commandmate 0.44.2 → 0.45.0

package/dist/server/src/lib/hooks/sources/command-code/transcript.js

@@ -202,18 +202,12 @@ function readToolDetail(input) {
     for (const field of COMMAND_CODE_TOOL_DETAIL_FIELDS) {
         const value = (0, event_mapper_1.readStringField)(input, field);
         if (value)
-            return boundToolDetail(collapseToLine(value));
+            return boundToolDetail((0, turn_body_1.collapseToLine)(value));
     }
     return null;
 }
-/** A tool detail on one line. A heredoc `command` puts newlines in it. */
-function collapseToLine(value) {
-    return value.replace(/\s+/g, ' ').trim();
-}
 function boundToolDetail(value) {
-    return value.length <= exports.MAX_COMMAND_CODE_TOOL_DETAIL_LENGTH
-        ? value
-        : `${value.slice(0, exports.MAX_COMMAND_CODE_TOOL_DETAIL_LENGTH - 1)}…`;
+    return (0, turn_body_1.boundDetail)(value, exports.MAX_COMMAND_CODE_TOOL_DETAIL_LENGTH);
 }
 /** `message.meta`, when the entry has one. */
 function readMessageMeta(message) {
@@ -588,11 +582,7 @@ function renderCommandCodeTurn(turn) {
             unknown.add(block.type);
     }
     let body = (0, turn_body_1.separateTurnBody)(rendered).body;
-    if (body.length > exports.MAX_COMMAND_CODE_TURN_BODY_LENGTH) {
-        body =
-            body.slice(0, exports.MAX_COMMAND_CODE_TURN_BODY_LENGTH - exports.COMMAND_CODE_TURN_TRUNCATION_MARKER.length) +
-                exports.COMMAND_CODE_TURN_TRUNCATION_MARKER;
-    }
+    body = (0, turn_body_1.truncateTurnBody)(body, exports.MAX_COMMAND_CODE_TURN_BODY_LENGTH, exports.COMMAND_CODE_TURN_TRUNCATION_MARKER);
     return {
         sessionId: turn.sessionId,
         promptId: turn.promptId,

