codehere 0.3.0 → 0.5.0-alpha

package/dist/infrastructure/providers/provider-config-loader.js

@@ -0,0 +1,120 @@
+/**
+ * Provider Layer: Provider Config Loader
+ * Loads user-facing provider configuration from JSON files
+ *
+ * Phase 4G: User-facing provider config files
+ */
+import { existsSync, readFileSync } from 'fs';
+import { join, resolve } from 'path';
+import { findCodebaseRoot } from '../../domain/services/codebase-detector.js';
+/**
+ * Load provider configuration from file
+ *
+ * @param options - Optional configuration
+ * @param options.cwd - Working directory (defaults to process.cwd())
+ * @returns ProviderConfig if file exists and is valid, undefined otherwise
+ */
+export function loadProviderConfig(options) {
+    const cwd = options?.cwd || process.cwd();
+    // Determine config file path
+    let configPath;
+    // Check for explicit path override
+    if (process.env.CODEHERE_PROVIDER_CONFIG_PATH) {
+        configPath = resolve(process.env.CODEHERE_PROVIDER_CONFIG_PATH);
+    }
+    else {
+        // Find codebase root
+        const codebaseInfo = findCodebaseRoot(cwd);
+        if (codebaseInfo) {
+            // Default path: .codehere/providers.json
+            configPath = join(codebaseInfo.rootPath, '.codehere', 'providers.json');
+        }
+        else {
+            // Fallback to cwd if codebase root not found
+            configPath = join(cwd, '.codehere', 'providers.json');
+        }
+    }
+    // If file doesn't exist, return undefined (not an error)
+    if (!configPath || !existsSync(configPath)) {
+        return undefined;
+    }
+    try {
+        // Read and parse JSON
+        const fileContent = readFileSync(configPath, 'utf-8');
+        const rawConfig = JSON.parse(fileContent);
+        // Validate and normalize config
+        return validateAndNormalizeConfig(rawConfig);
+    }
+    catch (error) {
+        // Log warning but don't throw (non-fatal)
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        console.warn(`[ProviderConfigLoader] Failed to load config from ${configPath}: ${errorMessage}`);
+        return undefined;
+    }
+}
+/**
+ * Validate and normalize raw config object
+ * Ignores unknown fields and invalid values gracefully
+ */
+function validateAndNormalizeConfig(raw) {
+    if (!raw || typeof raw !== 'object') {
+        return undefined;
+    }
+    const config = {};
+    const obj = raw;
+    // Extract default provider
+    if (obj.default !== undefined) {
+        if (typeof obj.default === 'string' && obj.default.trim()) {
+            config.default = obj.default.trim();
+        }
+    }
+    // Extract operations
+    if (obj.operations !== undefined && typeof obj.operations === 'object' && obj.operations !== null) {
+        const operations = obj.operations;
+        const normalizedOps = {};
+        // Known operation types
+        const validOperations = ['chat', 'embedding', 'rerank'];
+        for (const op of validOperations) {
+            if (operations[op] !== undefined) {
+                const providerId = operations[op];
+                if (typeof providerId === 'string' && providerId.trim()) {
+                    normalizedOps[op] = providerId.trim();
+                }
+            }
+        }
+        // Only set operations if at least one is valid
+        if (Object.keys(normalizedOps).length > 0) {
+            config.operations = normalizedOps;
+        }
+    }
+    // Return config only if it has at least one meaningful field
+    if (config.default || config.operations) {
+        return config;
+    }
+    return undefined;
+}
+/**
+ * Convert ProviderConfig to OperationProviderConfig
+ * Used to pass config to OperationProviderResolver
+ */
+export function configToOperationConfig(config) {
+    const operationConfig = {};
+    // Set default if present
+    if (config.default) {
+        operationConfig.default = config.default;
+    }
+    // Map operations
+    if (config.operations) {
+        if (config.operations.chat) {
+            operationConfig.chat = config.operations.chat;
+        }
+        if (config.operations.embedding) {
+            operationConfig.embedding = config.operations.embedding;
+        }
+        if (config.operations.rerank) {
+            operationConfig.rerank = config.operations.rerank;
+        }
+    }
+    return operationConfig;
+}
+//# sourceMappingURL=provider-config-loader.js.map

