github-router 0.3.295 → 0.3.302

package/dist/hooks.mjs

@@ -10921,6 +10921,145 @@ var init_harness_parse = __esmMin((() => {
 	STATIC_IDS = /* @__PURE__ */ new Set(["typecheck", "lint"]);
 }));
 //#endregion
+//#region src/lib/state.ts
+var DEFAULT_LAUNCH_ID, state;
+var init_state = __esmMin((() => {
+	DEFAULT_LAUNCH_ID = "__default__";
+	state = {
+		accountType: "enterprise",
+		copilotTokenGeneration: 0,
+		manualApprove: false,
+		rateLimitWait: false,
+		showToken: false,
+		extendedBetas: false,
+		browseEnabled: false,
+		fleetEnabled: false,
+		agentsEnabled: false,
+		powerBrowseEnabled: false,
+		humanlikeForce: "auto",
+		sessionId: randomUUID(),
+		machineId: randomBytes(32).toString("hex"),
+		launchRegistry: /* @__PURE__ */ new Map()
+	};
+	Object.defineProperty(state, "peerMcpNonce", {
+		enumerable: true,
+		configurable: true,
+		get() {
+			return state.launchRegistry.get(DEFAULT_LAUNCH_ID)?.nonce;
+		},
+		set(value) {
+			if (value === void 0) {
+				state.launchRegistry.delete(DEFAULT_LAUNCH_ID);
+				return;
+			}
+			const existing = state.launchRegistry.get(DEFAULT_LAUNCH_ID);
+			state.launchRegistry.set(DEFAULT_LAUNCH_ID, {
+				launchId: DEFAULT_LAUNCH_ID,
+				nonce: value,
+				secret: existing?.secret ?? "",
+				profileId: existing?.profileId ?? "standard",
+				allowedGroups: existing?.allowedGroups,
+				allowedPersonas: existing?.allowedPersonas,
+				createdAt: existing?.createdAt ?? Date.now()
+			});
+		}
+	});
+})), FAST_PROFILE_MODELS, FAST_PROFILE_NATIVE_AGENT_NAMES, FAST_PROFILE_ADVISOR_MODEL, FAST_PROFILE_DELEGATION_GRAPH;
+var init_fast_profile_contract = __esmMin((() => {
+	FAST_PROFILE_MODELS = Object.freeze({
+		luna: "gpt-5.6-luna",
+		reviewer: "grok-4.6",
+		planner: "gpt-5.6-sol",
+		critic: "gemini-3.7-flash",
+		oracle: "claude-opus-5"
+	});
+	FAST_PROFILE_NATIVE_AGENT_NAMES = [
+		"Explore",
+		"implementer",
+		"reviewer",
+		"planner",
+		"critic"
+	];
+	Object.freeze({
+		Explore: FAST_PROFILE_MODELS.luna,
+		implementer: FAST_PROFILE_MODELS.luna,
+		reviewer: FAST_PROFILE_MODELS.reviewer,
+		planner: FAST_PROFILE_MODELS.planner,
+		critic: FAST_PROFILE_MODELS.critic
+	});
+	Object.freeze({
+		Explore: "high",
+		implementer: "max",
+		reviewer: "medium",
+		planner: "high",
+		critic: "medium"
+	});
+	FAST_PROFILE_ADVISOR_MODEL = FAST_PROFILE_MODELS.critic;
+	`${FAST_PROFILE_ADVISOR_MODEL}`;
+	FAST_PROFILE_MODELS.oracle;
+	FAST_PROFILE_DELEGATION_GRAPH = Object.freeze({
+		Explore: Object.freeze([]),
+		implementer: Object.freeze(["reviewer", "critic"]),
+		reviewer: Object.freeze([]),
+		planner: Object.freeze([
+			"reviewer",
+			"Explore",
+			"critic"
+		]),
+		critic: Object.freeze([])
+	});
+})), MAX_PROFILE_MODELS, MAX_PROFILE_NATIVE_AGENT_NAMES, MAX_PROFILE_NATIVE_MODELS;
+var init_max_profile_contract = __esmMin((() => {
+	init_state();
+	MAX_PROFILE_MODELS = Object.freeze({
+		sol: "gpt-5.6-sol",
+		luna: "gpt-5.6-luna",
+		gemini: "gemini-3.7-flash",
+		grok: "grok-4.6",
+		opus: "claude-opus-5"
+	});
+	MAX_PROFILE_NATIVE_AGENT_NAMES = [
+		"Explore",
+		"Plan",
+		"general-purpose",
+		"implementer",
+		"reviewer",
+		"brainstorm",
+		"peer-review-coordinator"
+	];
+	Object.freeze({
+		Explore: "high",
+		Plan: "high",
+		"general-purpose": "max",
+		implementer: "high",
+		reviewer: "high",
+		brainstorm: "medium",
+		"peer-review-coordinator": "max"
+	});
+	MAX_PROFILE_NATIVE_MODELS = Object.freeze({
+		Explore: MAX_PROFILE_MODELS.luna,
+		Plan: MAX_PROFILE_MODELS.sol,
+		"general-purpose": MAX_PROFILE_MODELS.luna,
+		implementer: MAX_PROFILE_MODELS.gemini,
+		reviewer: MAX_PROFILE_MODELS.gemini,
+		brainstorm: MAX_PROFILE_MODELS.grok,
+		"peer-review-coordinator": MAX_PROFILE_MODELS.luna
+	});
+	MAX_PROFILE_MODELS.sol;
+	MAX_PROFILE_MODELS.opus;
+	Object.freeze([
+		MAX_PROFILE_MODELS.luna,
+		MAX_PROFILE_MODELS.gemini,
+		MAX_PROFILE_MODELS.grok
+	]);
+	Object.freeze([
+		MAX_PROFILE_MODELS.sol,
+		MAX_PROFILE_MODELS.luna,
+		MAX_PROFILE_MODELS.gemini,
+		MAX_PROFILE_MODELS.opus
+	]);
+}));
+//#endregion
 //#region node_modules/undici/lib/core/symbols.js
 var require_symbols = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = {
@@ -37729,7 +37868,7 @@ var internal_first_mate_guard_exports = /* @__PURE__ */ __exportAll({
 	buildFirstMateGuardHookCommand: () => buildFirstMateGuardHookCommand,
 	internalFirstMateGuard: () => internalFirstMateGuard
 });
-function readStdinSync$1() {
+function readStdinSync$2() {
 	try {
 		return readFileSync(0, "utf8");
 	} catch {
@@ -37755,7 +37894,7 @@ var init_internal_first_mate_guard = __esmMin((() => {
 			let hookInput;
 			let parsed;
 			try {
-				const payload = JSON.parse(readStdinSync$1());
+				const payload = JSON.parse(readStdinSync$2());
 				if (typeof payload.tool_name === "string") toolName = payload.tool_name;
 				if (typeof payload.agent_type === "string") hookInput = { agent_type: payload.agent_type };
 				parsed = true;
@@ -37910,6 +38049,8 @@ function decideFastDispatchGuard(stdin) {
 	const targetValue = targetResult.value;
 	if (!targetValue || !FAST_NATIVE_AGENT_SET.has(targetValue)) return deny(`fast dispatch denied: ${toolName} target must be one of ${FAST_NATIVE_AGENT_NAMES.join(", ")}`);
 	const target = targetValue;
+	const updatedInput = { ...payload.tool_input };
+	delete updatedInput.model;
 	const callerType = resolveAliasedString(payload, ["agent_type", "agentType"]);
 	const callerId = resolveAliasedString(payload, ["agent_id", "agentId"]);
 	const parentMarker = resolveAliasedString(payload, ["parent_tool_use_id", "parentToolUseId"]);
@@ -37932,6 +38073,7 @@ function decideFastDispatchGuard(stdin) {
 			allowed: true,
 			caller: "lead",
 			target,
+			updatedInput,
 			verdict: "allow"
 		};
 	}
@@ -37942,9 +38084,18 @@ function decideFastDispatchGuard(stdin) {
 		allowed: true,
 		caller,
 		target,
+		updatedInput,
 		verdict: "allow"
 	};
 }
+/** JSON response consumed by Claude Code for an allowed, model-pinned dispatch. */
+function fastDispatchAllowOutput(updatedInput) {
+	return JSON.stringify({ hookSpecificOutput: {
+		hookEventName: "PreToolUse",
+		permissionDecision: "allow",
+		updatedInput
+	} });
+}
 /** JSON response consumed by Claude Code's PreToolUse hook protocol. */
 function fastDispatchDenyOutput(reason) {
 	return JSON.stringify({ hookSpecificOutput: {
@@ -37955,24 +38106,15 @@ function fastDispatchDenyOutput(reason) {
 }
 var FAST_NATIVE_AGENT_NAMES, FAST_NATIVE_AGENT_SET, FAST_DISPATCH_GRAPH;