package/dist/server/src/lib/hooks/sources/copilot/hook-settings.js

@@ -100,6 +100,15 @@
  * the bearer header without looking at where it is going, so a constant
  * destination is what keeps the token on loopback (設計方針書 §10.7).
  *
+ * ## UAT isolation (Issue #3391)
+ *
+ * Under `CM_UAT_ISOLATION=1` (Issue #3360) nothing in `~/.copilot` is written —
+ * not `settings.json`, not its backup, not the lock. The file is the user's,
+ * shared with their production server, and names a relay by this checkout's
+ * path. It is used as it is only when it already holds exactly what this build
+ * writes into an empty file ({@link inspectCopilotHookSettingsReadOnly});
+ * anything else refuses the launch, the way codex and antigravity do.
+ *
  * @module lib/hooks/sources/copilot/hook-settings
  */
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -111,8 +120,9 @@ exports.buildCopilotEventCommand = buildCopilotEventCommand;
 exports.buildCopilotPermissionCommand = buildCopilotPermissionCommand;
 exports.buildCopilotHookSettings = buildCopilotHookSettings;
 exports.mergeCopilotHookSettings = mergeCopilotHookSettings;
-exports.readCopilotSettings = readCopilotSettings;
 exports.inspectCopilotConfigHooks = inspectCopilotConfigHooks;
+exports.getCopilotSettingsTempPath = getCopilotSettingsTempPath;
+exports.inspectCopilotHookSettingsReadOnly = inspectCopilotHookSettingsReadOnly;
 exports.writeCopilotHookSettings = writeCopilotHookSettings;
 exports.buildCopilotHookEnvironment = buildCopilotHookEnvironment;
 exports.isCopilotHookInjectionEnabled = isCopilotHookInjectionEnabled;
@@ -121,6 +131,7 @@ const fs_1 = require("fs");
 const os_1 = require("os");
 const path_1 = require("path");
 const safe_directory_1 = require("../../../../config/safe-directory");
+const uat_isolation_1 = require("../../../../config/uat-isolation");
 const types_1 = require("../../../../lib/cli-tools/types");
 const env_1 = require("../../../../lib/env");
 const hook_settings_generator_1 = require("../../../../lib/hooks/hook-settings-generator");
@@ -488,6 +499,10 @@ function mergeCopilotHookSettings(existing, generated) {
     }
     return { ...existing, hooks: merged };
 }
+/** The bytes `settings.json` should hold, given what it holds now. */
+function renderCopilotHookSettings(existing, options) {
+    return `${JSON.stringify(mergeCopilotHookSettings(existing, buildCopilotHookSettings(options)), null, 2)}\n`;
+}
 /** `''` when the file is not there; anything else throws. */
 function readFileOrEmpty(path) {
     try {
@@ -499,16 +514,6 @@ function readFileOrEmpty(path) {
         throw error;
     }
 }
-/**
- * Read the user's `settings.json`.
- *
- * @returns The parsed object, or `{}` when the file does not exist
- * @throws When the file exists but cannot be read or is not a JSON object —
- *   the caller turns that into "start without hooks", never into a rewrite
- */
-function readCopilotSettings(settingsPath) {
-    return parseCopilotSettings(readFileOrEmpty(settingsPath));
-}
 function parseCopilotSettings(raw) {
     if (raw.trim() === '')
         return {};
@@ -682,6 +687,10 @@ function withCopilotSettingsLock(directory, write) {
         }
     }
 }
+/** The temp file {@link writeFileAtomic} writes before it renames it over `path`. */
+function getCopilotSettingsTempPath(path) {
+    return `${path}.${process.pid}.tmp`;
+}
 /**
  * Replace a file's contents without ever leaving it half-written.
  *
@@ -692,9 +701,17 @@ function withCopilotSettingsLock(directory, write) {
  * runs on (設計方針書 §10.9 決定 1).
  */
 function writeFileAtomic(path, contents) {
-    const temp = `${path}.${process.pid}.tmp`;
+    const temp = getCopilotSettingsTempPath(path);
     try {
-        (0, fs_1.writeFileSync)(temp, contents, { mode: 0o600 });
+        // Issue #3312: removed first and then created exclusively, so a symlink
+        // planted at the temp name is removed, never written through.
+        try {
+            (0, fs_1.unlinkSync)(temp);
+        }
+        catch {
+            // Not there: the usual case.
+        }
+        (0, fs_1.writeFileSync)(temp, contents, { mode: 0o600, flag: 'wx' });
         (0, fs_1.renameSync)(temp, path);
     }
     catch (error) {
@@ -707,22 +724,121 @@ function writeFileAtomic(path, contents) {
         throw error;
     }
 }
+/**
+ * The `config.json` that can erase `settingsPath`.
+ *
+ * Next to the settings file rather than via `getCopilotConfigPath()`: the
+ * config.json that can erase a settings.json is the one copilot reads from the
+ * same directory, and an overridden `settingsPath` must not be checked against
+ * a different home's config.
+ */
+function resolveCopilotConfigPathFor(settingsPath, options) {
+    return options.configPath ?? (0, path_1.join)((0, path_1.dirname)(settingsPath), 'config.json');
+}
+/**
+ * Whether the shared `~/.copilot/settings.json` may be used, unwritten, by a
+ * server in UAT isolation mode (`CM_UAT_ISOLATION=1`, Issue #3391).
+ *
+ * Usable means exactly one thing, as for codex and antigravity: the file is
+ * byte-identical to what this build writes into an EMPTY file. Comparing against
+ * the merge with what is there ({@link mergeCopilotHookSettings}) would not do —
+ * the merge keeps the user's own handlers, so a file holding a hand-written
+ * hook that posts straight to production would compare equal and run in the
