fixo-cli 1.0.0

package/dist/agent/parsers/symbols.js

@@ -0,0 +1,103 @@
+/**
+ * symbols.ts — Per-language symbol extraction using pure regex.
+ *
+ * Output is intentionally limited to the first `MAX_SYMBOLS_PER_FILE`
+ * matches so we never blow up the LLM's context window on a single
+ * oversized file. Coordinates are 1-based, line-inclusive, end-inclusive
+ * to match the LSP convention.
+ */
+const MAX_SYMBOLS_PER_FILE = 100;
+const JS_TS_PATTERNS = [
+    // export class Foo / class Foo
+    { re: /^[ \t]*(?:export\s+(?:default\s+)?|abstract\s+)?class\s+([A-Za-z_$][\w$]*)/gm, kind: 'class' },
+    // export interface Foo
+    { re: /^[ \t]*(?:export\s+)?interface\s+([A-Za-z_$][\w$]*)/gm, kind: 'interface' },
+    // export type Foo
+    { re: /^[ \t]*(?:export\s+)?type\s+([A-Za-z_$][\w$]*)/gm, kind: 'type' },
+    // export enum Foo
+    { re: /^[ \t]*(?:export\s+)?enum\s+([A-Za-z_$][\w$]*)/gm, kind: 'enum' },
+    // function foo(...)
+    {
+        re: /^[ \t]*(?:export\s+(?:default\s+)?)?(?:async\s+)?function\s*\*?\s*([A-Za-z_$][\w$]*)/gm,
+        kind: 'function',
+    },
+    // const/let/var foo = ...
+    {
+        re: /^[ \t]*(?:export\s+)?(?:const|let|var)\s+([A-Za-z_$][\w$]*)/gm,
+        kind: 'const',
+    },
+];
+const PYTHON_PATTERNS = [
+    { re: /^[ \t]*class\s+([A-Za-z_][\w]*)/gm, kind: 'class' },
+    { re: /^[ \t]*(?:async\s+)?def\s+([A-Za-z_][\w]*)/gm, kind: 'function' },
+];
+const GO_PATTERNS = [
+    { re: /^[ \t]*type\s+([A-Za-z_][\w]*)\s+struct/gm, kind: 'type' },
+    { re: /^[ \t]*type\s+([A-Za-z_][\w]*)\s+interface/gm, kind: 'interface' },
+    { re: /^[ \t]*func\s+(?:\([^)]*\)\s+)?([A-Za-z_][\w]*)/gm, kind: 'function' },
+    { re: /^[ \t]*(?:var|const)\s+([A-Za-z_][\w]*)/gm, kind: 'const' },
+];
+const RUST_PATTERNS = [
+    { re: /^[ \t]*(?:pub\s+)?(?:async\s+)?fn\s+([A-Za-z_][\w]*)/gm, kind: 'function' },
+    { re: /^[ \t]*(?:pub\s+)?struct\s+([A-Za-z_][\w]*)/gm, kind: 'type' },
+    { re: /^[ \t]*(?:pub\s+)?enum\s+([A-Za-z_][\w]*)/gm, kind: 'enum' },
+    { re: /^[ \t]*(?:pub\s+)?trait\s+([A-Za-z_][\w]*)/gm, kind: 'interface' },
+];
+const GENERIC_PATTERNS = [
+    {
+        re: /\b(?:export\s+)?(?:class|function|interface|type|const|let|var|enum)\s+([A-Za-z_$][\w$]*)/g,
+        kind: 'unknown',
+    },
+];
+const PATTERNS = {
+    typescript: JS_TS_PATTERNS,
+    javascript: JS_TS_PATTERNS,
+    python: PYTHON_PATTERNS,
+    go: GO_PATTERNS,
+    rust: RUST_PATTERNS,
+    bash: [],
+    json: [],
+    markdown: [],
+    generic: GENERIC_PATTERNS,
+};
+/**
+ * Extracts symbol declarations from `source`. The result is capped at
+ * `MAX_SYMBOLS_PER_FILE` entries and deduped by name; the first
+ * occurrence wins so an `export class Foo` is preferred over a later
+ * `class Foo` reference.