 var init_fast_dispatch_acl = __esmMin((() => {
-	FAST_NATIVE_AGENT_NAMES = [
-		"scout",
-		"implementer",
-		"reviewer",
-		"planner",
-		"critic"
-	];
+	init_fast_profile_contract();
+	FAST_NATIVE_AGENT_NAMES = FAST_PROFILE_NATIVE_AGENT_NAMES;
 	FAST_NATIVE_AGENT_SET = new Set(FAST_NATIVE_AGENT_NAMES);
 	FAST_DISPATCH_GRAPH = Object.freeze({
-		scout: /* @__PURE__ */ new Set(),
-		implementer: /* @__PURE__ */ new Set(["reviewer", "critic"]),
-		reviewer: /* @__PURE__ */ new Set(),
-		planner: /* @__PURE__ */ new Set([
-			"reviewer",
-			"scout",
-			"critic"
-		]),
-		critic: /* @__PURE__ */ new Set()
+		Explore: new Set(FAST_PROFILE_DELEGATION_GRAPH.Explore),
+		implementer: new Set(FAST_PROFILE_DELEGATION_GRAPH.implementer),
+		reviewer: new Set(FAST_PROFILE_DELEGATION_GRAPH.reviewer),
+		planner: new Set(FAST_PROFILE_DELEGATION_GRAPH.planner),
+		critic: new Set(FAST_PROFILE_DELEGATION_GRAPH.critic)
 	});
 }));
 //#endregion
@@ -37981,7 +38123,7 @@ var internal_fast_dispatch_guard_exports = /* @__PURE__ */ __exportAll({
 	buildFastDispatchGuardHookCommand: () => buildFastDispatchGuardHookCommand,
 	internalFastDispatchGuard: () => internalFastDispatchGuard
 });
-function readStdinSync() {
+function readStdinSync$1() {
 	try {
 		if (process.stdin.isTTY) return "";
 		return readFileSync(0, "utf8");
@@ -38004,8 +38146,195 @@ var init_internal_fast_dispatch_guard = __esmMin((() => {
 			description: "Internal: PreToolUse guard enforcing the fast-profile native Task/Agent ACL."
 		},
 		run() {
-			const decision = decideFastDispatchGuard(readStdinSync());
+			const decision = decideFastDispatchGuard(readStdinSync$1());
 			if (!decision.allowed && decision.reason) process.stdout.write(fastDispatchDenyOutput(decision.reason));
+			else if (decision.verdict === "allow" && decision.updatedInput) process.stdout.write(fastDispatchAllowOutput(decision.updatedInput));
+			process.exitCode = 0;
+		}
+	});
+}));
+//#endregion
+//#region src/lib/max-dispatch-acl.ts
+function isMaxAgentSchemaModelAlias(model) {
+	if (typeof model !== "string") return false;
+	return MAX_AGENT_SCHEMA_MODEL_ALIAS_SET.has(baseModel(model.trim()).toLowerCase());
+}
+function stringField(input, ...keys) {
+	const values = keys.filter((key) => Object.prototype.hasOwnProperty.call(input, key)).map((key) => input[key]).filter((value) => value !== void 0 && value !== null);
+	if (values.length === 0) return void 0;
+	if (values.some((value) => typeof value !== "string" || value.trim().length === 0)) return void 0;
+	const distinct = [...new Set(values.map((value) => value.trim()))];
+	return distinct.length === 1 ? distinct[0] : void 0;
+}
+function baseModel(model) {
+	return model.replace(/(?:\[1m\])+$/i, "");
+}
+function normalizeMaxDispatchModel(model) {
+	if (typeof model !== "string" || model.trim().length === 0) return void 0;
+	const base = baseModel(model.trim());
+	return MAX_ALLOWED_MODEL_BASES.has(base) ? base === "grok-4.6" ? base : `${base}[1m]` : void 0;
+}
+function normalizeMaxDispatchEffort(model, effort) {
+	if (effort === void 0 || effort === null) return void 0;
+	if (typeof effort !== "string") return void 0;
+	if ((model === "gpt-5.6-sol" ? [
+		"high",
+		"xhigh",
+		"max"
+	] : model === "gpt-5.6-luna" ? [
+		"none",
+		"low",
+		"medium",
+		"high",
+		"xhigh",
+		"max"
+	] : model === "grok-4.6" || model === "gemini-3.7-flash" ? [
+		"low",
+		"medium",
+		"high"
+	] : []).includes(effort)) return effort;
+}
+/**
+* Native max Task/Agent ACL. Role frontmatter owns the fixed model. Required
+* public-schema aliases are stripped as transport placeholders; a client that
+* can express custom ids may override only to Luna, Gemini, or Grok with a
+* live-ladder effort. Sol/Codex/unknown/private ids are rejected. The lead may
+* target any emitted max role; role-to-role edges are unrestricted here.
+*/
+function decideMaxDispatchGuard(stdin) {
+	let parsed;
+	try {
+		parsed = typeof stdin === "string" ? JSON.parse(stdin) : stdin;
+	} catch {
+		return {
+			allowed: false,
+			reason: "max dispatch denied: malformed hook payload",
+			verdict: "deny"
+		};
+	}
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {
+		allowed: false,
+		reason: "max dispatch denied: hook payload must be an object",
+		verdict: "deny"
+	};
+	const payload = parsed;
+	if (typeof payload.tool_name !== "string") return {
+		allowed: false,
+		reason: "max dispatch denied: hook payload has no tool_name",
+		verdict: "deny"
+	};
+	if (!/^(Task|Agent)$/.test(payload.tool_name)) return {
+		allowed: true,
+		verdict: "allow-non-dispatch"
+	};
+	if (!payload.tool_input || typeof payload.tool_input !== "object" || Array.isArray(payload.tool_input)) return {
+		allowed: false,
+		reason: `max dispatch denied: ${payload.tool_name} payload has malformed tool_input`,
+		verdict: "deny"
+	};
+	const toolInput = payload.tool_input;
+	const target = stringField(toolInput, "subagent_type", "subagentType");
+	if (!target || !MAX_NATIVE_AGENT_SET.has(target)) return {
+		allowed: false,
+		reason: `max dispatch denied: target must be one of ${[...MAX_PROFILE_NATIVE_AGENT_NAMES, MAX_BROWSE_DISPATCH_AGENT].join(", ")}`,
+		verdict: "deny"
+	};
+	const nativeTarget = target;
+	const modelValue = toolInput.model;
+	const schemaAlias = isMaxAgentSchemaModelAlias(modelValue);
+	const normalizedModel = modelValue === void 0 || schemaAlias ? void 0 : normalizeMaxDispatchModel(modelValue);
+	if (modelValue !== void 0 && !schemaAlias && !normalizedModel) return {
+		allowed: false,
+		reason: "max dispatch denied: model must be a Claude Code Agent schema alias, Luna[1m], Gemini 3.7 Flash[1m], or bare Grok 4.6",
+		target,
+		verdict: "deny"
+	};
+	const requestedEffort = toolInput.thinking ?? toolInput.effort;
+	const effort = normalizeMaxDispatchEffort(normalizedModel ? baseModel(normalizedModel) : nativeTarget === "worker-browse" ? "gpt-5.6-luna" : MAX_PROFILE_NATIVE_MODELS[nativeTarget], requestedEffort);
+	if ((toolInput.thinking !== void 0 || toolInput.effort !== void 0) && !effort) return {
+		allowed: false,
+		reason: "max dispatch denied: reasoning override is not supported by the selected model",
+		target,
+		verdict: "deny"
+	};
+	const updatedInput = { ...toolInput };
+	if (normalizedModel) updatedInput.model = normalizedModel;
+	else delete updatedInput.model;
+	if (effort) if (toolInput.thinking !== void 0) updatedInput.thinking = effort;
+	else updatedInput.effort = effort;
+	if (toolInput.thinking !== void 0 && toolInput.effort !== void 0) delete updatedInput.effort;