+ * UAT session. The file holds no port, worktree or instance (they travel in the
+ * launch environment), so a file production wrote with the same build delivers
+ * this session's events to THIS server.
+ *
+ * A `hooks` key in copilot's `config.json` is refused too: copilot migrates it
+ * over `settings.json` at startup, so those hooks would be the ones that run. An
+ * unreadable `config.json` is refused rather than proceeded past, because here
+ * nothing may run that this server cannot show is its own.
+ */
+function inspectCopilotHookSettingsReadOnly(options = {}) {
+    const settingsPath = options.settingsPath ?? getCopilotSettingsPath();
+    const configPath = resolveCopilotConfigPathFor(settingsPath, options);
+    if (!isCopilotHookInjectionEnabled()) {
+        return {
+            usable: false,
+            reason: 'CM_AGENT_HOOKS_INJECT=0',
+            fix: 'Do not combine CM_AGENT_HOOKS_INJECT=0 with UAT isolation.',
+        };
+    }
+    try {
+        const configHooks = inspectCopilotConfigHooks(configPath);
+        if (configHooks !== 'absent') {
+            logger.info('copilot-hook-config-json-readonly', { configPath, configHooks });
+            return {
+                usable: false,
+                reason: configHooks === 'present'
+                    ? `${configPath} has a "hooks" key, which copilot migrates over settings.json at startup`
+                    : `${configPath} could not be parsed, so it may hold hooks copilot migrates over settings.json`,
+                fix: 'Skip copilot scenarios in this UAT, or run it where copilot\'s config.json holds no hooks.',
+            };
+        }
+        const raw = readFileOrEmpty(settingsPath);
+        if (raw === '') {
+            logger.info('copilot-hook-settings-absent-readonly', { settingsPath });
+            return { usable: false, reason: `${settingsPath} does not exist or is empty`, fix: uat_isolation_1.UAT_SAME_BUILD_FIX };
+        }
+        if (raw === renderCopilotHookSettings({}, options)) {
+            return { usable: true, settingsPath };
+        }
+        if (raw === renderCopilotHookSettings(parseCopilotSettings(raw), options)) {
+            logger.info('copilot-hook-settings-foreign-readonly', { settingsPath });
+            return {
+                usable: false,
+                reason: `${settingsPath} also holds hooks (or keys) CommandMate did not write, which would run in the UAT session`,
+                fix: 'Skip copilot scenarios in this UAT, or run it where the shared settings file holds only the hooks CommandMate writes.',
+            };
+        }
+        logger.info('copilot-hook-settings-differs-readonly', { settingsPath });
+        return { usable: false, reason: `${settingsPath} differs from what this build writes`, fix: uat_isolation_1.UAT_SAME_BUILD_FIX };
+    }
+    catch (error) {
+        logger.warn('copilot-hook-settings-unreadable', {
+            settingsPath,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        return { usable: false, reason: `${settingsPath} could not be read`, fix: uat_isolation_1.UAT_SAME_BUILD_FIX };
+    }
+}
 /**
  * Merge the generated hooks into copilot's settings file and return its path.
  *
+ * Under `CM_UAT_ISOLATION=1` (Issue #3391) nothing is written: a file that
+ * already holds exactly this build's hooks is reused, anything else throws
+ * {@link UatIsolationLaunchRefusedError}.
+ *
+ * @throws {UatIsolationLaunchRefusedError} Under UAT isolation, when the shared
+ *   file cannot be used as it is
  * @throws {CopilotConfigHooksShadowError} When copilot's `config.json` still
  *   has a `hooks` key, which it migrates over this file at startup
  * @throws Anything the read, the merge or the write throws, plus a lock the
  *   file's other writers are holding. Callers must treat a throw as "launch
- *   without hooks" (fail-open).
+ *   without hooks" (fail-open), except the UAT isolation refusal.
  */
 function writeCopilotHookSettings(options = {}) {
-    const settingsPath = options.settingsPath ?? getCopilotSettingsPath();
-    // Next to the settings file rather than via `getCopilotConfigPath()`: the
-    // config.json that can erase a settings.json is the one copilot reads from
-    // the same directory, and an overridden `settingsPath` must not be checked
-    // against a different home's config.
-    const configPath = options.configPath ?? (0, path_1.join)((0, path_1.dirname)(settingsPath), 'config.json');
+    // Issue #3312: under `own-home` the file, its backup and its lock directory
+    // are written once they check out inside the dedicated user's HOME.
+    const targetPath = options.settingsPath ?? getCopilotSettingsPath();
+    const policy = (0, uat_isolation_1.sharedHookWritePolicy)(tool_id_1.COPILOT_CLI_TOOL_ID, [
+        (0, path_1.dirname)(targetPath),
+        targetPath,
+        `${targetPath}${exports.COPILOT_SETTINGS_BACKUP_SUFFIX}`,
+        getCopilotSettingsTempPath(targetPath),
+        (0, path_1.join)((0, path_1.dirname)(targetPath), exports.COPILOT_SETTINGS_LOCK_BASENAME),
+    ]);
+    if (policy === 'read-only') {
+        // Issue #3391: the file is the user's, shared with their production server,
+        // and names a relay by this checkout's path. A UAT server writes nothing to
+        // it; see {@link inspectCopilotHookSettingsReadOnly}.
+        const inspection = inspectCopilotHookSettingsReadOnly(options);