+ */
+export function extractSymbols(source, language) {
+    const patterns = PATTERNS[language] ?? GENERIC_PATTERNS;
+    if (patterns.length === 0)
+        return [];
+    const out = [];
+    const seen = new Set();
+    const lines = source.split('\n');
+    const totalLines = lines.length;
+    for (const { re, kind } of patterns) {
+        re.lastIndex = 0;
+        let match;
+        while ((match = re.exec(source)) !== null) {
+            if (out.length >= MAX_SYMBOLS_PER_FILE)
+                return out;
+            const name = match[1];
+            if (!name || seen.has(name))
+                continue;
+            seen.add(name);
+            const startIndex = match.index;
+            const line = indexToLine(source, startIndex);
+            const exported = /^\s*export\b/m.test(match[0]);
+            out.push({ name, kind, line, endLine: Math.min(totalLines, line + 5), exported });
+        }
+    }
+    return out;
+}
+function indexToLine(source, index) {
+    let line = 1;
+    for (let i = 0; i < index && i < source.length; i++) {
+        if (source.charCodeAt(i) === 10)
+            line++;
+    }
+    return line;
+}
+//# sourceMappingURL=symbols.js.map

package/dist/agent/parsers/symbols.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"symbols.js","sourceRoot":"","sources":["../../../src/agent/parsers/symbols.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAOjC,MAAM,cAAc,GAAoB;IACtC,+BAA+B;IAC/B,EAAE,EAAE,EAAE,8EAA8E,EAAE,IAAI,EAAE,OAAO,EAAE;IACrG,uBAAuB;IACvB,EAAE,EAAE,EAAE,uDAAuD,EAAE,IAAI,EAAE,WAAW,EAAE;IAClF,kBAAkB;IAClB,EAAE,EAAE,EAAE,kDAAkD,EAAE,IAAI,EAAE,MAAM,EAAE;IACxE,kBAAkB;IAClB,EAAE,EAAE,EAAE,kDAAkD,EAAE,IAAI,EAAE,MAAM,EAAE;IACxE,oBAAoB;IACpB;QACE,EAAE,EAAE,wFAAwF;QAC5F,IAAI,EAAE,UAAU;KACjB;IACD,0BAA0B;IAC1B;QACE,EAAE,EAAE,+DAA+D;QACnE,IAAI,EAAE,OAAO;KACd;CACF,CAAC;AAEF,MAAM,eAAe,GAAoB;IACvC,EAAE,EAAE,EAAE,mCAAmC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1D,EAAE,EAAE,EAAE,8CAA8C,EAAE,IAAI,EAAE,UAAU,EAAE;CACzE,CAAC;AAEF,MAAM,WAAW,GAAoB;IACnC,EAAE,EAAE,EAAE,2CAA2C,EAAE,IAAI,EAAE,MAAM,EAAE;IACjE,EAAE,EAAE,EAAE,8CAA8C,EAAE,IAAI,EAAE,WAAW,EAAE;IACzE,EAAE,EAAE,EAAE,mDAAmD,EAAE,IAAI,EAAE,UAAU,EAAE;IAC7E,EAAE,EAAE,EAAE,2CAA2C,EAAE,IAAI,EAAE,OAAO,EAAE;CACnE,CAAC;AAEF,MAAM,aAAa,GAAoB;IACrC,EAAE,EAAE,EAAE,wDAAwD,EAAE,IAAI,EAAE,UAAU,EAAE;IAClF,EAAE,EAAE,EAAE,+CAA+C,EAAE,IAAI,EAAE,MAAM,EAAE;IACrE,EAAE,EAAE,EAAE,6CAA6C,EAAE,IAAI,EAAE,MAAM,EAAE;IACnE,EAAE,EAAE,EAAE,8CAA8C,EAAE,IAAI,EAAE,WAAW,EAAE;CAC1E,CAAC;AAEF,MAAM,gBAAgB,GAAoB;IACxC;QACE,EAAE,EAAE,4FAA4F;QAChG,IAAI,EAAE,SAAS;KAChB;CACF,CAAC;AAEF,MAAM,QAAQ,GAAwC;IACpD,UAAU,EAAE,cAAc;IAC1B,UAAU,EAAE,cAAc;IAC1B,MAAM,EAAE,eAAe;IACvB,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,EAAE;IACR,QAAQ,EAAE,EAAE;IACZ,OAAO,EAAE,gBAAgB;CAC1B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,QAAoB;IACjE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAAC;IACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;IAEhC,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;QACpC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACjB,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1C,IAAI,GAAG,CAAC,MAAM,IAAI,oBAAoB;gBAAE,OAAO,GAAG,CAAC;YACnD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;YAC/B,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,KAAa;IAChD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpD,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/agent/permissions.d.ts

@@ -0,0 +1,65 @@
+import { type PolicyProfile } from '../runtime/policy.js';
+export type PermissionDecision = 'allow' | 'ask' | 'deny';
+export interface PermissionRule {
+    /** Glob pattern in the form `Tool(pattern)`. */
+    pattern: string;
+    decision: PermissionDecision;
+    /** Optional human-readable reason (shown when denying). */
+    reason?: string;
+}
+export interface PermissionsFile {
+    version: 1;
+    rules: PermissionRule[];
+}
+export interface PermissionCheckResult {
+    decision: PermissionDecision;
+    reason: string;
+    matchedRule: string | null;
+    source: 'rule' | 'default-ask' | 'fallback-policy';
+}
+/**
+ * Tools introduced in Phases 1–3. When the user runs one of
+ * these with no matching rule, we force `ask` (rather than
+ * letting `decidePolicy` quietly return `allow`).