+	if (toolInput.model === void 0 && normalizedModel === void 0) delete updatedInput.model;
+	return {
+		allowed: true,
+		target,
+		effort,
+		updatedInput,
+		verdict: "allow"
+	};
+}
+function maxDispatchAllowOutput(updatedInput) {
+	return JSON.stringify({ hookSpecificOutput: {
+		hookEventName: "PreToolUse",
+		permissionDecision: "allow",
+		updatedInput
+	} });
+}
+function maxDispatchDenyOutput(reason) {
+	return JSON.stringify({ hookSpecificOutput: {
+		hookEventName: "PreToolUse",
+		permissionDecision: "deny",
+		permissionDecisionReason: reason
+	} });
+}
+var MAX_BROWSE_DISPATCH_AGENT, MAX_NATIVE_AGENT_SET, MAX_ALLOWED_MODEL_BASES, MAX_AGENT_SCHEMA_MODEL_ALIASES, MAX_AGENT_SCHEMA_MODEL_ALIAS_SET;
+var init_max_dispatch_acl = __esmMin((() => {
+	init_max_profile_contract();
+	MAX_BROWSE_DISPATCH_AGENT = "worker-browse";
+	MAX_NATIVE_AGENT_SET = /* @__PURE__ */ new Set([...MAX_PROFILE_NATIVE_AGENT_NAMES, MAX_BROWSE_DISPATCH_AGENT]);
+	MAX_ALLOWED_MODEL_BASES = /* @__PURE__ */ new Set([
+		"gpt-5.6-luna",
+		"gemini-3.7-flash",
+		"grok-4.6"
+	]);
+	MAX_AGENT_SCHEMA_MODEL_ALIASES = Object.freeze([
+		"sonnet",
+		"opus",
+		"haiku",
+		"fable"
+	]);
+	MAX_AGENT_SCHEMA_MODEL_ALIAS_SET = new Set(MAX_AGENT_SCHEMA_MODEL_ALIASES);
+}));
+//#endregion
+//#region src/internal-max-dispatch-guard.ts
+var internal_max_dispatch_guard_exports = /* @__PURE__ */ __exportAll({
+	buildMaxDispatchGuardHookCommand: () => buildMaxDispatchGuardHookCommand,
+	internalMaxDispatchGuard: () => internalMaxDispatchGuard
+});
+function readStdinSync() {
+	try {
+		if (process.stdin.isTTY) return "";
+		return readFileSync(0, "utf8");
+	} catch {
+		return "";
+	}
+}
+function buildMaxDispatchGuardHookCommand(invocation) {
+	return buildSelfCommand(invocation, "internal-max-dispatch-guard");
+}
+var internalMaxDispatchGuard;
+var init_internal_max_dispatch_guard = __esmMin((() => {
+	init_dist$1();
+	init_max_dispatch_acl();
+	init_self_invocation();
+	internalMaxDispatchGuard = defineCommand({
+		meta: {
+			name: "internal-max-dispatch-guard",
+			description: "Internal: PreToolUse guard enforcing the max-profile native Task/Agent policy."
+		},
+		run() {
+			const decision = decideMaxDispatchGuard(readStdinSync());
+			if (!decision.allowed && decision.reason) process.stdout.write(maxDispatchDenyOutput(decision.reason));
+			else if (decision.verdict === "allow" && decision.updatedInput) process.stdout.write(maxDispatchAllowOutput(decision.updatedInput));
 			process.exitCode = 0;
 		}
 	});
@@ -38040,7 +38369,8 @@ await runMain(defineCommand({
 		"internal-artifact-open": () => Promise.resolve().then(() => (init_internal_artifact_open(), internal_artifact_open_exports)).then((m) => m.internalArtifactOpen),
 		"internal-first-mate-guard": () => Promise.resolve().then(() => (init_internal_first_mate_guard(), internal_first_mate_guard_exports)).then((m) => m.internalFirstMateGuard),
 		"internal-worker-guard": () => Promise.resolve().then(() => (init_internal_worker_guard(), internal_worker_guard_exports)).then((m) => m.internalWorkerGuard),
-		"internal-fast-dispatch-guard": () => Promise.resolve().then(() => (init_internal_fast_dispatch_guard(), internal_fast_dispatch_guard_exports)).then((m) => m.internalFastDispatchGuard)
+		"internal-fast-dispatch-guard": () => Promise.resolve().then(() => (init_internal_fast_dispatch_guard(), internal_fast_dispatch_guard_exports)).then((m) => m.internalFastDispatchGuard),
+		"internal-max-dispatch-guard": () => Promise.resolve().then(() => (init_internal_max_dispatch_guard(), internal_max_dispatch_guard_exports)).then((m) => m.internalMaxDispatchGuard)
 	}
 }), { rawArgs: argv });
 //#endregion

package/dist/hooks.sha256

@@ -1 +1 @@
-682cf2947356f7e83c63a17d36e7fbc2528eda2f571c925a4622185658a55830
+a55923869f120eca4478614839bc65955717b68820314ab228c3e0082cf77e9c

package/dist/{internal-artifact-open-D6tKMg8v.js → internal-artifact-open-DRSxShAW.js}

@@ -1,5 +1,5 @@
 import { t as ArtifactClient } from "./client-CQMfroGV.js";
-import { a as isSubagentContext } from "./stop-gate-policy-DMr3KVmw.js";
+import { a as isSubagentContext } from "./stop-gate-policy-zhzRIj6G.js";
 import { defineCommand } from "citty";
 import { readFileSync, realpathSync, writeFileSync } from "node:fs";
 import path from "node:path";
@@ -316,4 +316,4 @@ const internalArtifactOpen = defineCommand({
 //#endregion
 export { internalArtifactOpen };
 
-//# sourceMappingURL=internal-artifact-open-D6tKMg8v.js.map
+//# sourceMappingURL=internal-artifact-open-DRSxShAW.js.map

package/dist/{internal-artifact-open-D6tKMg8v.js.map → internal-artifact-open-DRSxShAW.js.map}

@@ -1 +1 @@
-{"version":3,"file":"internal-artifact-open-D6tKMg8v.js","names":[],"sources":["../src/lib/artifact/plan-html.ts","../src/internal-artifact-open.ts"],"sourcesContent":["/**\n * Render a plan's markdown into a self-contained, styled HTML document for the\n * ai-or-die Artifact panel. HTML is the canonical review artifact (lavish's\n * model); converting here means the hands-off auto-open shows a formatted,\n * annotatable page instead of raw markdown.\n *\n * Security: the iframe ai-or-die serves this into runs with\n * `allow-scripts allow-same-origin`, so a `<script>` smuggled into the plan\n * markdown could read the per-session asset token. Two defenses:\n *   1. marked is configured to ESCAPE raw HTML tokens (render as visible text).\n *   2. `link`/`image` hrefs with script-bearing schemes (javascript:, vbscript:,\n *      non-image data:) are neutralised before rendering.\n * No separate sanitizer/dep needed.\n */\nimport { Marked } from \"marked\"\n\nfunction escapeHtml(s: string): string {\n  return s\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\")\n}\n\n/** Decode the HTML character references a browser would resolve in an attribute\n *  value, so an entity-obfuscated scheme (`javascript&colon;`, `j&#97;vascript:`)\n *  cannot slip past the scheme check below. Numeric refs cover any letter; the\n *  small named map covers the scheme-relevant punctuation. */\nconst NAMED_REFS: Record<string, string> = {\n  colon: \":\", tab: \"\\t\", newline: \"\\n\", sol: \"/\", semi: \";\", amp: \"&\", lpar: \"(\", rpar: \")\",\n}\nfunction decodeEntities(s: string): string {\n  return s.replace(/&(#[xX][0-9a-fA-F]+|#[0-9]+|[a-zA-Z]+);?