package/dist/infrastructure/providers/provider-config-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-config-loader.js","sourceRoot":"","sources":["../../../src/infrastructure/providers/provider-config-loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAmB9E;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA0B;IAC3D,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1C,6BAA6B;IAC7B,IAAI,UAA8B,CAAC;IAEnC,mCAAmC;IACnC,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,CAAC;QAC9C,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,qBAAqB;QACrB,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,YAAY,EAAE,CAAC;YACjB,yCAAyC;YACzC,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,6CAA6C;YAC7C,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,sBAAsB;QACtB,MAAM,WAAW,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAY,CAAC;QAErD,gCAAgC;QAChC,OAAO,0BAA0B,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0CAA0C;QAC1C,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,qDAAqD,UAAU,KAAK,YAAY,EAAE,CAAC,CAAC;QACjG,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,0BAA0B,CAAC,GAAY;IAC9C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,GAA8B,CAAC;IAE3C,2BAA2B;IAC3B,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1D,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAClG,MAAM,UAAU,GAAG,GAAG,CAAC,UAAqC,CAAC;QAC7D,MAAM,aAAa,GAAiC,EAAE,CAAC;QAEvD,wBAAwB;QACxB,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;QAEjE,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;YACjC,IAAI,UAAU,CAAC,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,UAAU,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;gBAClC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;oBACxD,aAAa,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QAED,+CAA+C;QAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,UAAU,GAAG,aAAa,CAAC;QACpC,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAsB;IAC5D,MAAM,eAAe,GAA4B,EAAE,CAAC;IAEpD,yBAAyB;IACzB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,eAAe,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3C,CAAC;IAED,iBAAiB;IACjB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAC3B,eAAe,CAAC,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YAChC,eAAe,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAC7B,eAAe,CAAC,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QACpD,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/dist/infrastructure/providers/provider-registry.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Provider Layer: ProviderRegistry
+ * Central registry for all model providers
+ *
+ * Phase 4A: Foundation Implementation (No Behavior Change)
+ */
+import type { IModelProvider } from './model-provider.interface.js';
+/**
+ * Provider Registry
+ * Singleton registry for managing model providers
+ */
+export declare class ProviderRegistry {
+    private static instance;
+    private providers;
+    private defaultProviderId?;
+    /**
+     * Get singleton instance
+     */
+    static getInstance(): ProviderRegistry;
+    /**
+     * Register a provider
+     */
+    register(provider: IModelProvider): void;
+    /**
+     * Get provider by ID
+     */
+    get(providerId: string): IModelProvider | undefined;
+    /**
+     * Get default provider
+     */
+    getDefault(): IModelProvider;
+    /**
+     * Set default provider
+     */
+    setDefault(providerId: string): void;
+    /**
+     * Get all registered providers
+     */
+    getAll(): IModelProvider[];
+    /**
+     * Find providers by capability
+     */
+    findByCapability(capability: keyof import('./model-provider.interface.js').ProviderCapabilities): IModelProvider[];
+    /**
+     * Check if provider is registered
+     */
+    has(providerId: string): boolean;
+    /**
+     * Clear all providers (mainly for testing)
+     */
+    clear(): void;
+}
+//# sourceMappingURL=provider-registry.d.ts.map

package/dist/infrastructure/providers/provider-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-registry.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/providers/provider-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEpE;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAiC;IACxD,OAAO,CAAC,SAAS,CAA0C;IAC3D,OAAO,CAAC,iBAAiB,CAAC,CAAS;IAEnC;;OAEG;IACH,MAAM,CAAC,WAAW,IAAI,gBAAgB;IAOtC;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI;IASxC;;OAEG;IACH,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAInD;;OAEG;IACH,UAAU,IAAI,cAAc;IAW5B;;OAEG;IACH,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAOpC;;OAEG;IACH,MAAM,IAAI,cAAc,EAAE;IAI1B;;OAEG;IACH,gBAAgB,CAAC,UAAU,EAAE,MAAM,OAAO,+BAA+B,EAAE,oBAAoB,GAAG,cAAc,EAAE;IAIlH;;OAEG;IACH,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAIhC;;OAEG;IACH,KAAK,IAAI,IAAI;CAId"}