+ */
+export declare const NEW_TOOL_DEFAULT_ASK: ReadonlySet<string>;
+/** Read `.fixo/permissions.json` from cwd. */
+export declare function loadPermissionsFile(cwd: string): PermissionsFile | null;
+/** Save the permissions file. */
+export declare function savePermissionsFile(cwd: string, file: PermissionsFile): {
+    ok: boolean;
+    error?: string;
+};
+/** Get the permissions file path (test-only introspection). */
+export declare function getPermissionsPath(cwd: string): string;
+/**
+ * Convert a glob pattern to a RegExp anchored at both ends.
+ * - `*` matches any chars except `/`
+ * - `**` matches any chars including `/`
+ * - `?` matches any single char except `/`
+ */
+export declare function globToRegExp(glob: string): RegExp;
+/** Parse `Tool(pattern)` into `{tool, argPattern}`. */
+export declare function parseRulePattern(pattern: string): {
+    tool: string;
+    argPattern: string | null;
+};
+/**
+ * Build the input string that the rule's argPattern matches
+ * against. We pick a sensible string projection of args
+ * for the tool at hand. For most tools, that's the joined
+ * string of all arg values. This is intentionally simple —
+ * it lets users write rules like Edit(src/dstar/star.ts)
+ * and have them work.
+ */
+export declare function buildArgString(tool: string, args: Record<string, unknown>): string;
+/** Match a tool call against the rule list (first match wins). */
+export declare function matchPermission(tool: string, args: Record<string, unknown>, rules: PermissionRule[]): PermissionRule | null;
+/**
+ * Top-level check: try a rule match, then fall back to
+ * `decidePolicy` for the legacy policy logic, then apply
+ * the default-ask rule for new tools. Returns a unified
+ * `PermissionCheckResult`.
+ */
+export declare function checkPermission(tool: string, args: Record<string, unknown>, cwd: string, profile: PolicyProfile): PermissionCheckResult;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/agent/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/agent/permissions.ts"],"names":[],"mappings":"AAuBA,OAAO,EAEL,KAAK,aAAa,EAEnB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;AAE1D,MAAM,WAAW,cAAc;IAC7B,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,iBAAiB,CAAC;CACpD;AAID;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAOnD,CAAC;AAEH,8CAA8C;AAC9C,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAUvE;AAED,iCAAiC;AACjC,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,eAAe,GACpB;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CASjC;AAED,+DAA+D;AAC/D,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA6BjD;AAED,uDAAuD;AACvD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAI7F;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAclF;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,KAAK,EAAE,cAAc,EAAE,GACtB,cAAc,GAAG,IAAI,CAevB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,aAAa,GACrB,qBAAqB,CAqCvB"}

package/dist/agent/permissions.js

@@ -0,0 +1,219 @@
+/**
+ * permissions.ts — Pattern-based permission rules.
+ *
+ * Phase 3.5 spec:
+ *   - Each rule is a glob-style pattern over
+ *     `Tool(arg-glob)`. Examples:
+ *       Bash(npm test:star) — any run_command with the
+ *         "npm test..." shell text.