/g, (m, body: string) => {\n    if (body[0] === \"#\") {\n      const code = body[1] === \"x\" || body[1] === \"X\"\n        ? Number.parseInt(body.slice(2), 16)\n        : Number.parseInt(body.slice(1), 10)\n      return Number.isFinite(code) && code > 0 && code <= 0x10ffff ? String.fromCodePoint(code) : m\n    }\n    return NAMED_REFS[body.toLowerCase()] ?? m\n  })\n}\n\n/** Block script-bearing URL schemes (defense-in-depth on top of HTML escaping). */\nfunction isDangerousUrl(url: string, isImage: boolean): boolean {\n  // Decode entities first (a browser resolves them in href), then drop ASCII\n  // control chars + spaces (code <= 0x20) a browser ignores inside a scheme.\n  const v = Array.from(decodeEntities(url)).filter((c) => c.charCodeAt(0) > 0x20).join(\"\").toLowerCase()\n  if (v.startsWith(\"javascript:\") || v.startsWith(\"vbscript:\")) return true\n  if (v.startsWith(\"data:\")) {\n    // Allow only raster image data URIs (and only for <img>); SVG can script.\n    return !(isImage && v.startsWith(\"data:image/\") && !v.startsWith(\"data:image/svg\"))\n  }\n  return false\n}\n\n/** A marked instance that escapes raw HTML (raw markup never becomes live). */\nfunction makeMarked(): Marked {\n  const m = new Marked({ gfm: true, breaks: false })\n  m.use({\n    renderer: {\n      // Raw HTML in the source is rendered as escaped text, never live markup.\n      html(token: unknown): string {\n        const text = typeof token === \"string\" ? token : ((token as { text?: string }).text ?? \"\")\n        return escapeHtml(text)\n      },\n    },\n  })\n  return m\n}\n\ninterface MdToken {\n  type?: string\n  href?: string\n  tokens?: MdToken[]\n  items?: MdToken[]\n  header?: Array<{ tokens?: MdToken[] }>\n  rows?: Array<Array<{ tokens?: MdToken[] }>>\n}\n\n/**\n * Recursively neutralise script-bearing link/image hrefs in the lexed token tree.\n * Done as an explicit walk (not marked's `walkTokens` hook) because we render via\n * the low-level `lexer`+`parser` split, which does not run registered walkTokens.\n */\nfunction neutralizeUrls(tokens: MdToken[]): void {\n  for (const t of tokens) {\n    if ((t.type === \"link\" || t.type === \"image\") && typeof t.href === \"string\") {\n      if (isDangerousUrl(t.href, t.type === \"image\")) t.href = \"#\"\n    }\n    if (t.tokens) neutralizeUrls(t.tokens)\n    if (t.items) neutralizeUrls(t.items)\n    if (t.header) for (const cell of t.header) if (cell.tokens) neutralizeUrls(cell.tokens)\n    if (t.rows) for (const row of t.rows) for (const cell of row) if (cell.tokens) neutralizeUrls(cell.tokens)\n  }\n}\n\n/** Add `data-source-line=\"N\"` to the first opening tag of a rendered block. */\nfunction tagSourceLine(html: string, line: number): string {\n  return html.replace(/^(\\s*)<([a-zA-Z][\\w-]*)/, `$1<$2 data-source-line=\"${line}\"`)\n}\n\n/**\n * Render markdown to inner HTML, tagging each top-level block with its 1-based\n * source line so an annotation in the panel can map back to a plan line.\n */\nexport function renderMarkdownBody(source: string): string {\n  const m = makeMarked()\n  let tokens: Array<{ raw?: string }>\n  try {\n    tokens = m.lexer(source) as Array<{ raw?: string }>\n  } catch {\n    // Lexing should not fail, but never throw out of the hook path.\n    return `<pre>${escapeHtml(source)}</pre>`\n  }\n  neutralizeUrls(tokens as MdToken[])\n  let line = 1\n  let out = \"\"\n  for (const tok of tokens) {\n    let html: string\n    try {\n      html = m.parser([tok] as Parameters<typeof m.parser>[0])\n    } catch {\n      html = \"\"\n    }\n    if (html.trim()) out += tagSourceLine(html, line)\n    line += (tok.raw?.match(/\\n/g)?.length ?? 0)\n  }\n  return out || `<pre>${escapeHtml(source)}</pre>`\n}\n\n/**\n * Wrap rendered markdown in a complete, self-contained HTML document with\n * readable typography (works even before ai-or-die injects its annotation SDK).\n */\nexport function renderPlanHtml(source: string, title = \"Plan\"): string {\n  return wrapArtifactDocument(renderMarkdownBody(source), title)\n}\n\nconst BASE_STYLE = `  :root {\n    --bg: #0f1115; --fg: #f7f3ea; --muted: #aeb6c6; --border: #2a2f3a;\n    --accent: #f4c95d; --code-bg: #171a21;\n    --serif: 'Iowan Old Style', Georgia, 'Times New Roman', serif;\n    --sans: ui-sans-serif, system-ui, -apple-system, 'Segoe UI', sans-serif;\n    --mono: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  }\n  * { box-sizing: border-box; }\n  html, body { margin: 0; background: var(--bg); color: var(--fg); }\n  body { font-family: var(--serif); font-size: 16px; line-height: 1.6;\n    padding: 32px clamp(16px, 5vw, 56px); }\n  main { max-width: 78ch; margin: 0 auto; }\n  h1, h2, h3, h4 { font-family: var(--sans); line-height: 1.25; margin: 1.6em 0 0.5em; }\n  h1 { font-size: 1.9em; } h2 { font-size: 1.45em; padding-bottom: 0.2em;\n    border-bottom: 1px solid var(--border); } h3 { font-size: 1.2em; }\n  p, li { color: var(--fg); }\n  a { color: var(--accent); }\n  code { font-family: var(--mono); font-size: 0.9em; background: var(--code-bg);\n    padding: 0.12em 0.35em; border-radius: 5px; }\n  pre { background: var(--code-bg); border: 1px solid var(--border); border-radius: 8px;\n    padding: 12px 14px; overflow: auto; }\n  pre code { background: none; padding: 0; }\n  blockquote { margin: 1em 0; padding: 0.2em 1em; border-left: 3px solid var(--accent);\n    color: var(--muted); }\n  table { border-collapse: collapse; width: 100%; margin: 1em 0; font-family: var(--sans);\n    font-size: 0.95em; }\n  th, td { border: 1px solid var(--border); padding: 6px 10px; text-align: left; }\n  th { background: var(--code-bg); }\n  hr { border: 0; border-top: 1px solid var(--border); margin: 1.5em 0; }\n  ul, ol { padding-left: 1.4em; }`\n\nconst INTERACTIVE_STYLE = `\n  .aod-group { margin: 1.4em 0; padding: 14px 16px; border: 1px solid var(--border);\n    border-radius: 10px; background: var(--code-bg); }\n  .aod-prompt { font-family: var(--sans); font-weight: 600; margin: 0 0 0.6em; }\n  .aod-options { display: flex; flex-wrap: wrap; gap: 8px; }\n  .aod-multi-select .aod-options { flex-direction: column; gap: 6px; }\n  .aod-action, .aod-submit { font-family: var(--sans); font-size: 0.95em; font-weight: 600;\n    cursor: pointer; border: 1px solid var(--border); border-radius: 8px;\n    padding: 8px 12px; background: var(--bg); color: var(--fg); }\n  .aod-action:hover, .aod-submit:hover { border-color: var(--accent); }\n  .aod-submit { margin-top: 10px; background: var(--accent); color: #17130a; border-color: var(--accent); }\n  .aod-check { display: flex; align-items: center; gap: 8px; font-family: var(--sans); cursor: pointer; }\n  .aod-steps { list-style: decimal; }\n  .aod-step { margin: 0.5em 0; }\n  .aod-step-actions { display: inline-flex; gap: 6px; margin-left: 8px; }`\n\n/**\n * Wrap rendered inner HTML in the self-contained document shell. `extraStyle` is\n * appended to the inline stylesheet so the interactive variant can add its own\n * rules without a second `<style>` block. Static callers pass \"\" (default), so\n * the static document is byte-identical to the pre-refactor output.