+        if (inspection.usable)
+            return inspection.settingsPath;
+        throw new uat_isolation_1.UatIsolationLaunchRefusedError(tool_id_1.COPILOT_CLI_TOOL_ID, inspection.reason, inspection.fix);
+    }
+    const settingsPath = targetPath;
+    const configPath = resolveCopilotConfigPathFor(settingsPath, options);
     const configHooks = inspectCopilotConfigHooks(configPath);
     if (configHooks === 'present')
         throw new CopilotConfigHooksShadowError(configPath);
@@ -734,8 +850,7 @@ function writeCopilotHookSettings(options = {}) {
     (0, fs_1.mkdirSync)((0, path_1.dirname)(settingsPath), { recursive: true, mode: 0o700 });
     return withCopilotSettingsLock((0, path_1.dirname)(settingsPath), () => {
         const raw = readFileOrEmpty(settingsPath);
-        const merged = mergeCopilotHookSettings(parseCopilotSettings(raw), buildCopilotHookSettings(options));
-        const next = `${JSON.stringify(merged, null, 2)}\n`;
+        const next = renderCopilotHookSettings(parseCopilotSettings(raw), options);
         // Since #1904 the generated commands carry no port and no per-launch value,
         // so the common re-launch produces the bytes already on disk. Returning
         // early keeps the user's file — and its mtime — untouched, and skips the
@@ -787,26 +902,37 @@ function isCopilotHookInjectionEnabled() {
 /**
  * The command that launches copilot for one instance (S3 / S4 / S5).
  *
- * Never throws. Injection is an enhancement to a session that has to start
- * anyway, so every failure — the switch is off, an id would not survive the
- * receiver's own validation, the settings file is unreadable or unwritable —
- * returns the bare command and no settings path, which is byte-for-byte what
- * `cli-tools/copilot.ts` sent before this Issue.
+ * Never throws outside UAT isolation. Injection is an enhancement to a session
+ * that has to start anyway, so every failure — the switch is off, an id would
+ * not survive the receiver's own validation, the settings file is unreadable or
+ * unwritable — returns the bare command and no settings path, which is
+ * byte-for-byte what `cli-tools/copilot.ts` sent before this Issue.
+ *
+ * Under `CM_UAT_ISOLATION=1` (Issue #3391) each of those roads throws
+ * {@link UatIsolationLaunchRefusedError} instead, as codex's and antigravity's
+ * do: a bare copilot still reads the shared `~/.copilot/settings.json`, so
+ * "without hooks" would mean "with whatever hooks are in the user's file".
  *
  * @param executablePath - Normally {@link COPILOT_LAUNCH_COMMAND}
  * @param target - The instance being started
  */
 function buildCopilotLaunchCommand(executablePath, target, options = {}) {
     const bare = { command: executablePath, settingsPath: null, env: {} };
-    if (!isCopilotHookInjectionEnabled())
+    const fallback = (reason, fix) => {
+        if ((0, uat_isolation_1.isUatIsolationEnabled)())
+            throw new uat_isolation_1.UatIsolationLaunchRefusedError(tool_id_1.COPILOT_CLI_TOOL_ID, reason, fix);
         return bare;
+    };
+    if (!isCopilotHookInjectionEnabled()) {
+        return fallback('CM_AGENT_HOOKS_INJECT=0', 'Do not combine CM_AGENT_HOOKS_INJECT=0 with UAT isolation.');
+    }
     const instanceId = target.instanceId ?? tool_id_1.COPILOT_CLI_TOOL_ID;
     if (!(0, types_1.isValidInstanceId)(instanceId) || !(0, path_validator_1.isValidWorktreeId)(target.worktreeId)) {
         // Both become URL parameters the receivers re-validate; a value that would
         // be rejected there is not worth injecting, and a rejected event is worse
         // than no event because it is a 400 in the operator's log for every turn.
         logger.warn('copilot-hook-invalid-correlation-key', { worktreeId: target.worktreeId });
-        return bare;
+        return fallback('the worktree or instance id is not a valid correlation key', 'Use a valid worktree and instance id.');
     }
     try {
         const settingsPath = writeCopilotHookSettings(options);
@@ -817,6 +943,8 @@ function buildCopilotLaunchCommand(executablePath, target, options = {}) {
         };
     }
     catch (error) {
+        if (error instanceof uat_isolation_1.UatIsolationLaunchRefusedError)
+            throw error;
         if (error instanceof CopilotConfigHooksShadowError) {
             // Its own reason code because it is the one failure here an operator can
             // fix: move `hooks` out of config.json and into settings.json, or let
@@ -825,12 +953,14 @@ function buildCopilotLaunchCommand(executablePath, target, options = {}) {
                 worktreeId: target.worktreeId,
                 configPath: error.configPath,
             });
-            return bare;
+            // Issue #3312: only `own-home` writes and so can get here isolated; a
+            // bare copilot would run the hooks in config.json, so it is refused.
+            return fallback(`${error.configPath} has a "hooks" key, which copilot migrates over settings.json at startup`, 'Move the hooks out of copilot\'s config.json.');
         }
         logger.warn('copilot-hook-settings-write-failed', {
             worktreeId: target.worktreeId,
             error: error instanceof Error ? error.message : String(error),
         });
-        return bare;
+        return fallback('~/.copilot/settings.json could not be prepared', uat_isolation_1.UAT_SAME_BUILD_FIX);
     }
 }