+ *       Edit(src/dstar/star.ts) — any tool whose args.path
+ *         matches the glob.
+ *   - First-match-wins: rules are evaluated top-to-bottom;
+ *     the first match returns the decision.
+ *   - Decision values: allow (auto), ask (default — prompt
+ *     the user), deny (block).
+ *   - Fallback: when no rule matches, call
+ *     decidePolicy(profile, action, detail, allowRules)
+ *     from runtime/policy.ts.
+ *   - Storage: <cwd>/.fixo/permissions.json.
+ *   - Default rules: every tool introduced in Phases 1–3
+ *     defaults to ask if no rule is configured.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { decidePolicy, } from '../runtime/policy.js';
+const PERMISSIONS_PATH_FOR = (cwd) => path.join(cwd, '.fixo', 'permissions.json');
+/**
+ * Tools introduced in Phases 1–3. When the user runs one of
+ * these with no matching rule, we force `ask` (rather than
+ * letting `decidePolicy` quietly return `allow`).
+ */
+export const NEW_TOOL_DEFAULT_ASK = new Set([
+    'str_replace',
+    'glob_files',
+    'todo_write',
+    'run_command_async',
+    'poll_command_status',
+    'kill_command',
+]);
+/** Read `.fixo/permissions.json` from cwd. */
+export function loadPermissionsFile(cwd) {
+    const p = PERMISSIONS_PATH_FOR(cwd);
+    if (!fs.existsSync(p))
+        return null;
+    try {
+        const raw = JSON.parse(fs.readFileSync(p, 'utf-8'));
+        if (raw.version !== 1 || !Array.isArray(raw.rules))
+            return null;
+        return raw;
+    }
+    catch {
+        return null;
+    }
+}
+/** Save the permissions file. */
+export function savePermissionsFile(cwd, file) {
+    const p = PERMISSIONS_PATH_FOR(cwd);
+    try {
+        fs.mkdirSync(path.dirname(p), { recursive: true });
+        fs.writeFileSync(p, JSON.stringify(file, null, 2));
+        return { ok: true };
+    }
+    catch (err) {
+        return { ok: false, error: err.message };
+    }
+}
+/** Get the permissions file path (test-only introspection). */
+export function getPermissionsPath(cwd) {
+    return PERMISSIONS_PATH_FOR(cwd);
+}
+/**
+ * Convert a glob pattern to a RegExp anchored at both ends.
+ * - `*` matches any chars except `/`
+ * - `**` matches any chars including `/`
+ * - `?` matches any single char except `/`
+ */
+export function globToRegExp(glob) {
+    let out = '^';
+    for (let i = 0; i < glob.length; i++) {
+        const c = glob[i];
+        if (c === '*') {
+            if (glob[i + 1] === '*') {
+                // dstar: matches zero or more path segments. If a
+                // slash follows, the slash is optional (so the
+                // pattern matches a/b/c as well as a).
+                if (glob[i + 2] === '/') {
+                    out += '(?:.*/)?';
+                    i += 2;
+                }
+                else {
+                    out += '.*';
+                    i += 1;
+                }
+            }
+            else {
+                out += '[^/]*';
+            }
+        }
+        else if (c === '?') {
+            out += '[^/]';
+        }
+        else if ('.+()[]{}|^$\\'.includes(c)) {
+            out += '\\' + c;
+        }
+        else {
+            out += c;
+        }
+    }
+    out += '$';
+    return new RegExp(out);
+}
+/** Parse `Tool(pattern)` into `{tool, argPattern}`. */
+export function parseRulePattern(pattern) {
+    const m = /^([A-Za-z_][A-Za-z0-9_]*)(?:\((.+)\))?$/.exec(pattern);
+    if (!m)
+        return { tool: pattern, argPattern: null };
+    return { tool: m[1], argPattern: m[2] ?? null };
+}
+/**
+ * Build the input string that the rule's argPattern matches
+ * against. We pick a sensible string projection of args
+ * for the tool at hand. For most tools, that's the joined
+ * string of all arg values. This is intentionally simple —
+ * it lets users write rules like Edit(src/dstar/star.ts)
+ * and have them work.
+ */
+export function buildArgString(tool, args) {
+    // For path-shaped tools, prefer the `path` / `filePath` /
+    // `cmd` field so globs land where users expect.