\n */\nfunction wrapArtifactDocument(body: string, title: string, extraStyle = \"\"): string {\n  return `<!doctype html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>${escapeHtml(title)}</title>\n<style>\n${BASE_STYLE}${extraStyle}\n</style>\n</head>\n<body>\n<main>\n${body}\n</main>\n</body>\n</html>\n`\n}\n\n/* -------------------------------------------------------------------------- */\n/* Interactive artifacts (contract v2.2 §4: declarative data-aod-* vocab)      */\n/* -------------------------------------------------------------------------- */\n\nexport interface InteractiveOption {\n  /** Stable id echoed back as `elementId` in the action event. Required. */\n  elementId: string\n  /** Human-visible label. */\n  label: string\n  /** Optional value echoed as `data-aod-value` (checkbox submits use \"true\"/\"false\"). */\n  value?: string\n}\n\n/** One immediate-fire choice group: each option posts an action the instant it is clicked. */\nexport interface ChooseOneBlock {\n  kind: \"choose-one\"\n  /** `data-aod-group` shared by the options (marks them as one decision). */\n  group: string\n  prompt?: string\n  /** `data-aod-action` verb for every option (default \"choose\"). */\n  action?: string\n  options: InteractiveOption[]\n}\n\n/** A multi-select group: checkbox toggles plus one submit that carries {group, selected}. */\nexport interface MultiSelectBlock {\n  kind: \"multi-select\"\n  group: string\n  prompt?: string\n  submitLabel?: string\n  submitElementId?: string\n  options: InteractiveOption[]\n}\n\nexport interface StepAction {\n  /** `data-aod-action` verb (e.g. \"approve\", \"skip\"). */\n  action: string\n  label: string\n  value?: string\n}\n\nexport interface StepItem {\n  /** Stable `data-aod-id` echoed as `elementId`. */\n  elementId: string\n  label: string\n  sourceLine?: number\n  actions: StepAction[]\n}\n\n/** An ordered list of plan steps, each with its own inline action buttons. */\nexport interface StepsBlock {\n  kind: \"steps\"\n  steps: StepItem[]\n}\n\nexport type InteractiveBlock = ChooseOneBlock | MultiSelectBlock | StepsBlock\n\nexport interface InteractivePlanModel {\n  /** Optional prose rendered above the interactive blocks (same escaping as static). */\n  markdown?: string\n  blocks: InteractiveBlock[]\n}\n\n/** Build a ` data-x=\"y\"` attribute string, dropping undefined values, all escaped. */\nfunction dataAttrs(pairs: Array<[string, string | undefined]>): string {\n  let out = \"\"\n  for (const [name, value] of pairs) {\n    if (value === undefined) continue\n    out += ` ${name}=\"${escapeHtml(value)}\"`\n  }\n  return out\n}\n\nfunction renderChooseOne(block: ChooseOneBlock): string {\n  const action = block.action && block.action.trim() ? block.action : \"choose\"\n  const prompt = block.prompt ? `<p class=\"aod-prompt\">${escapeHtml(block.prompt)}</p>` : \"\"\n  const options = block.options\n    .filter((o) => o.elementId.trim() !== \"\")\n    .map((o) => {\n      const attrs = dataAttrs([\n        [\"data-aod-action\", action],\n        [\"data-aod-group\", block.group],\n        [\"data-aod-id\", o.elementId],\n        [\"data-aod-value\", o.value],\n      ])\n      return `<button type=\"button\" class=\"aod-action\"${attrs}>${escapeHtml(o.label)}</button>`\n    })\n    .join(\"\\n\")\n  return `<div class=\"aod-group aod-choose-one\"${dataAttrs([[\"data-aod-group\", block.group]])}>\n${prompt}<div class=\"aod-options\">\n${options}\n</div>\n</div>`\n}\n\nfunction renderMultiSelect(block: MultiSelectBlock): string {\n  const prompt = block.prompt ? `<p class=\"aod-prompt\">${escapeHtml(block.prompt)}</p>` : \"\"\n  const options = block.options\n    .filter((o) => o.elementId.trim() !== \"\")\n    .map((o) => {\n      const attrs = dataAttrs([\n        [\"data-aod-action\", \"check\"],\n        [\"data-aod-group\", block.group],\n        [\"data-aod-id\", o.elementId],\n        [\"data-aod-value\", o.value],\n      ])\n      return `<label class=\"aod-check\"><input type=\"checkbox\"${attrs}> <span>${escapeHtml(o.label)}</span></label>`\n    })\n    .join(\"\\n\")\n  const submitId = block.submitElementId && block.submitElementId.trim()\n    ? block.submitElementId\n    : `${block.group}-submit`\n  const submitAttrs = dataAttrs([\n    [\"data-aod-action\", \"submit\"],\n    [\"data-aod-group\", block.group],\n    [\"data-aod-id\", submitId],\n  ])\n  const submitLabel = block.submitLabel && block.submitLabel.trim() ? block.submitLabel : \"Submit\"\n  return `<div class=\"aod-group aod-multi-select\"${dataAttrs([[\"data-aod-group\", block.group]])}>\n${prompt}<div class=\"aod-options\">\n${options}\n</div>\n<button type=\"button\" class=\"aod-submit\"${submitAttrs}>${escapeHtml(submitLabel)}</button>\n</div>`\n}\n\nfunction renderSteps(block: StepsBlock): string {\n  const items = block.steps\n    .filter((s) => s.elementId.trim() !== \"\")\n    .map((s) => {\n      const liAttrs = dataAttrs([\n        [\"data-aod-id\", s.elementId],\n        [\"data-source-line\", s.sourceLine === undefined ? undefined : String(s.sourceLine)],\n      ])\n      const actions = s.actions\n        .map((a) => {\n          const attrs = dataAttrs([\n            [\"data-aod-action\", a.action],\n            [\"data-aod-id\", s.elementId],\n            [\"data-aod-value\", a.value],\n          ])\n          return `<button type=\"button\" class=\"aod-action\"${attrs}>${escapeHtml(a.label)}</button>`\n        })\n        .join(\"\")\n      return `<li class=\"aod-step\"${liAttrs}><span class=\"aod-step-label\">${escapeHtml(s.label)}</span><span class=\"aod-step-actions\">${actions}</span></li>`\n    })\n    .join(\"\\n\")\n  return `<ol class=\"aod-steps\">\n${items}\n</ol>`\n}\n\nfunction renderInteractiveBlock(block: InteractiveBlock): string {\n  switch (block.kind) {\n    case \"choose-one\":\n      return renderChooseOne(block)\n    case \"multi-select\":\n      return renderMultiSelect(block)\n    case \"steps\":\n      return renderSteps(block)\n    default:\n      return \"\"\n  }\n}\n\n/**\n * Render a typed interactive plan model into a self-contained HTML document that\n * carries the declarative `data-aod-*` action vocabulary the ai-or-die panel SDK\n * wires (contract v2.2 §4). Optional prose (`markdown`) is rendered with the SAME\n * escaping + dangerous-URL neutralization as the static path; all control\n * attributes and labels are HTML-escaped, so no author string can break out of an\n * attribute or inject live markup.