package/dist/server/src/lib/hooks/sources/define-source.js

@@ -44,6 +44,41 @@ const INERT_SUBSCRIPTION = {
     close: async () => { },
     liveness: { state: 'unknown' },
 };
+/**
+ * The event normalization both factories share: their two bodies were identical.
+ */
+function normalizeSpecEvent(spec, nativeEventNameFields, raw) {
+    const receivedAt = raw.receivedAt ?? Date.now();
+    const nativeEventName = nativeEventNameFields.length > 0
+        ? (0, event_mapper_1.readFirstStringField)(raw.payload, nativeEventNameFields)
+        : null;
+    // An event word the caller already resolved wins over the payload. This
+    // is the only channel antigravity has, and it is also how the relay
+    // script's `--event` reaches here for every other tool.
+    if (raw.event != null && (0, agent_event_types_1.isAgentEventType)(raw.event)) {
+        return (0, event_mapper_1.buildNormalizedEvent)({ event: raw.event }, raw.payload, receivedAt, {
+            detail: spec.extractDetail,
+            conversationId: spec.conversationIdFields,
+            toolCallId: spec.toolCallIdFields,
+            modelFields: spec.modelFields,
+            extractModel: spec.extractModel,
+        });
+    }
+    const mapping = (0, event_mapper_1.runEventMappers)(spec.mappers, nativeEventName, raw.payload);
+    if (!mapping) {
+        // C8. Not an error: a tool emits more events than CommandMate has words
+        // for, and it grows more of them between releases.
+        (0, event_mapper_1.recordUnknownEvent)(spec.cliToolId, nativeEventName);
+        return null;
+    }
+    return (0, event_mapper_1.buildNormalizedEvent)(mapping, raw.payload, receivedAt, {
+        detail: spec.extractDetail,
+        conversationId: spec.conversationIdFields,
+        toolCallId: spec.toolCallIdFields,
+        modelFields: spec.modelFields,
+        extractModel: spec.extractModel,
+    });
+}
 /**
  * Build a push (hook) source from its differences.
  *
@@ -58,36 +93,7 @@ function definePushHookSource(spec) {
         noDecision: spec.noDecision,
         capabilities: spec.capabilities,
         normalizeEvent(raw) {
-            const receivedAt = raw.receivedAt ?? Date.now();
-            const nativeEventName = nativeEventNameFields.length > 0
-                ? (0, event_mapper_1.readFirstStringField)(raw.payload, nativeEventNameFields)
-                : null;
-            // An event word the caller already resolved wins over the payload. This
-            // is the only channel antigravity has, and it is also how the relay
-            // script's `--event` reaches here for every other tool.
-            if (raw.event != null && (0, agent_event_types_1.isAgentEventType)(raw.event)) {
-                return (0, event_mapper_1.buildNormalizedEvent)({ event: raw.event }, raw.payload, receivedAt, {
-                    detail: spec.extractDetail,
-                    conversationId: spec.conversationIdFields,
-                    toolCallId: spec.toolCallIdFields,
-                    modelFields: spec.modelFields,
-                    extractModel: spec.extractModel,
-                });
-            }
-            const mapping = (0, event_mapper_1.runEventMappers)(spec.mappers, nativeEventName, raw.payload);
-            if (!mapping) {
-                // C8. Not an error: a tool emits more events than CommandMate has words
-                // for, and it grows more of them between releases.
-                (0, event_mapper_1.recordUnknownEvent)(spec.cliToolId, nativeEventName);
-                return null;
-            }
-            return (0, event_mapper_1.buildNormalizedEvent)(mapping, raw.payload, receivedAt, {
-                detail: spec.extractDetail,
-                conversationId: spec.conversationIdFields,
-                toolCallId: spec.toolCallIdFields,
-                modelFields: spec.modelFields,
-                extractModel: spec.extractModel,
-            });
+            return normalizeSpecEvent(spec, nativeEventNameFields, raw);
         },
         eventIdentityOf(payload) {
             // Issue #1899. Absent by default, because a push tool whose capability
@@ -96,6 +102,9 @@ function definePushHookSource(spec) {
             // applied to it.
             return spec.extractEventIdentity?.(payload) ?? null;
         },
+        promptJoinsOpenTurn(payload) {
+            return spec.promptJoinsOpenTurn?.(payload) ?? false;
+        },
         parsePermissionRequest: spec.parsePermissionRequest,
         parseQuestion: spec.parseQuestion,
         encodeVerdict(verdict) {
@@ -149,31 +158,7 @@ function definePullEventSource(spec) {
         noDecision: spec.noDecision,
         capabilities: spec.capabilities,
         normalizeEvent(raw) {
-            const receivedAt = raw.receivedAt ?? Date.now();
-            const nativeEventName = nativeEventNameFields.length > 0
-                ? (0, event_mapper_1.readFirstStringField)(raw.payload, nativeEventNameFields)
-                : null;
-            if (raw.event != null && (0, agent_event_types_1.isAgentEventType)(raw.event)) {
-                return (0, event_mapper_1.buildNormalizedEvent)({ event: raw.event }, raw.payload, receivedAt, {
-                    detail: spec.extractDetail,
-                    conversationId: spec.conversationIdFields,
-                    toolCallId: spec.toolCallIdFields,
-                    modelFields: spec.modelFields,
-                    extractModel: spec.extractModel,
-                });
-            }
-            const mapping = (0, event_mapper_1.runEventMappers)(spec.mappers, nativeEventName, raw.payload);
-            if (!mapping) {
-                (0, event_mapper_1.recordUnknownEvent)(spec.cliToolId, nativeEventName);
-                return null;
-            }
-            return (0, event_mapper_1.buildNormalizedEvent)(mapping, raw.payload, receivedAt, {
-                detail: spec.extractDetail,
-                conversationId: spec.conversationIdFields,
-                toolCallId: spec.toolCallIdFields,
-                modelFields: spec.modelFields,
-                extractModel: spec.extractModel,
-            });
+            return normalizeSpecEvent(spec, nativeEventNameFields, raw);
         },
         eventIdentityOf(payload) {
             // Issue #1899. See the push factory's copy — the difference is that a