+    const pathField = typeof args.path === 'string' ? args.path :
+        typeof args.filePath === 'string' ? args.filePath :
+            typeof args.cmd === 'string' ? args.cmd :
+                typeof args.command === 'string' ? args.command :
+                    null;
+    if (pathField !== null)
+        return pathField;
+    return Object.values(args)
+        .filter(v => typeof v === 'string' || typeof v === 'number' || typeof v === 'boolean')
+        .map(v => String(v))
+        .join(' ');
+}
+/** Match a tool call against the rule list (first match wins). */
+export function matchPermission(tool, args, rules) {
+    for (const rule of rules) {
+        const { tool: ruleTool, argPattern } = parseRulePattern(rule.pattern);
+        if (ruleTool !== tool)
+            continue;
+        if (argPattern === null)
+            return rule;
+        const argString = buildArgString(tool, args);
+        try {
+            const re = globToRegExp(argPattern);
+            if (re.test(argString))
+                return rule;
+        }
+        catch {
+            // Malformed glob — skip the rule rather than crashing.
+            continue;
+        }
+    }
+    return null;
+}
+/**
+ * Top-level check: try a rule match, then fall back to
+ * `decidePolicy` for the legacy policy logic, then apply
+ * the default-ask rule for new tools. Returns a unified
+ * `PermissionCheckResult`.
+ */
+export function checkPermission(tool, args, cwd, profile) {
+    const file = loadPermissionsFile(cwd);
+    const rules = file?.rules ?? [];
+    // 1. First-match-wins rule check.
+    const match = matchPermission(tool, args, rules);
+    if (match) {
+        return {
+            decision: match.decision,
+            reason: match.reason ?? `${tool} matched rule ${match.pattern}`,
+            matchedRule: match.pattern,
+            source: 'rule',
+        };
+    }
+    // 2. Default-ask for tools introduced in Phases 1–3.
+    if (NEW_TOOL_DEFAULT_ASK.has(tool)) {
+        return {
+            decision: 'ask',
+            reason: `${tool} is a new tool with no rule — default-ask applies`,
+            matchedRule: null,
+            source: 'default-ask',
+        };
+    }
+    // 3. Fallback to legacy decidePolicy.
+    const action = tool === 'run_command' || tool === 'run_command_async' ? 'command' :
+        MUTATION_TOOLS.has(tool) ? 'write' :
+            'read';
+    const detail = buildArgString(tool, args);
+    const policyDecision = decidePolicy(profile, action, detail);
+    return {
+        decision: policyDecision.allowed
+            ? (policyDecision.needsConfirmation ? 'ask' : 'allow')
+            : 'deny',
+        reason: policyDecision.reason,
+        matchedRule: null,
+        source: 'fallback-policy',
+    };
+}
+const MUTATION_TOOLS = new Set([
+    'write_file',
+    'apply_patch',
+    'replace_range',
+    'insert_after',
+    'rename_file',
+    'delete_file',
+    'create_branch',
+    'commit_changes',
+    'push_branch',
+    'create_pull_request',
+    'str_replace',
+    'todo_write',
+]);
+//# sourceMappingURL=permissions.js.map

package/dist/agent/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/agent/permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAGL,YAAY,GACb,MAAM,sBAAsB,CAAC;AAwB9B,MAAM,oBAAoB,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAE1F;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAC/D,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,mBAAmB;IACnB,qBAAqB;IACrB,cAAc;CACf,CAAC,CAAC;AAEH,8CAA8C;AAC9C,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,CAAC,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAoB,CAAC;QACvE,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChE,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,IAAqB;IAErB,MAAM,CAAC,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACtD,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACxB,kDAAkD;gBAClD,+CAA+C;gBAC/C,uCAAuC;gBACvC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACxB,GAAG,IAAI,UAAU,CAAC;oBAClB,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;qBAAM,CAAC;oBACN,GAAG,IAAI,IAAI,CAAC;oBACZ,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,IAAI,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,GAAG,IAAI,MAAM,CAAC;QAChB,CAAC;aAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,GAAG,IAAI,GAAG,CAAC;IACX,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,CAAC,GAAG,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACnD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAA6B;IACxE,0DAA0D;IAC1D,gDAAgD;IAChD,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACzC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACjD,IAAI,CAAC;IACP,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS,CAAC;SACrF,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SACnB,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,IAA6B,EAC7B,KAAuB;IAEvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACrC,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YACpC,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;YACvD,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,IAA6B,EAC7B,GAAW,EACX,OAAsB;IAEtB,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;IAChC,kCAAkC;IAClC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,iBAAiB,KAAK,CAAC,OAAO,EAAE;YAC/D,WAAW,EAAE,KAAK,CAAC,OAAO;YAC1B,MAAM,EAAE,MAAM;SACf,CAAC;IACJ,CAAC;IACD,qDAAqD;IACrD,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,GAAG,IAAI,mDAAmD;YAClE,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,aAAa;SACtB,CAAC;IACJ,CAAC;IACD,sCAAsC;IACtC,MAAM,MAAM,GACV,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACpE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACpC,MAAM,CAAC;IACT,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAmB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7E,OAAO;QACL,QAAQ,EAAE,cAAc,CAAC,OAAO;YAC9B,CAAC,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YACtD,CAAC,CAAC,MAAM;QACV,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,YAAY;IACZ,aAAa;IACb,eAAe;IACf,cAAc;IACd,aAAa;IACb,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,aAAa;IACb,qBAAqB;IACrB,aAAa;IACb,YAAY;CACb,CAAC,CAAC"}

package/dist/agent/predictive-gate.d.ts

@@ -0,0 +1,69 @@
+/**
+ * predictive-gate.ts — token-aware predictive read gate.
+ *
+ * Phase 4 spec:
+ *   - The existing 15 KiB / 350-line byte gate in `executeReadFile`
+ *     is a cheap pre-filter. It does not know about the *current*
+ *     conversation pressure, so a series of small reads can still
+ *     blow the window.
+ *   - This module adds a second tier: before we read a file, we
+ *     estimate its token cost via `gpt-tokenizer` and compare the
+ *     projected total (conversation + file) against the model's
+ *     effective input limit. If the projected total exceeds the
+ *     configured pct (default 85%), we defer and return a
+ *     directive telling the model to use the surgical alternative.
+ *
+ * Layering:
+ *   read_file dispatch
+ *     ├── existing byte gate  (cheapest)
+ *     └── predictive gate     (this module — fires only when byte gate passes)
+ *
+ * Fail-open: any error in encoding or model resolution allows the
+ * read to proceed. The gate is an optimisation, never a correctness
+ * boundary, so availability beats precision.
+ */
+/** Default fraction of the model window we will let the next read fill. */
+export declare const DEFAULT_PREDICTIVE_BUDGET_PCT = 0.85;
+export interface ReadEstimate {
+    /** File size in bytes (0 if the file is missing). */
+    readonly bytes: number;
+    /** Estimated token cost of reading the full file. */
+    readonly projectedTokens: number;
+    /** True if the file could be tokenised exactly (small enough to fit in sample). */
+    readonly exact: boolean;
+}
+export interface DeferDecision {
+    /** True if the caller should NOT read the file. */
+    readonly defer: boolean;
+    /** Human-readable explanation. */
+    readonly reason: string;
+    /** Projected total tokens (conversation + read). */
+    readonly projectedTotal: number;
+    /** Effective hard cap used for the decision. */
+    readonly hardCap: number;
+}
+/**
+ * Estimate the token cost of reading a file. The function never
+ * throws — on any error it returns `{ bytes: 0, projectedTokens: 0,
+ * exact: false }` and the caller treats that as "no signal, fall
+ * through."
+ */
+export declare function estimateReadCost(absolutePath: string, model: string | undefined | null): ReadEstimate;
+/**
+ * Decide whether the projected read would push the conversation
+ * over the model's effective budget.
+ *
+ * `conversationTokens` is the count *before* this read. `model` is
+ * used to look up the per-model context limit (see
+ * `resolveModelContextLimit`). `budgetPct` lets callers tune the
+ * threshold; passing `1.0` effectively disables the gate.
+ */
+export declare function shouldDeferRead(estimate: ReadEstimate, conversationTokens: number, model: string | undefined | null, budgetPct?: number): DeferDecision;
+/**
+ * Format the synthetic directive returned to the model when the
+ * gate fires. The shape matches the existing
+ * `[Context-Budget Guard]` directive used by the byte gate so the
+ * model's existing routing behaviour applies unchanged.