package/dist/infrastructure/providers/provider-registry.js

@@ -0,0 +1,88 @@
+/**
+ * Provider Layer: ProviderRegistry
+ * Central registry for all model providers
+ *
+ * Phase 4A: Foundation Implementation (No Behavior Change)
+ */
+/**
+ * Provider Registry
+ * Singleton registry for managing model providers
+ */
+export class ProviderRegistry {
+    static instance = null;
+    providers = new Map();
+    defaultProviderId;
+    /**
+     * Get singleton instance
+     */
+    static getInstance() {
+        if (!ProviderRegistry.instance) {
+            ProviderRegistry.instance = new ProviderRegistry();
+        }
+        return ProviderRegistry.instance;
+    }
+    /**
+     * Register a provider
+     */
+    register(provider) {
+        this.providers.set(provider.id, provider);
+        // Auto-set as default if this is the first provider
+        if (!this.defaultProviderId) {
+            this.defaultProviderId = provider.id;
+        }
+    }
+    /**
+     * Get provider by ID
+     */
+    get(providerId) {
+        return this.providers.get(providerId);
+    }
+    /**
+     * Get default provider
+     */
+    getDefault() {
+        if (!this.defaultProviderId) {
+            throw new Error('No default provider configured');
+        }
+        const provider = this.get(this.defaultProviderId);
+        if (!provider) {
+            throw new Error(`Default provider '${this.defaultProviderId}' not found`);
+        }
+        return provider;
+    }
+    /**
+     * Set default provider
+     */
+    setDefault(providerId) {
+        if (!this.providers.has(providerId)) {
+            throw new Error(`Provider '${providerId}' not registered`);
+        }
+        this.defaultProviderId = providerId;
+    }
+    /**
+     * Get all registered providers
+     */
+    getAll() {
+        return Array.from(this.providers.values());
+    }
+    /**
+     * Find providers by capability
+     */
+    findByCapability(capability) {
+        return this.getAll().filter(p => p.capabilities[capability]);
+    }
+    /**
+     * Check if provider is registered
+     */
+    has(providerId) {
+        return this.providers.has(providerId);
+    }
+    /**
+     * Clear all providers (mainly for testing)
+     */
+    clear() {
+        this.providers.clear();
+        this.defaultProviderId = undefined;
+    }
+}
+//# sourceMappingURL=provider-registry.js.map

package/dist/infrastructure/providers/provider-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-registry.js","sourceRoot":"","sources":["../../../src/infrastructure/providers/provider-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAC,QAAQ,GAA4B,IAAI,CAAC;IAChD,SAAS,GAAgC,IAAI,GAAG,EAAE,CAAC;IACnD,iBAAiB,CAAU;IAEnC;;OAEG;IACH,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YAC/B,gBAAgB,CAAC,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,gBAAgB,CAAC,QAAQ,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAwB;QAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE1C,oDAAoD;QACpD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,UAAkB;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,iBAAiB,aAAa,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,UAAkB;QAC3B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,aAAa,UAAU,kBAAkB,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,UAA8E;QAC7F,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,UAAkB;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;IACrC,CAAC"}

package/dist/infrastructure/security/input-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"input-validator.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/security/input-validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAuCnE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,CA4C7D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CA2B/D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAyB,GAAG,gBAAgB,CAkBzG;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAmBxD"}
+{"version":3,"file":"input-validator.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/security/input-validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAuCnE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAyD7D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CA2B/D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAyB,GAAG,gBAAgB,CAkBzG;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAmBxD"}