package/dist/server/src/lib/hooks/sources/event-mapper.js

@@ -39,6 +39,7 @@ exports.isPlainObject = isPlainObject;
 exports.readNestedString = readNestedString;
 exports.buildNormalizedEvent = buildNormalizedEvent;
 const agent_event_types_1 = require("../../../lib/hooks/agent-event-types");
+const global_state_1 = require("../../global-state");
 /**
  * The commonest rule: this native name is always that word.
  *
@@ -69,7 +70,7 @@ function runEventMappers(mappers, nativeEventName, payload) {
 }
 /** Cap on remembered distinct names, so an unbounded vocabulary cannot grow this. */
 exports.MAX_UNKNOWN_EVENT_NAMES = 32;
-const unknownEvents = (globalThis.__agentSourceUnknownEvents ??= new Map());
+const unknownEvents = (0, global_state_1.getOrInitGlobal)('__agentSourceUnknownEvents', () => new Map());
 /**
  * Record an event that mapped to nothing.
  *

package/dist/server/src/lib/hooks/sources/opencode/diff.js

@@ -51,15 +51,14 @@ const auto_yes_state_1 = require("../../../../lib/auto-yes-state");
 const tool_id_1 = require("./tool-id");
 const ports_1 = require("./ports");
 const client_1 = require("./client");
+const global_state_1 = require("../../../global-state");
 const logger = (0, logger_1.createLogger)('lib/hooks/sources/opencode/diff');
 /** Cap on a stored session or message id, so a hostile frame cannot grow the map. */
 const MAX_OPENCODE_DIFF_ID_LENGTH = 128;
 /** compositeKey -> that instance's diff state. */
-const records = globalThis.__opencodeSessionDiff ??
-    (globalThis.__opencodeSessionDiff = new Map());
+const records = (0, global_state_1.getOrInitGlobal)('__opencodeSessionDiff', () => new Map());
 /** Keys with a `GET /diff` in flight, so a poll storm makes one request. */
-const refreshing = globalThis.__opencodeSessionDiffRefreshes ??
-    (globalThis.__opencodeSessionDiffRefreshes = new Set());
+const refreshing = (0, global_state_1.getOrInitGlobal)('__opencodeSessionDiffRefreshes', () => new Set());
 function keyOf(target) {
     return (0, auto_yes_state_1.buildCompositeKey)(target.worktreeId, target.cliToolId, target.instanceId);
 }