\n */\nexport function renderInteractivePlanHtml(model: InteractivePlanModel, title = \"Plan\"): string {\n  const prose = model.markdown && model.markdown.trim() ? renderMarkdownBody(model.markdown) : \"\"\n  const blocks = model.blocks.map(renderInteractiveBlock).filter((h) => h.trim() !== \"\").join(\"\\n\")\n  const body = [prose, blocks].filter((s) => s.trim() !== \"\").join(\"\\n\")\n  return wrapArtifactDocument(body || `<pre>${escapeHtml(JSON.stringify(model))}</pre>`, title, INTERACTIVE_STYLE)\n}\n","/**\n * The internal `internal-artifact-open` subcommand: invoked by a spawned Claude\n * Code session's `PostToolUse` hook (matcher `ExitPlanMode`), registered into the\n * mirrored settings.json by the launcher when running inside an ai-or-die tab\n * (`AIORDIE_SESSION_ID` set). It auto-opens the just-finalized plan in the\n * ai-or-die Artifact review panel so the human reviews it WITHOUT the model\n * having to call artifact_open itself.\n *\n * Auth: AIORDIE_TOKEN is stripped from the child env, so the token can't come via\n * env or argv (argv leaks to `ps`). The launcher writes a mode-600\n * `.aiordie-artifact.json` into CLAUDE_CONFIG_DIR; this hook reads it.\n *\n * Plan: the EXACT plan for THIS session comes from the ExitPlanMode payload —\n * `tool_input.planFilePath` (per-session; never the globally-newest file in the\n * shared plans dir) with `tool_input.plan` as the markdown fallback. The plan\n * markdown is rendered to a self-contained styled HTML file (HTML is the\n * canonical artifact, lavish's model — formatted + annotatable, not raw md), and\n * THAT `.html` is opened.\n *\n * Side-effect only: never writes stdout, never throws, always exits 0. Skips\n * subagent payloads (agent_id/agent_type) like the other hooks.\n */\n\nimport { defineCommand } from \"citty\"\n\nimport { readFileSync, realpathSync, writeFileSync } from \"node:fs\"\nimport { homedir } from \"node:os\"\nimport path from \"node:path\"\n\nimport { ArtifactClient } from \"./lib/artifact/client\"\nimport { renderPlanHtml } from \"./lib/artifact/plan-html\"\nimport { isSubagentContext } from \"./lib/orchestration/stop-gate-policy\"\n\ninterface ArtifactCreds {\n  baseUrl: string\n  token: string\n  sessionId: string\n  insecureTLS: boolean\n}\n\ninterface ExitPlanPayload {\n  planFilePath?: string\n  planMarkdown?: string\n}\n\nfunction readStdin(): string {\n  try {\n    if (process.stdin.isTTY) return \"\"\n    return readFileSync(0, \"utf8\")\n  } catch {\n    return \"\"\n  }\n}\n\nfunction credsPath(): string {\n  const dir = process.env.CLAUDE_CONFIG_DIR || path.join(homedir(), \".claude\")\n  return path.join(dir, \".aiordie-artifact.json\")\n}\n\nfunction isSubagent(payload: unknown): boolean {\n  try {\n    return isSubagentContext(payload as Parameters<typeof isSubagentContext>[0])\n  } catch {\n    return false\n  }\n}\n\n/** Pull the per-session plan path + markdown content out of the hook payload. */\nexport function parseExitPlanPayload(raw: string): ExitPlanPayload {\n  try {\n    const obj = JSON.parse(raw) as { tool_input?: { planFilePath?: unknown; plan?: unknown } }\n    const ti = obj.tool_input ?? {}\n    const planFilePath = typeof ti.planFilePath === \"string\" && ti.planFilePath.trim() ? ti.planFilePath : undefined\n    const planMarkdown = typeof ti.plan === \"string\" && ti.plan.trim() ? ti.plan : undefined\n    return { planFilePath, planMarkdown }\n  } catch {\n    return {}\n  }\n}\n\nfunction readCreds(): ArtifactCreds | undefined {\n  try {\n    const parsed = JSON.parse(readFileSync(credsPath(), \"utf8\")) as Partial<ArtifactCreds>\n    if (!parsed.baseUrl || !parsed.token || !parsed.sessionId) return undefined\n    return {\n      baseUrl: parsed.baseUrl,\n      token: parsed.token,\n      sessionId: parsed.sessionId,\n      insecureTLS: parsed.insecureTLS === true,\n    }\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Resolve the plan markdown + a title, preferring the file at `planFilePath`\n * (the source of truth, may be newer than the payload's snapshot), falling back\n * to the inline `tool_input.plan` content.\n */\nfunction resolvePlanMarkdown(p: ExitPlanPayload): { markdown: string; title: string; nearPath?: string } | undefined {\n  if (p.planFilePath) {\n    try {\n      const md = readFileSync(p.planFilePath, \"utf8\")\n      if (md.trim()) return { markdown: md, title: path.basename(p.planFilePath, path.extname(p.planFilePath)), nearPath: p.planFilePath }\n    } catch {\n      /* fall through to inline content */\n    }\n  }\n  if (p.planMarkdown) return { markdown: p.planMarkdown, title: \"Plan\" }\n  return undefined\n}\n\n/**\n * Write the rendered HTML next to the plan (an allowed root) when we have a real\n * path, else into the plans dir under CLAUDE_CONFIG_DIR. Returns the realpath of\n * the written `.html`, or undefined on failure.\n */\nfunction writePlanHtml(html: string, nearPath: string | undefined): string | undefined {\n  let target: string\n  if (nearPath) {\n    // `<plan>.md` -> `<plan>.aiordie.html` (or append when there is no .md ext).\n    const base = nearPath.replace(/\\.