package/dist/infrastructure/security/input-validator.js

@@ -51,11 +51,21 @@ export function validateQuery(query) {
         errors.push('Null bytes not allowed in query');
     }
     // Check for command injection patterns
+    // Only block ACTUAL dangerous patterns, not currency symbols or normal text
     const commandInjectionPatterns = [
-        /[;&|`$(){}[\]]/, // Shell metacharacters
-        /<script/i, // XSS attempts
-        /javascript:/i, // JavaScript protocol
-        /on\w+\s*=/i, // Event handlers
+        // Actual command chaining (semicolon, pipe, backtick, ampersand)
+        /[;&|`]/,
+        // Command substitution with parentheses (but allow normal parentheses in text)
+        /\$\([^)]*\)/, // $(command) pattern
+        /\$\{[^}]*\}/, // ${variable} pattern (but allow ${ in normal text if not followed by command)
+        // XSS attempts
+        /<script/i,
+        /javascript:/i,
+        /on\w+\s*=/i,
+        // Shell redirection (but allow < and > in normal text)
+        /\s*[<>]\s*\w+/, // < file or > file patterns
+        // Command injection with backticks
+        /`[^`]*`/, // `command` pattern
     ];
     for (const pattern of commandInjectionPatterns) {
         if (pattern.test(query)) {
@@ -63,10 +73,13 @@ export function validateQuery(query) {
             break;
         }
     }
-    // Sanitize query
+    // Sanitize query (only remove actual dangerous patterns, preserve normal text)
     let sanitized = query
         .replace(/\0/g, '') // Remove null bytes
-        .replace(/[;&|`$(){}[\]]/g, '') // Remove shell metacharacters
+        .replace(/[;&|`]/g, '') // Remove command chaining characters
+        .replace(/\$\([^)]*\)/g, '') // Remove command substitution $(...)
+        .replace(/\$\{[^}]*\}/g, '') // Remove command substitution ${...}
+        .replace(/`[^`]*`/g, '') // Remove backtick command execution
         .replace(/<script/gi, '&lt;script') // Escape script tags
         .replace(/javascript:/gi, '') // Remove javascript protocol
         .replace(/on\w+\s*=/gi, ''); // Remove event handlers