package/dist/server/src/lib/hooks/sources/opencode/history.js

@@ -94,6 +94,7 @@ const agent_transcript_1 = require("../../../../types/agent-transcript");
 const event_mapper_1 = require("../event-mapper");
 const client_1 = require("./client");
 const transcript_1 = require("./transcript");
+const global_state_1 = require("../../../global-state");
 const logger = (0, logger_1.createLogger)('lib/hooks/sources/opencode/history');
 /**
  * Cap on turns held in memory for one instance.
@@ -120,7 +121,7 @@ exports.MAX_OPENCODE_BACKFILLED_TURNS = 50;
  * otherwise each get a private copy, and the turn accumulated by one would be
  * invisible to the other.
  */
-const transcripts = (globalThis.__opencodeTranscripts ??= new Map());
+const transcripts = (0, global_state_1.getOrInitGlobal)('__opencodeTranscripts', () => new Map());
 function keyOf(target) {
     return (0, auto_yes_state_1.buildCompositeKey)(target.worktreeId, target.cliToolId, target.instanceId);
 }

package/dist/server/src/lib/hooks/sources/opencode/launch-settings.js

@@ -58,8 +58,9 @@ const auto_yes_state_1 = require("../../../../lib/auto-yes-state");
 const logger_1 = require("../../../../lib/logger");
 const hook_settings_generator_1 = require("../../../../lib/hooks/hook-settings-generator");
 const opencode_instance_settings_1 = require("../../../../types/opencode-instance-settings");
+const global_state_1 = require("../../../global-state");
 const logger = (0, logger_1.createLogger)('lib/hooks/sources/opencode/launch-settings');
-const cache = (globalThis.__opencodeLaunchSettings ??= new Map());
+const cache = (0, global_state_1.getOrInitGlobal)('__opencodeLaunchSettings', () => new Map());
 function keyOf(target) {
     return (0, auto_yes_state_1.buildCompositeKey)(target.worktreeId, target.cliToolId, target.instanceId);
 }

package/dist/server/src/lib/hooks/sources/opencode/payloads.js

@@ -41,6 +41,7 @@ exports.readOpencodePermissionSubject = readOpencodePermissionSubject;
 exports.toOpencodePendingQuestion = toOpencodePendingQuestion;
 const ask_user_question_payload_1 = require("../../../../lib/hooks/ask-user-question-payload");
 const event_mapper_1 = require("../event-mapper");
+const global_state_1 = require("../../../global-state");
 /**
  * Cap on remembered `callID -> tool name` pairs.
  *
@@ -49,7 +50,7 @@ const event_mapper_1 = require("../event-mapper");
  * approval, never a wrong one.
  */
 exports.MAX_TRACKED_TOOL_CALLS = 256;
-const toolCallNames = (globalThis.__opencodeToolCallNames ??= new Map());
+const toolCallNames = (0, global_state_1.getOrInitGlobal)('__opencodeToolCallNames', () => new Map());
 /** Record that a tool call has a name, seen on a `message.part.updated` frame. */
 function rememberOpencodeToolCall(callId, toolName) {
     toolCallNames.delete(callId);

package/dist/server/src/lib/hooks/sources/opencode/ports.js

@@ -65,12 +65,13 @@ const auto_yes_state_1 = require("../../../../lib/auto-yes-state");
 const hook_settings_generator_1 = require("../../../../lib/hooks/hook-settings-generator");
 const logger_1 = require("../../../../lib/logger");
 const client_1 = require("./client");
+const global_state_1 = require("../../../global-state");
 const logger = (0, logger_1.createLogger)('lib/hooks/sources/opencode/ports');
 /** The window opencode instances are placed in. 100 ports, one per instance. */
 exports.OPENCODE_PORT_RANGE = { min: 4200, max: 4299 };
 /** How many candidates a scan will try before giving up. */
 const PORT_SPAN = exports.OPENCODE_PORT_RANGE.max - exports.OPENCODE_PORT_RANGE.min + 1;
-const assignments = (globalThis.__opencodePortAssignments ??= new Map());
+const assignments = (0, global_state_1.getOrInitGlobal)('__opencodePortAssignments', () => new Map());
 function keyOf(target) {
     return (0, auto_yes_state_1.buildCompositeKey)(target.worktreeId, target.cliToolId, target.instanceId);
 }

