAAC,EAA4D,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACtF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,SAAS,CAAC;IAC/C,CAAC;IACD,OAAO;QACN,EAAE,EAAE,IAAI,WAAW,GAAG,CAAC,EAAE;QACzB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE;QAC3B,OAAO;KACP,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAAY,EAAE,GAAW;IACjD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAA+D,CAAC;IAC1E,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAChE,OAAO;QACN,EAAE,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE;QACpE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QACrB,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC;AACH,CAAC"}

package/dist/plan/prompts.js

@@ -0,0 +1,69 @@
+/**
+ * Exact prompt phrasing preserved from the Go v1 plan flow. Changes to
+ * these strings should be deliberate — the Go version's tests pinned
+ * specific phrases so cheap models reliably emit JSON-shaped questions
+ * and stick to the plan during execution.
+ */
+export const QUESTION_SYSTEM_PROMPT = `You design clarifying questions for a coding agent that will execute a multi-step plan.
+
+You will be given the user's original request and a list of question/answer pairs already collected. Generate the NEXT useful question, or signal that you have enough information.
+
+Output ONE valid JSON object on stdout, no prose around it. Two shapes are allowed:
+
+1) A new question:
+{
+  "question": "How should authentication be handled?",
+  "options": [
+    { "id": "opt1", "label": "Email + password", "description": "Classic email/password login" },
+    { "id": "opt2", "label": "Magic link", "description": "Passwordless email link" }
+  ]
+}
+
+2) A signal that no more questions are needed:
+{ "done": true }
+
+Hard rules:
+- Ask the question that most reduces ambiguity for the next step.
+- Return options ONLY when there's a clean small choice set (2-5 options). Otherwise omit options for free-form answer.
+- DO NOT ask follow-ups to questions already answered.
+- DO NOT ask cosmetic questions ("which color?") unless the user request is itself cosmetic.
+- After ~3-5 useful questions, signal done.`;
+export const PLAN_SYSTEM_PROMPT = `You produce a step-by-step implementation plan based on a user request and a Q&A clarification log.
+
+Output: a markdown plan, no preamble. Use this structure:
+
+# <Short title>
+
+## Goal
+One-sentence goal.
+
+## Steps
+1. <First concrete action — file/command level>
+2. <Next action>
+...
+
+## Files
+- <path>: <one-line role>
+- <path>: <one-line role>
+
+## Tests
+- <how we'll verify each step works>
+
+Hard rules:
+- Be concrete. Reference specific files, functions, commands.
+- Number every step. The agent will execute them in order.
+- Keep it tight: aim for 5-15 steps, not 30.
+- DO NOT include questions, caveats, or "if X then Y" branching. The Q&A is over.`;
+export const REVISE_SYSTEM_PROMPT = `You revise an existing implementation plan based on user feedback.
+
+Output: the FULL revised plan in the same markdown format. Don't write a diff or summary of changes. Don't ask follow-up questions — apply the feedback directly.
+
+If the feedback is unclear or conflicts with the plan, make the most reasonable interpretation and proceed.`;
+/**
+ * Wrapper text used when handing the approved plan back to the main
+ * agent. Phrasing tuned (Go v1) so weaker models stick to the plan
+ * instead of re-planning mid-execution.
+ */
+export const AGENT_PROMPT_HEADER = "Build this project. Follow the approved plan exactly.";
+export const AGENT_PROMPT_FOOTER = "Follow the plan step by step. Implement every listed item. Keep going until all files are written.";
+//# sourceMappingURL=prompts.js.map

package/dist/plan/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../src/plan/prompts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;;;;;;4CAuBM,CAAC;AAE7C,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;kFAyBgD,CAAC;AAEnF,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;4GAIwE,CAAC;AAE7G;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,uDAAuD,CAAC;AAC3F,MAAM,CAAC,MAAM,mBAAmB,GAC/B,oGAAoG,CAAC"}

package/dist/plan/store.js

@@ -0,0 +1,37 @@
+/**
+ * Per-agent-instance flag telling the permission gate to block destructive
+ * tools while the agent is producing a plan. Mode-driven by the model via
+ * enter_plan_mode / exit_plan_mode tool calls, or by the App's plan flow
+ * when the user approved a plan via the glue layer's Q&A.
+ */
+export class PlanModeStore {
+    active = false;
+    listeners = new Set();
+    enter() {
+        if (this.active)
+            return;
+        this.active = true;
+        this.notify();
+    }
+    exit() {
+        if (!this.active)
+            return;
+        this.active = false;
+        this.notify();
+    }
+    isActive() {
+        return this.active;
+    }
+    subscribe(listener) {
+        this.listeners.add(listener);
+        listener(this.active);
+        return () => {
+            this.listeners.delete(listener);
+        };
+    }
+    notify() {
+        for (const listener of this.listeners)
+            listener(this.active);
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/plan/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/plan/store.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IACjB,MAAM,GAAG,KAAK,CAAC;IACN,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IAEzD,KAAK;QACJ,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,MAAM,EAAE,CAAC;IACf,CAAC;IAED,IAAI;QACH,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,EAAE,CAAC;IACf,CAAC;IAED,QAAQ;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,SAAS,CAAC,QAA0B;QACnC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,OAAO,GAAG,EAAE;YACX,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC,CAAC;IACH,CAAC;IAEO,MAAM;QACb,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;CACD"}