package/dist/infrastructure/security/input-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"input-validator.js","sourceRoot":"","sources":["../../../src/infrastructure/security/input-validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,yCAAyC;IACzC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC3D,CAAC;IAED,gDAAgD;IAChD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IAED,uBAAuB;IACvB,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IAED,iCAAiC;IACjC,MAAM,cAAc,GAAG,oBAAoB,CAAC;IAC5C,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAED,gBAAgB;IAChB,IAAI,SAAS,GAAG,QAAQ;SACrB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,YAAY;SACjC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW;SAC7B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,oBAAoB;SACvC,OAAO,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC,CAAC,0BAA0B;IAElE,4BAA4B;IAC5B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE1C,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACrD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,uBAAuB;IACvB,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAED,uCAAuC;IACvC,MAAM,wBAAwB,GAAG;QAC/B,gBAAgB,EAAE,uBAAuB;QACzC,UAAU,EAAE,eAAe;QAC3B,cAAc,EAAE,sBAAsB;QACtC,YAAY,EAAE,iBAAiB;KAChC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YAClE,MAAM;QACR,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,SAAS,GAAG,KAAK;SAClB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,oBAAoB;SACvC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,8BAA8B;SAC7D,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,qBAAqB;SACxD,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,6BAA6B;SAC1D,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,wBAAwB;IAEvD,wBAAwB;IACxB,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,mBAAmB;IACnD,IAAI,SAAS,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,mCAAmC,gBAAgB,aAAa,CAAC,CAAC;QAC9E,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvD,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACrD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,wDAAwD;IACxD,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACxE,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;KACzD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,UAAkB,EAAE,GAAG,IAAI,GAAG,IAAI;IACrF,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,aAAa;IACb,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,IAAI,WAAW,GAAG,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,wCAAwC,OAAO,QAAQ,CAAC,CAAC;IACvE,CAAC;IAED,oDAAoD;IACpD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,oDAAoD;IACpD,IAAI,SAAS,GAAG,KAAK;QACnB,2DAA2D;SAC1D,OAAO,CAAC,mBAAmB,EAAE,YAAY,CAAC;QAC3C,yBAAyB;SACxB,OAAO,CAAC,iDAAiD,EAAE,kBAAkB,CAAC;QAC/E,0BAA0B;SACzB,OAAO,CAAC,8BAA8B,EAAE,kBAAkB,CAAC;SAC3D,OAAO,CAAC,yBAAyB,EAAE,qBAAqB,CAAC;SACzD,OAAO,CAAC,uBAAuB,EAAE,mBAAmB,CAAC,CAAC;IAEzD,2BAA2B;IAC3B,MAAM,cAAc,GAAG,IAAI,CAAC;IAC5B,IAAI,SAAS,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACtC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,gBAAgB,CAAC;IACxE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"input-validator.js","sourceRoot":"","sources":["../../../src/infrastructure/security/input-validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,yCAAyC;IACzC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC3D,CAAC;IAED,gDAAgD;IAChD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IAED,uBAAuB;IACvB,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IAED,iCAAiC;IACjC,MAAM,cAAc,GAAG,oBAAoB,CAAC;IAC5C,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAED,gBAAgB;IAChB,IAAI,SAAS,GAAG,QAAQ;SACrB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,YAAY;SACjC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW;SAC7B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,oBAAoB;SACvC,OAAO,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC,CAAC,0BAA0B;IAElE,4BAA4B;IAC5B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE1C,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACrD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,uBAAuB;IACvB,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAED,uCAAuC;IACvC,4EAA4E;IAC5E,MAAM,wBAAwB,GAAG;QAC/B,iEAAiE;QACjE,QAAQ;QACR,+EAA+E;QAC/E,aAAa,EAAE,qBAAqB;QACpC,aAAa,EAAE,+EAA+E;QAC9F,eAAe;QACf,UAAU;QACV,cAAc;QACd,YAAY;QACZ,uDAAuD;QACvD,eAAe,EAAE,4BAA4B;QAC7C,mCAAmC;QACnC,SAAS,EAAE,oBAAoB;KAChC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YAClE,MAAM;QACR,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,IAAI,SAAS,GAAG,KAAK;SAClB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,oBAAoB;SACvC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,qCAAqC;SAC5D,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,qCAAqC;SACjE,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,qCAAqC;SACjE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,oCAAoC;SAC5D,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,qBAAqB;SACxD,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,6BAA6B;SAC1D,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,wBAAwB;IAEvD,wBAAwB;IACxB,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,mBAAmB;IACnD,IAAI,SAAS,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,mCAAmC,gBAAgB,aAAa,CAAC,CAAC;QAC9E,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvD,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACrD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,wDAAwD;IACxD,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACxE,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;KACzD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,UAAkB,EAAE,GAAG,IAAI,GAAG,IAAI;IACrF,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,aAAa;IACb,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,IAAI,WAAW,GAAG,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,wCAAwC,OAAO,QAAQ,CAAC,CAAC;IACvE,CAAC;IAED,oDAAoD;IACpD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,oDAAoD;IACpD,IAAI,SAAS,GAAG,KAAK;QACnB,2DAA2D;SAC1D,OAAO,CAAC,mBAAmB,EAAE,YAAY,CAAC;QAC3C,yBAAyB;SACxB,OAAO,CAAC,iDAAiD,EAAE,kBAAkB,CAAC;QAC/E,0BAA0B;SACzB,OAAO,CAAC,8BAA8B,EAAE,kBAAkB,CAAC;SAC3D,OAAO,CAAC,yBAAyB,EAAE,qBAAqB,CAAC;SACzD,OAAO,CAAC,uBAAuB,EAAE,mBAAmB,CAAC,CAAC;IAEzD,2BAA2B;IAC3B,MAAM,cAAc,GAAG,IAAI,CAAC;IAC5B,IAAI,SAAS,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACtC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,gBAAgB,CAAC;IACxE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/infrastructure/serialization/toon-serializer.d.ts