+ */
+export declare function formatPredictiveGateDirective(relativePath: string, estimate: ReadEstimate, decision: DeferDecision): string;
+//# sourceMappingURL=predictive-gate.d.ts.map

package/dist/agent/predictive-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"predictive-gate.d.ts","sourceRoot":"","sources":["../../src/agent/predictive-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAYH,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAElD,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,mDAAmD;IACnD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,kCAAkC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,gDAAgD;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAC/B,YAAY,CAoCd;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,YAAY,EACtB,kBAAkB,EAAE,MAAM,EAC1B,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAChC,SAAS,GAAE,MAAsC,GAChD,aAAa,CAkBf;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,aAAa,GACtB,MAAM,CASR"}

package/dist/agent/predictive-gate.js

@@ -0,0 +1,128 @@
+/**
+ * predictive-gate.ts — token-aware predictive read gate.
+ *
+ * Phase 4 spec:
+ *   - The existing 15 KiB / 350-line byte gate in `executeReadFile`
+ *     is a cheap pre-filter. It does not know about the *current*
+ *     conversation pressure, so a series of small reads can still
+ *     blow the window.
+ *   - This module adds a second tier: before we read a file, we
+ *     estimate its token cost via `gpt-tokenizer` and compare the
+ *     projected total (conversation + file) against the model's
+ *     effective input limit. If the projected total exceeds the
+ *     configured pct (default 85%), we defer and return a
+ *     directive telling the model to use the surgical alternative.
+ *
+ * Layering:
+ *   read_file dispatch
+ *     ├── existing byte gate  (cheapest)
+ *     └── predictive gate     (this module — fires only when byte gate passes)
+ *
+ * Fail-open: any error in encoding or model resolution allows the
+ * read to proceed. The gate is an optimisation, never a correctness
+ * boundary, so availability beats precision.
+ */
+import fs from 'node:fs';
+import { countTokens } from './tokenizer.js';
+import { resolveModelContextLimit } from './conversation.js';
+/** ~4 bytes per token is the industry-standard rough estimate for English text. */
+const FALLBACK_BYTES_PER_TOKEN = 4;
+/** Cap the sample we tokenise to keep cold reads predictable. */
+const SAMPLE_BYTES = 16 * 1024;
+/** Default fraction of the model window we will let the next read fill. */
+export const DEFAULT_PREDICTIVE_BUDGET_PCT = 0.85;
+/**
+ * Estimate the token cost of reading a file. The function never
+ * throws — on any error it returns `{ bytes: 0, projectedTokens: 0,
+ * exact: false }` and the caller treats that as "no signal, fall
+ * through."
+ */
+export function estimateReadCost(absolutePath, model) {
+    try {
+        const stat = fs.statSync(absolutePath);
+        if (!stat.isFile())
+            return { bytes: 0, projectedTokens: 0, exact: false };
+        const bytes = stat.size;
+        if (bytes === 0)
+            return { bytes: 0, projectedTokens: 0, exact: true };
+        if (bytes <= SAMPLE_BYTES) {
+            // Small enough to tokenise exactly.
+            const text = fs.readFileSync(absolutePath, 'utf-8');
+            try {
+                const projectedTokens = countTokens(text, model);
+                return { bytes, projectedTokens, exact: true };
+            }
+            catch {
+                return { bytes, projectedTokens: Math.ceil(bytes / FALLBACK_BYTES_PER_TOKEN), exact: false };
+            }
+        }
+        // Larger file: tokenise the first SAMPLE_BYTES and extrapolate.
+        const fd = fs.openSync(absolutePath, 'r');
+        try {
+            const buf = Buffer.alloc(SAMPLE_BYTES);
+            const read = fs.readSync(fd, buf, 0, SAMPLE_BYTES, 0);
+            const sample = buf.subarray(0, read).toString('utf-8');
+            const sampleTokens = countTokens(sample, model);
+            const tokensPerByte = sampleTokens / Math.max(read, 1);
+            const projectedTokens = Math.ceil(tokensPerByte * bytes);
+            return { bytes, projectedTokens, exact: false };
+        }
+        catch {
+            return { bytes, projectedTokens: Math.ceil(bytes / FALLBACK_BYTES_PER_TOKEN), exact: false };
+        }
+        finally {
+            try {
+                fs.closeSync(fd);
+            }
+            catch { /* ignore */ }
+        }
+    }
+    catch {
+        return { bytes: 0, projectedTokens: 0, exact: false };
+    }
+}
+/**
+ * Decide whether the projected read would push the conversation
+ * over the model's effective budget.