package/dist/plan/types.js

@@ -0,0 +1,3 @@
+/** Special return value from parseAnswer when the user types "skip the rest, start". */
+export const ANSWER_START_BUILDING = "__START_BUILDING__";
+//# sourceMappingURL=types.js.map

package/dist/plan/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/plan/types.ts"],"names":[],"mappings":"AAyBA,wFAAwF;AACxF,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC"}

package/dist/sessions/store.js

@@ -0,0 +1,105 @@
+import { createHash, randomBytes } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+export const SESSION_MAX_AGE_DAYS = 7;
+export const SESSION_FORMAT_VERSION = 1;
+/**
+ * Per-cwd session snapshot. Filename is keyed off sha256(cwd)[:8] so we
+ * can find prior sessions for the same directory across cli launches.
+ *
+ * load() returns null when no session exists, when the saved session
+ * predates `maxAgeDays`, or when the saved model id doesn't match the
+ * currently-resolved model — switching models invalidates compaction
+ * summaries and tool histories so a fresh start is the safer default.
+ */
+export class SessionStore {
+    cwd;
+    path;
+    maxAgeMs;
+    constructor(options) {
+        this.cwd = options.cwd;
+        const dataRoot = options.dataRoot ?? join(homedir(), ".codebase");
+        const hash = createHash("sha256").update(this.cwd).digest("hex").slice(0, 8);
+        this.path = join(dataRoot, "sessions", `${hash}.json`);
+        this.maxAgeMs = (options.maxAgeDays ?? SESSION_MAX_AGE_DAYS) * 24 * 60 * 60 * 1000;
+    }
+    get filePath() {
+        return this.path;
+    }
+    load(modelId) {
+        if (!existsSync(this.path))
+            return null;
+        let raw;
+        try {
+            raw = readFileSync(this.path, "utf8");
+        }
+        catch {
+            return null;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            // Malformed: drop the file so we don't trip over it forever.
+            this.clear();
+            return null;
+        }
+        if (parsed.formatVersion !== SESSION_FORMAT_VERSION)
+            return null;
+        if (parsed.workDir !== this.cwd)
+            return null;
+        if (parsed.modelId !== modelId)
+            return null;
+        if (Date.now() - parsed.updatedAt > this.maxAgeMs) {
+            this.clear();
+            return null;
+        }
+        if (!Array.isArray(parsed.messages) || parsed.messages.length === 0)
+            return null;
+        return parsed;
+    }
+    save(data) {
+        const dir = join(this.path, "..");
+        mkdirSync(dir, { recursive: true });
+        const payload = {
+            formatVersion: SESSION_FORMAT_VERSION,
+            workDir: this.cwd,
+            updatedAt: Date.now(),
+            ...data,
+        };
+        const tmp = `${this.path}.${randomBytes(4).toString("hex")}.tmp`;
+        try {
+            writeFileSync(tmp, JSON.stringify(payload, null, 2), { mode: 0o600 });
+            renameSync(tmp, this.path);
+        }
+        catch (err) {
+            try {
+                unlinkSync(tmp);
+            }
+            catch {
+                // best effort
+            }
+            throw err;
+        }
+    }
+    clear() {
+        if (!existsSync(this.path))
+            return false;
+        try {
+            unlinkSync(this.path);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /** Modification time of the persisted session, or null if absent. */
+    mtime() {
+        if (!existsSync(this.path))
+            return null;
+        return statSync(this.path).mtimeMs;
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/sessions/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/sessions/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/G,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAkBxC;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAY;IACP,GAAG,CAAS;IACZ,IAAI,CAAS;IACb,QAAQ,CAAS;IAElC,YAAY,OAA4B;QACvC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACpF,CAAC;IAED,IAAI,QAAQ;QACX,OAAO,IAAI,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,OAAe;QACnB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAExC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACJ,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;QAED,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACR,6DAA6D;YAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,KAAK,sBAAsB;YAAE,OAAO,IAAI,CAAC;QACjE,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACjF,OAAO,MAAM,CAAC;IACf,CAAC;IAED,IAAI,CAAC,IAAkE;QACtE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAgB;YAC5B,aAAa,EAAE,sBAAsB;YACrC,OAAO,EAAE,IAAI,CAAC,GAAG;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,GAAG,IAAI;SACP,CAAC;QACF,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACjE,IAAI,CAAC;YACJ,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC;gBACJ,UAAU,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACR,cAAc;YACf,CAAC;YACD,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;IAED,KAAK;QACJ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,CAAC;YACJ,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAED,qEAAqE;IACrE,KAAK;QACJ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;IACpC,CAAC;CACD"}