package/dist/server/src/lib/hooks/sources/opencode/subscription.js

@@ -78,6 +78,7 @@ const payloads_1 = require("./payloads");
 const push_1 = require("./push");
 const ports_1 = require("./ports");
 const turn_gate_1 = require("./turn-gate");
+const global_state_1 = require("../../../global-state");
 const logger = (0, logger_1.createLogger)('lib/hooks/sources/opencode/subscription');
 /**
  * How long a connection may be silent before it counts as dead.
@@ -102,7 +103,7 @@ const MAX_SEEN_DECISIONS = 256;
  * its overflow beats an unbounded one that does not.
  */
 exports.MAX_RESYNCED_DECISIONS = 50;
-const subscriptions = (globalThis.__opencodeSubscriptions ??= new Map());
+const subscriptions = (0, global_state_1.getOrInitGlobal)('__opencodeSubscriptions', () => new Map());
 /**
  * The last liveness of a subscription that was **dropped rather than closed**
  * (Issue #2054).
@@ -124,7 +125,7 @@ const subscriptions = (globalThis.__opencodeSubscriptions ??= new Map());
  * Cleared when a new subscription opens on the key, and when the pane is closed:
  * a process that is gone has no degradation left to report.
  */
-const droppedLiveness = (globalThis.__opencodeDroppedLiveness ??= new Map());
+const droppedLiveness = (0, global_state_1.getOrInitGlobal)('__opencodeDroppedLiveness', () => new Map());
 /**
  * What `AgentEventSource.probeActivity` said the last time a stream was
  * (re-)attached for this instance (Issue #2054).
@@ -134,7 +135,7 @@ const droppedLiveness = (globalThis.__opencodeDroppedLiveness ??= new Map());
  * that turn ends, so "is this pane working right now?" has no answer on the
  * stream and one `GET /session/status` is the whole of it.
  */
-const probedActivity = (globalThis.__opencodeProbedActivity ??= new Map());
+const probedActivity = (0, global_state_1.getOrInitGlobal)('__opencodeProbedActivity', () => new Map());
 function keyOf(target) {
     return (0, auto_yes_state_1.buildCompositeKey)(target.worktreeId, target.cliToolId, target.instanceId);
 }

package/dist/server/src/lib/hooks/sources/opencode/transcript.js

@@ -210,19 +210,10 @@ function renderToolPart(part) {
     const name = part.tool ?? 'tool';
     const detail = part.title ?? null;
     const failed = part.status === 'error';
-    const head = `- \`${name}\`${detail ? ` — ${collapseToLine(detail)}` : ''}`;
+    const head = `- \`${name}\`${detail ? ` — ${(0, turn_body_1.collapseToLine)(detail)}` : ''}`;
     if (!failed)
         return head;
-    return part.error ? `${head} _(error: ${collapseToLine(part.error)})_` : `${head} _(error)_`;
-}
-/**
- * A tool title on one line.
- *
- * A `bash` title is the command, and a heredoc puts newlines in it. Left alone
- * they would end the list item and turn the rest of the command into body text.
- */
-function collapseToLine(value) {
-    return value.replace(/\s+/g, ' ').trim();
+    return part.error ? `${head} _(error: ${(0, turn_body_1.collapseToLine)(part.error)})_` : `${head} _(error)_`;
 }
 /**
  * Render one turn to Markdown.
@@ -280,11 +271,7 @@ function renderOpencodeTurn(turn) {
     // now sits behind the prose, so what a 200 kB turn loses is the tail of its
     // thinking rather than the answer (Issue #2272).
     let body = separated.body;
-    if (body.length > exports.MAX_OPENCODE_TURN_BODY_LENGTH) {
-        body =
-            body.slice(0, exports.MAX_OPENCODE_TURN_BODY_LENGTH - exports.OPENCODE_TURN_TRUNCATION_MARKER.length) +
-                exports.OPENCODE_TURN_TRUNCATION_MARKER;
-    }
+    body = (0, turn_body_1.truncateTurnBody)(body, exports.MAX_OPENCODE_TURN_BODY_LENGTH, exports.OPENCODE_TURN_TRUNCATION_MARKER);
     return {
         sessionId: turn.sessionId,
         userMessageId: turn.userMessageId,

package/dist/server/src/lib/hooks/sources/opencode-v2/history.js

@@ -111,6 +111,7 @@ const transcript_1 = require("../opencode/transcript");
 const client_1 = require("./client");
 const secrets_1 = require("./secrets");
 const tool_id_1 = require("./tool-id");
+const global_state_1 = require("../../../global-state");
 const logger = (0, logger_1.createLogger)('lib/hooks/sources/opencode-v2/history');
 /** The stream events after which a turn's reply is read (Issue #2940). */
 exports.OPENCODE_V2_TURN_END_EVENT_TYPES = [
@@ -271,7 +272,7 @@ function readLatestOpencodeV2AssistantModel(entries) {
  * ends close together would otherwise race the existence check and insert the
  * same turn twice.
  */
-const queue = (globalThis.__opencodeV2HistoryQueue ??= new Map());
+const queue = (0, global_state_1.getOrInitGlobal)('__opencodeV2HistoryQueue', () => new Map());
 /** Forget queued syncs. Test seam. */
 function resetOpencodeV2HistoryQueue() {
     queue.clear();