@@ -0,0 +1,45 @@
+/**
+ * TOON (Token-Oriented Object Notation) Serializer
+ *
+ * Phase 1: Code Context Serialization for v1.0.0 MVP
+ *
+ * Benefits:
+ * - 30-60% token reduction compared to JSON
+ * - Better LLM parsing accuracy
+ * - Self-documenting structure
+ *
+ * Feature Flag: CODEHERE_USE_TOON (default: false for v1.0.0)
+ */
+import type { CodeChunk } from '../../domain/entities/code-chunk.js';
+/**
+ * Serialize code chunks to TOON format
+ *
+ * TOON format for code chunks:
+ * chunks[N]{filepath,content,score,lineStart,lineEnd}:
+ *   src/auth.ts,function authenticate() {...},0.95,10,60
+ *   src/utils.ts,export function helper() {...},0.87,5,35
+ *
+ * @param chunks Code chunks to serialize
+ * @returns TOON-formatted string, or null if TOON is disabled or library unavailable
+ */
+export declare function serializeCodeChunksToToon(chunks: CodeChunk[]): Promise<string | null>;
+/**
+ * Serialize code chunks to traditional format (fallback)
+ * Used when TOON is disabled or unavailable
+ *
+ * @param chunks Code chunks to serialize
+ * @returns Traditional formatted string
+ */
+export declare function serializeCodeChunksToTraditional(chunks: CodeChunk[]): string;
+/**
+ * Serialize code chunks (TOON if enabled, traditional otherwise)
+ *
+ * @param chunks Code chunks to serialize
+ * @returns Formatted string (TOON or traditional)
+ */
+export declare function serializeCodeChunks(chunks: CodeChunk[]): Promise<string>;
+/**
+ * Check if TOON is available and enabled
+ */
+export declare function isToonAvailable(): Promise<boolean>;
+//# sourceMappingURL=toon-serializer.d.ts.map

package/dist/infrastructure/serialization/toon-serializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toon-serializer.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/serialization/toon-serializer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AA+BrE;;;;;;;;;;GAUG;AACH,wBAAsB,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmC3F;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAI5E;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAO9E;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAMxD"}