+ *
+ * `conversationTokens` is the count *before* this read. `model` is
+ * used to look up the per-model context limit (see
+ * `resolveModelContextLimit`). `budgetPct` lets callers tune the
+ * threshold; passing `1.0` effectively disables the gate.
+ */
+export function shouldDeferRead(estimate, conversationTokens, model, budgetPct = DEFAULT_PREDICTIVE_BUDGET_PCT) {
+    const modelLimit = resolveModelContextLimit(model);
+    // budgetPct is sanitised: clamp to (0, 1].
+    const pct = !Number.isFinite(budgetPct) || budgetPct <= 0
+        ? DEFAULT_PREDICTIVE_BUDGET_PCT
+        : Math.min(budgetPct, 1);
+    const hardCap = Math.floor(modelLimit * pct);
+    const projectedTotal = Math.max(0, conversationTokens) + Math.max(0, estimate.projectedTokens);
+    if (projectedTotal <= hardCap) {
+        return { defer: false, reason: 'within budget', projectedTotal, hardCap };
+    }
+    const overshoot = projectedTotal - hardCap;
+    return {
+        defer: true,
+        reason: `predicted ${projectedTotal.toLocaleString()} tokens would exceed budget ${hardCap.toLocaleString()} by ${overshoot.toLocaleString()}`,
+        projectedTotal,
+        hardCap,
+    };
+}
+/**
+ * Format the synthetic directive returned to the model when the
+ * gate fires. The shape matches the existing
+ * `[Context-Budget Guard]` directive used by the byte gate so the
+ * model's existing routing behaviour applies unchanged.
+ */
+export function formatPredictiveGateDirective(relativePath, estimate, decision) {
+    return [
+        `[Context-Budget Guard] read_file ${relativePath} deferred.`,
+        `  bytes=${estimate.bytes.toLocaleString()} projected_tokens=${estimate.projectedTokens.toLocaleString()}${estimate.exact ? '' : ' (estimated)'}`,
+        `  ${decision.reason}.`,
+        `  → Use extract_symbols or extract_imports to scan the file's surface, then`,
+        `    read_file with explicit lines, or use str_replace to edit without`,
+        `    pulling the full file into context.`,
+    ].join('\n');
+}
+//# sourceMappingURL=predictive-gate.js.map

package/dist/agent/predictive-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"predictive-gate.js","sourceRoot":"","sources":["../../src/agent/predictive-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,mFAAmF;AACnF,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAEnC,iEAAiE;AACjE,MAAM,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/B,2EAA2E;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAsBlD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,YAAoB,EACpB,KAAgC;IAEhC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC;QACxB,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAEtE,IAAI,KAAK,IAAI,YAAY,EAAE,CAAC;YAC1B,oCAAoC;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,eAAe,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACjD,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,wBAAwB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC/F,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACvC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACvD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,wBAAwB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC/F,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACxD,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAsB,EACtB,kBAA0B,EAC1B,KAAgC,EAChC,YAAoB,6BAA6B;IAEjD,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACnD,2CAA2C;IAC3C,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;QACvD,CAAC,CAAC,6BAA6B;QAC/B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;IAC7C,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC/F,IAAI,cAAc,IAAI,OAAO,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,SAAS,GAAG,cAAc,GAAG,OAAO,CAAC;IAC3C,OAAO;QACL,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,aAAa,cAAc,CAAC,cAAc,EAAE,+BAA+B,OAAO,CAAC,cAAc,EAAE,OAAO,SAAS,CAAC,cAAc,EAAE,EAAE;QAC9I,cAAc;QACd,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,YAAoB,EACpB,QAAsB,EACtB,QAAuB;IAEvB,OAAO;QACL,oCAAoC,YAAY,YAAY;QAC5D,WAAW,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,qBAAqB,QAAQ,CAAC,eAAe,CAAC,cAAc,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE;QACjJ,KAAK,QAAQ,CAAC,MAAM,GAAG;QACvB,6EAA6E;QAC7E,uEAAuE;QACvE,yCAAyC;KAC1C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}