(md|markdown)$/i, \"\")\n    target = `${base}.aiordie.html`\n  } else {\n    const dir = path.join(process.env.CLAUDE_CONFIG_DIR || path.join(homedir(), \".claude\"), \"plans\")\n    target = path.join(dir, `aiordie-plan-${process.pid}.html`)\n  }\n  try {\n    writeFileSync(target, html, \"utf8\")\n    try {\n      return realpathSync.native(target)\n    } catch {\n      return target\n    }\n  } catch {\n    return undefined\n  }\n}\n\nexport const internalArtifactOpen = defineCommand({\n  meta: { name: \"internal-artifact-open\", description: \"Open the finalized plan in the ai-or-die panel\" },\n  async run() {\n    try {\n      const raw = readStdin()\n      let payload: unknown\n      try {\n        payload = JSON.parse(raw)\n      } catch {\n        payload = undefined\n      }\n      if (isSubagent(payload)) return\n      const creds = readCreds()\n      if (!creds) return\n      const plan = resolvePlanMarkdown(parseExitPlanPayload(raw))\n      if (!plan) return\n      const htmlPath = writePlanHtml(renderPlanHtml(plan.markdown, plan.title), plan.nearPath)\n      if (!htmlPath) return\n      const client = new ArtifactClient(creds)\n      await client.open(htmlPath)\n    } catch {\n      /* side-effect only: never block, never throw */\n    }\n  },\n})\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAgBA,SAAS,WAAW,GAAmB;CACrC,OAAO,EACJ,QAAQ,MAAM,OAAO,CAAC,CACtB,QAAQ,MAAM,MAAM,CAAC,CACrB,QAAQ,MAAM,MAAM,CAAC,CACrB,QAAQ,MAAM,QAAQ,CAAC,CACvB,QAAQ,MAAM,OAAO;AAC1B;;;;;AAMA,MAAM,aAAqC;CACzC,OAAO;CAAK,KAAK;CAAM,SAAS;CAAM,KAAK;CAAK,MAAM;CAAK,KAAK;CAAK,MAAM;CAAK,MAAM;AACxF;AACA,SAAS,eAAe,GAAmB;CACzC,OAAO,EAAE,QAAQ,8CAA8C,GAAG,SAAiB;EACjF,IAAI,KAAK,OAAO,KAAK;GACnB,MAAM,OAAO,KAAK,OAAO,OAAO,KAAK,OAAO,MACxC,OAAO,SAAS,KAAK,MAAM,CAAC,GAAG,EAAE,IACjC,OAAO,SAAS,KAAK,MAAM,CAAC,GAAG,EAAE;GACrC,OAAO,OAAO,SAAS,IAAI,KAAK,OAAO,KAAK,QAAQ,UAAW,OAAO,cAAc,IAAI,IAAI;EAC9F;EACA,OAAO,WAAW,KAAK,YAAY,MAAM;CAC3C,CAAC;AACH;;AAGA,SAAS,eAAe,KAAa,SAA2B;CAG9D,MAAM,IAAI,MAAM,KAAK,eAAe,GAAG,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,WAAW,CAAC,IAAI,EAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,YAAY;CACrG,IAAI,EAAE,WAAW,aAAa,KAAK,EAAE,WAAW,WAAW,GAAG,OAAO;CACrE,IAAI,EAAE,WAAW,OAAO,GAEtB,OAAO,EAAE,WAAW,EAAE,WAAW,aAAa,KAAK,CAAC,EAAE,WAAW,gBAAgB;CAEnF,OAAO;AACT;;AAGA,SAAS,aAAqB;CAC5B,MAAM,IAAI,IAAI,OAAO;EAAE,KAAK;EAAM,QAAQ;CAAM,CAAC;CACjD,EAAE,IAAI,EACJ,UAAU,EAER,KAAK,OAAwB;EAE3B,OAAO,WADM,OAAO,UAAU,WAAW,QAAU,MAA4B,QAAQ,EACjE;CACxB,EACF,EACF,CAAC;CACD,OAAO;AACT;;;;;;AAgBA,SAAS,eAAe,QAAyB;CAC/C,KAAK,MAAM,KAAK,QAAQ;EACtB,KAAK,EAAE,SAAS,UAAU,EAAE,SAAS,YAAY,OAAO,EAAE,SAAS,UAC7D;OAAA,eAAe,EAAE,MAAM,EAAE,SAAS,OAAO,GAAG,EAAE,OAAO;EAAA;EAE3D,IAAI,EAAE,QAAQ,eAAe,EAAE,MAAM;EACrC,IAAI,EAAE,OAAO,eAAe,EAAE,KAAK;EACnC,IAAI,EAAE,QAAa;QAAA,MAAM,QAAQ,EAAE,QAAQ,IAAI,KAAK,QAAQ,eAAe,KAAK,MAAM;EAAA;EACtF,IAAI,EAAE,MAAW;QAAA,MAAM,OAAO,EAAE,MAAM,KAAK,MAAM,QAAQ,KAAK,IAAI,KAAK,QAAQ,eAAe,KAAK,MAAM;EAAA;CAC3G;AACF;;AAGA,SAAS,cAAc,MAAc,MAAsB;CACzD,OAAO,KAAK,QAAQ,2BAA2B,2BAA2B,KAAK,EAAE;AACnF;;;;;AAMA,SAAgB,mBAAmB,QAAwB;CACzD,MAAM,IAAI,WAAW;CACrB,IAAI;CACJ,IAAI;EACF,SAAS,EAAE,MAAM,MAAM;CACzB,QAAQ;EAEN,OAAO,QAAQ,WAAW,MAAM,EAAE;CACpC;CACA,eAAe,MAAmB;CAClC,IAAI,OAAO;CACX,IAAI,MAAM;CACV,KAAK,MAAM,OAAO,QAAQ;EACxB,IAAI;EACJ,IAAI;GACF,OAAO,EAAE,OAAO,CAAC,GAAG,CAAmC;EACzD,QAAQ;GACN,OAAO;EACT;EACA,IAAI,KAAK,KAAK,GAAG,OAAO,cAAc,MAAM,IAAI;EAChD,QAAS,IAAI,KAAK,MAAM,KAAK,CAAC,EAAE,UAAU;CAC5C;CACA,OAAO,OAAO,QAAQ,WAAW,MAAM,EAAE;AAC3C;;;;;AAMA,SAAgB,eAAe,QAAgB,QAAQ,QAAgB;CACrE,OAAO,qBAAqB,mBAAmB,MAAM,GAAG,KAAK;AAC/D;AAEA,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDnB,SAAS,qBAAqB,MAAc,OAAe,aAAa,IAAY;CAClF,OAAO;;;;;SAKA,WAAW,KAAK,EAAE;;EAEzB,aAAa,WAAW;;;;;EAKxB,KAAK;;;;;AAKP;;;;;;;;;;;;;;;;;;;;;;;;;ACtKA,SAAS,YAAoB;CAC3B,IAAI;EACF,IAAI,QAAQ,MAAM,OAAO,OAAO;EAChC,OAAO,aAAa,GAAG,MAAM;CAC/B,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,YAAoB;CAC3B,MAAM,MAAM,QAAQ,IAAI,qBAAqB,KAAK,KAAK,QAAQ,GAAG,SAAS;CAC3E,OAAO,KAAK,KAAK,KAAK,wBAAwB;AAChD;AAEA,SAAS,WAAW,SAA2B;CAC7C,IAAI;EACF,OAAO,kBAAkB,OAAkD;CAC7E,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,qBAAqB,KAA8B;CACjE,IAAI;EAEF,MAAM,KADM,KAAK,MAAM,GACV,CAAC,CAAC,cAAc,CAAC;EAG9B,OAAO;GAAE,cAFY,OAAO,GAAG,iBAAiB,YAAY,GAAG,aAAa,KAAK,IAAI,GAAG,eAAe,KAAA;GAEhF,cADF,OAAO,GAAG,SAAS,YAAY,GAAG,KAAK,KAAK,IAAI,GAAG,OAAO,KAAA;EAC3C;CACtC,QAAQ;EACN,OAAO,CAAC;CACV;AACF;AAEA,SAAS,YAAuC;CAC9C,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,aAAa,UAAU,GAAG,MAAM,CAAC;EAC3D,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,SAAS,CAAC,OAAO,WAAW,OAAO,KAAA;EAClE,OAAO;GACL,SAAS,OAAO;GAChB,OAAO,OAAO;GACd,WAAW,OAAO;GAClB,aAAa,OAAO,gBAAgB;EACtC;CACF,QAAQ;EACN;CACF;AACF;;;;;;AAOA,SAAS,oBAAoB,GAAwF;CACnH,IAAI,EAAE,cACJ,IAAI;EACF,MAAM,KAAK,aAAa,EAAE,cAAc,MAAM;EAC9C,IAAI,GAAG,KAAK,GAAG,OAAO;GAAE,UAAU;GAAI,OAAO,KAAK,SAAS,EAAE,cAAc,KAAK,QAAQ,EAAE,YAAY,CAAC;GAAG,UAAU,EAAE;EAAa;CACrI,QAAQ,CAER;CAEF,IAAI,EAAE,cAAc,OAAO;EAAE,UAAU,EAAE;EAAc,OAAO;CAAO;AAEvE;;;;;;AAOA,SAAS,cAAc,MAAc,UAAkD;CACrF,IAAI;CACJ,IAAI,UAGF,SAAS,GADI,SAAS,QAAQ,qBAAqB,EACpC,EAAE;MACZ;EACL,MAAM,MAAM,KAAK,KAAK,QAAQ,IAAI,qBAAqB,KAAK,KAAK,QAAQ,GAAG,SAAS,GAAG,OAAO;EAC/F,SAAS,KAAK,KAAK,KAAK,gBAAgB,QAAQ,IAAI,MAAM;CAC5D;CACA,IAAI;EACF,cAAc,QAAQ,MAAM,MAAM;EAClC,IAAI;GACF,OAAO,aAAa,OAAO,MAAM;EACnC,QAAQ;GACN,OAAO;EACT;CACF,QAAQ;EACN;CACF;AACF;AAEA,MAAa,uBAAuB,cAAc;CAChD,MAAM;EAAE,MAAM;EAA0B,aAAa;CAAiD;CACtG,MAAM,MAAM;EACV,IAAI;GACF,MAAM,MAAM,UAAU;GACtB,IAAI;GACJ,IAAI;IACF,UAAU,KAAK,MAAM,GAAG;GAC1B,QAAQ;IACN,UAAU,KAAA;GACZ;GACA,IAAI,WAAW,OAAO,GAAG;GACzB,MAAM,QAAQ,UAAU;GACxB,IAAI,CAAC,OAAO;GACZ,MAAM,OAAO,oBAAoB,qBAAqB,GAAG,CAAC;GAC1D,IAAI,CAAC,MAAM;GACX,MAAM,WAAW,cAAc,eAAe,KAAK,UAAU,KAAK,KAAK,GAAG,KAAK,QAAQ;GACvF,IAAI,CAAC,UAAU;GAEf,MAAM,IADa,eAAe,KACvB,CAAC,CAAC,KAAK,QAAQ;EAC5B,QAAQ,CAER;CACF;AACF,CAAC"}
+{"version":3,"file":"internal-artifact-open-DRSxShAW.js","names":[],"sources":["../src/lib/artifact/plan-html.ts","../src/internal-artifact-open.ts"],"sourcesContent":["/**\n * Render a plan's markdown into a self-contained, styled HTML document for the\n * ai-or-die Artifact panel. HTML is the canonical review artifact (lavish's\n * model); converting here means the hands-off auto-open shows a formatted,\n * annotatable page instead of raw markdown.\n *\n * Security: the iframe ai-or-die serves this into runs with\n * `allow-scripts allow-same-origin`, so a `<script>` smuggled into the plan\n * markdown could read the per-session asset token. Two defenses:\n *   1. marked is configured to ESCAPE raw HTML tokens (render as visible text).\n *   2. `link`/`image` hrefs with script-bearing schemes (javascript:, vbscript:,\n *      non-image data:) are neutralised before rendering.\n * No separate sanitizer/dep needed.\n */\nimport { Marked } from \"marked\"\n\nfunction escapeHtml(s: string): string {\n  return s\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\")\n}\n\n/** Decode the HTML character references a browser would resolve in an attribute\n *  value, so an entity-obfuscated scheme (`javascript&colon;`, `j&#97;vascript:`)\n *  cannot slip past the scheme check below. Numeric refs cover any letter; the\n *  small named map covers the scheme-relevant punctuation. */\nconst NAMED_REFS: Record<string, string> = {\n  colon: \":\", tab: \"\\t\", newline: \"\\n\", sol: \"/\", semi: \";\", amp: \"&\", lpar: \"(\", rpar: \")\",\n}\nfunction decodeEntities(s: string): string {\n  return s.replace(/&(#[xX][0-9a-fA-F]+|#[0-9]+|[a-zA-Z]+);?