package/dist/infrastructure/serialization/toon-serializer.js

@@ -0,0 +1,119 @@
+/**
+ * TOON (Token-Oriented Object Notation) Serializer
+ *
+ * Phase 1: Code Context Serialization for v1.0.0 MVP
+ *
+ * Benefits:
+ * - 30-60% token reduction compared to JSON
+ * - Better LLM parsing accuracy
+ * - Self-documenting structure
+ *
+ * Feature Flag: CODEHERE_USE_TOON (default: false for v1.0.0)
+ */
+let toonLib = null;
+/**
+ * Lazy load TOON library (only if feature flag is enabled)
+ */
+async function getToonLib() {
+    if (toonLib === null) {
+        try {
+            // Dynamic import for ES modules - use eval to avoid TypeScript compile-time error when package isn't installed
+            // This allows the code to compile even if @toon-format/toon is not installed
+            const toonModulePath = '@toon-format/toon';
+            // eslint-disable-next-line @typescript-eslint/no-implied-eval
+            const toonModule = await import(/* @ts-ignore */ toonModulePath);
+            toonLib = toonModule;
+        }
+        catch (error) {
+            // TOON library not installed or feature disabled
+            return null;
+        }
+    }
+    return toonLib;
+}
+/**
+ * Check if TOON is enabled via feature flag
+ */
+function isToonEnabled() {
+    return process.env.CODEHERE_USE_TOON === 'true' || process.env.CODEHERE_USE_TOON === '1';
+}
+/**
+ * Serialize code chunks to TOON format
+ *
+ * TOON format for code chunks:
+ * chunks[N]{filepath,content,score,lineStart,lineEnd}:
+ *   src/auth.ts,function authenticate() {...},0.95,10,60
+ *   src/utils.ts,export function helper() {...},0.87,5,35
+ *
+ * @param chunks Code chunks to serialize
+ * @returns TOON-formatted string, or null if TOON is disabled or library unavailable
+ */
+export async function serializeCodeChunksToToon(chunks) {
+    if (!isToonEnabled() || chunks.length === 0) {
+        return null;
+    }
+    const toon = await getToonLib();
+    if (!toon) {
+        return null;
+    }
+    try {
+        // Convert code chunks to array of objects for TOON encoding
+        const chunksData = chunks.map(chunk => ({
+            filepath: chunk.filepath,
+            content: chunk.content,
+            score: chunk.score || 1.0,
+            lineStart: chunk.lineStart || 0,
+            lineEnd: chunk.lineEnd || 0,
+        }));
+        // Encode to TOON format
+        // TOON library exports: { encode, decode } or default export
+        const toonData = { chunks: chunksData };
+        const encodeFn = toon.encode || toon.default?.encode || (typeof toon === 'function' ? toon : null);
+        if (!encodeFn || typeof encodeFn !== 'function') {
+            throw new Error('TOON encode function not found in module');
+        }
+        const toonString = encodeFn(toonData, { delimiter: '\t' });
+        return toonString;
+    }
+    catch (error) {
+        // If TOON encoding fails, return null to fall back to JSON
+        console.warn('[TOON] Encoding failed, falling back to JSON:', error instanceof Error ? error.message : String(error));
+        return null;
+    }
+}
+/**
+ * Serialize code chunks to traditional format (fallback)
+ * Used when TOON is disabled or unavailable
+ *
+ * @param chunks Code chunks to serialize
+ * @returns Traditional formatted string
+ */
+export function serializeCodeChunksToTraditional(chunks) {
+    return chunks
+        .map((chunk, idx) => `[Chunk ${idx + 1} from ${chunk.filepath}]\n${chunk.content}`)
+        .join('\n\n---\n\n');
+}
+/**
+ * Serialize code chunks (TOON if enabled, traditional otherwise)
+ *
+ * @param chunks Code chunks to serialize
+ * @returns Formatted string (TOON or traditional)
+ */
+export async function serializeCodeChunks(chunks) {
+    const toonResult = await serializeCodeChunksToToon(chunks);
+    if (toonResult !== null) {
+        return toonResult;
+    }
+    return serializeCodeChunksToTraditional(chunks);
+}
+/**
+ * Check if TOON is available and enabled
+ */
+export async function isToonAvailable() {
+    if (!isToonEnabled()) {
+        return false;
+    }
+    const lib = await getToonLib();
+    return lib !== null;
+}
+//# sourceMappingURL=toon-serializer.js.map

package/dist/infrastructure/serialization/toon-serializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toon-serializer.js","sourceRoot":"","sources":["../../../src/infrastructure/serialization/toon-serializer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,IAAI,OAAO,GAAQ,IAAI,CAAC;AAExB;;GAEG;AACH,KAAK,UAAU,UAAU;IACvB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,+GAA+G;YAC/G,6EAA6E;YAC7E,MAAM,cAAc,GAAG,mBAAmB,CAAC;YAC3C,8DAA8D;YAC9D,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;YACjE,OAAO,GAAG,UAAU,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iDAAiD;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,GAAG,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAAmB;IACjE,IAAI,CAAC,aAAa,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,UAAU,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,4DAA4D;QAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,GAAG;YACzB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,CAAC;YAC/B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,CAAC;SAC5B,CAAC,CAAC,CAAC;QAEJ,wBAAwB;QACxB,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAI,IAAY,CAAC,MAAM,IAAK,IAAY,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrH,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3D,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2DAA2D;QAC3D,OAAO,CAAC,IAAI,CAAC,+CAA+C,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAAC,MAAmB;IAClE,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,GAAG,GAAG,CAAC,SAAS,KAAK,CAAC,QAAQ,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;SAClF,IAAI,CAAC,aAAa,CAAC,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAmB;IAC3D,MAAM,UAAU,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,gCAAgC,CAAC,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,OAAO,GAAG,KAAK,IAAI,CAAC;AACtB,CAAC"}

package/dist/infrastructure/storage/embeddings-path.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Infrastructure: Embeddings Path Helper
+ * Determines per-codebase embeddings database path
+ */
+export interface EmbeddingsPathInfo {
+    root: string;
+    dbPath: string;
+    cacheDir: string;
+}
+/**
+ * Get embeddings database path for a specific codebase
+ * Uses codebase root detection to ensure per-repo isolation
+ *
+ * @param cwd - Current working directory (defaults to process.cwd())
+ * @returns Object with root path, database path, and cache directory
+ */
+export declare function getEmbeddingsDbPath(cwd?: string): EmbeddingsPathInfo;
+//# sourceMappingURL=embeddings-path.d.ts.map

package/dist/infrastructure/storage/embeddings-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embeddings-path.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/storage/embeddings-path.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAsB,GAAG,kBAAkB,CA2BnF"}

package/dist/infrastructure/storage/embeddings-path.js

@@ -0,0 +1,37 @@
+/**
+ * Infrastructure: Embeddings Path Helper
+ * Determines per-codebase embeddings database path
+ */
+import { join } from 'path';
+import { existsSync, mkdirSync } from 'fs';
+import { findCodebaseRoot } from '../../domain/services/codebase-detector.js';
+/**
+ * Get embeddings database path for a specific codebase
+ * Uses codebase root detection to ensure per-repo isolation
+ *
+ * @param cwd - Current working directory (defaults to process.cwd())
+ * @returns Object with root path, database path, and cache directory
+ */
+export function getEmbeddingsDbPath(cwd = process.cwd()) {
+    const codebaseInfo = findCodebaseRoot(cwd);
+    if (!codebaseInfo) {
+        // Fallback to cwd if codebase root can't be determined
+        const root = cwd;
+        const dbPath = join(root, '.codehere-cache', 'embeddings.sqlite');
+        const cacheDir = join(root, '.codehere-cache');
+        // Ensure cache directory exists
+        if (!existsSync(cacheDir)) {
+            mkdirSync(cacheDir, { recursive: true });
+        }
+        return { root, dbPath, cacheDir };
+    }
+    const root = codebaseInfo.rootPath;
+    const dbPath = join(root, '.codehere-cache', 'embeddings.sqlite');
+    const cacheDir = join(root, '.codehere-cache');
+    // Ensure cache directory exists
+    if (!existsSync(cacheDir)) {
+        mkdirSync(cacheDir, { recursive: true });
+    }
+    return { root, dbPath, cacheDir };
+}
+//# sourceMappingURL=embeddings-path.js.map

package/dist/infrastructure/storage/embeddings-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embeddings-path.js","sourceRoot":"","sources":["../../../src/infrastructure/storage/embeddings-path.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAQ9E;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC7D,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE3C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,uDAAuD;QACvD,MAAM,IAAI,GAAG,GAAG,CAAC;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAE/C,gCAAgC;QAChC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAE/C,gCAAgC;IAChC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACpC,CAAC"}

package/dist/infrastructure/storage/plan-repository.d.ts

@@ -1,6 +1,8 @@
 /**
  * Plan Repository
  * Persists and retrieves plans for execution across sessions
+ *
+ * Phase 1: v0.5.0-alpha.0
  */
 import type { Plan } from '../../domain/entities/plan.js';
 export interface IPlanRepository {

package/dist/infrastructure/storage/plan-repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plan-repository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/storage/plan-repository.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAM1D,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,qBAAa,kBAAmB,YAAW,eAAe;IACxD,OAAO,CAAC,QAAQ,CAAS;;IAYzB;;OAEG;IACG,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBvC;;OAEG;IACG,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IA2B/C;;OAEG;IACG,IAAI,CAAC,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAiC/C;;OAEG;IACG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBnE;;OAEG;IACG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAO5C;AAKD,wBAAgB,iBAAiB,IAAI,eAAe,CAKnD"}
+{"version":3,"file":"plan-repository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/storage/plan-repository.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAiB1D,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,qBAAa,kBAAmB,YAAW,eAAe;IACxD,OAAO,CAAC,QAAQ,CAAS;;IASzB;;OAEG;IACG,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAcvC;;OAEG;IACG,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAgB/C;;OAEG;IACG,IAAI,CAAC,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAM/C;;OAEG;IACG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnE;;OAEG;IACG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAO5C;AAID,wBAAgB,iBAAiB,IAAI,eAAe,CAKnD"}