/g, (m, body: string) => {\n    if (body[0] === \"#\") {\n      const code = body[1] === \"x\" || body[1] === \"X\"\n        ? Number.parseInt(body.slice(2), 16)\n        : Number.parseInt(body.slice(1), 10)\n      return Number.isFinite(code) && code > 0 && code <= 0x10ffff ? String.fromCodePoint(code) : m\n    }\n    return NAMED_REFS[body.toLowerCase()] ?? m\n  })\n}\n\n/** Block script-bearing URL schemes (defense-in-depth on top of HTML escaping). */\nfunction isDangerousUrl(url: string, isImage: boolean): boolean {\n  // Decode entities first (a browser resolves them in href), then drop ASCII\n  // control chars + spaces (code <= 0x20) a browser ignores inside a scheme.\n  const v = Array.from(decodeEntities(url)).filter((c) => c.charCodeAt(0) > 0x20).join(\"\").toLowerCase()\n  if (v.startsWith(\"javascript:\") || v.startsWith(\"vbscript:\")) return true\n  if (v.startsWith(\"data:\")) {\n    // Allow only raster image data URIs (and only for <img>); SVG can script.\n    return !(isImage && v.startsWith(\"data:image/\") && !v.startsWith(\"data:image/svg\"))\n  }\n  return false\n}\n\n/** A marked instance that escapes raw HTML (raw markup never becomes live). */\nfunction makeMarked(): Marked {\n  const m = new Marked({ gfm: true, breaks: false })\n  m.use({\n    renderer: {\n      // Raw HTML in the source is rendered as escaped text, never live markup.\n      html(token: unknown): string {\n        const text = typeof token === \"string\" ? token : ((token as { text?: string }).text ?? \"\")\n        return escapeHtml(text)\n      },\n    },\n  })\n  return m\n}\n\ninterface MdToken {\n  type?: string\n  href?: string\n  tokens?: MdToken[]\n  items?: MdToken[]\n  header?: Array<{ tokens?: MdToken[] }>\n  rows?: Array<Array<{ tokens?: MdToken[] }>>\n}\n\n/**\n * Recursively neutralise script-bearing link/image hrefs in the lexed token tree.\n * Done as an explicit walk (not marked's `walkTokens` hook) because we render via\n * the low-level `lexer`+`parser` split, which does not run registered walkTokens.\n */\nfunction neutralizeUrls(tokens: MdToken[]): void {\n  for (const t of tokens) {\n    if ((t.type === \"link\" || t.type === \"image\") && typeof t.href === \"string\") {\n      if (isDangerousUrl(t.href, t.type === \"image\")) t.href = \"#\"\n    }\n    if (t.tokens) neutralizeUrls(t.tokens)\n    if (t.items) neutralizeUrls(t.items)\n    if (t.header) for (const cell of t.header) if (cell.tokens) neutralizeUrls(cell.tokens)\n    if (t.rows) for (const row of t.rows) for (const cell of row) if (cell.tokens) neutralizeUrls(cell.tokens)\n  }\n}\n\n/** Add `data-source-line=\"N\"` to the first opening tag of a rendered block. */\nfunction tagSourceLine(html: string, line: number): string {\n  return html.replace(/^(\\s*)<([a-zA-Z][\\w-]*)/, `$1<$2 data-source-line=\"${line}\"`)\n}\n\n/**\n * Render markdown to inner HTML, tagging each top-level block with its 1-based\n * source line so an annotation in the panel can map back to a plan line.\n */\nexport function renderMarkdownBody(source: string): string {\n  const m = makeMarked()\n  let tokens: Array<{ raw?: string }>\n  try {\n    tokens = m.lexer(source) as Array<{ raw?: string }>\n  } catch {\n    // Lexing should not fail, but never throw out of the hook path.\n    return `<pre>${escapeHtml(source)}</pre>`\n  }\n  neutralizeUrls(tokens as MdToken[])\n  let line = 1\n  let out = \"\"\n  for (const tok of tokens) {\n    let html: string\n    try {\n      html = m.parser([tok] as Parameters<typeof m.parser>[0])\n    } catch {\n      html = \"\"\n    }\n    if (html.trim()) out += tagSourceLine(html, line)\n    line += (tok.raw?.match(/\\n/g)?.length ?? 0)\n  }\n  return out || `<pre>${escapeHtml(source)}</pre>`\n}\n\n/**\n * Wrap rendered markdown in a complete, self-contained HTML document with\n * readable typography (works even before ai-or-die injects its annotation SDK).\n */\nexport function renderPlanHtml(source: string, title = \"Plan\"): string {\n  return wrapArtifactDocument(renderMarkdownBody(source), title)\n}\n\nconst BASE_STYLE = `  :root {\n    --bg: #0f1115; --fg: #f7f3ea; --muted: #aeb6c6; --border: #2a2f3a;\n    --accent: #f4c95d; --code-bg: #171a21;\n    --serif: 'Iowan Old Style', Georgia, 'Times New Roman', serif;\n    --sans: ui-sans-serif, system-ui, -apple-system, 'Segoe UI', sans-serif;\n    --mono: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  }\n  * { box-sizing: border-box; }\n  html, body { margin: 0; background: var(--bg); color: var(--fg); }\n  body { font-family: var(--serif); font-size: 16px; line-height: 1.6;\n    padding: 32px clamp(16px, 5vw, 56px); }\n  main { max-width: 78ch; margin: 0 auto; }\n  h1, h2, h3, h4 { font-family: var(--sans); line-height: 1.25; margin: 1.6em 0 0.5em; }\n  h1 { font-size: 1.9em; } h2 { font-size: 1.45em; padding-bottom: 0.2em;\n    border-bottom: 1px solid var(--border); } h3 { font-size: 1.2em; }\n  p, li { color: var(--fg); }\n  a { color: var(--accent); }\n  code { font-family: var(--mono); font-size: 0.9em; background: var(--code-bg);\n    padding: 0.12em 0.35em; border-radius: 5px; }\n  pre { background: var(--code-bg); border: 1px solid var(--border); border-radius: 8px;\n    padding: 12px 14px; overflow: auto; }\n  pre code { background: none; padding: 0; }\n  blockquote { margin: 1em 0; padding: 0.2em 1em; border-left: 3px solid var(--accent);\n    color: var(--muted); }\n  table { border-collapse: collapse; width: 100%; margin: 1em 0; font-family: var(--sans);\n    font-size: 0.95em; }\n  th, td { border: 1px solid var(--border); padding: 6px 10px; text-align: left; }\n  th { background: var(--code-bg); }\n  hr { border: 0; border-top: 1px solid var(--border); margin: 1.5em 0; }\n  ul, ol { padding-left: 1.4em; }`\n\nconst INTERACTIVE_STYLE = `\n  .aod-group { margin: 1.4em 0; padding: 14px 16px; border: 1px solid var(--border);\n    border-radius: 10px; background: var(--code-bg); }\n  .aod-prompt { font-family: var(--sans); font-weight: 600; margin: 0 0 0.6em; }\n  .aod-options { display: flex; flex-wrap: wrap; gap: 8px; }\n  .aod-multi-select .aod-options { flex-direction: column; gap: 6px; }\n  .aod-action, .aod-submit { font-family: var(--sans); font-size: 0.95em; font-weight: 600;\n    cursor: pointer; border: 1px solid var(--border); border-radius: 8px;\n    padding: 8px 12px; background: var(--bg); color: var(--fg); }\n  .aod-action:hover, .aod-submit:hover { border-color: var(--accent); }\n  .aod-submit { margin-top: 10px; background: var(--accent); color: #17130a; border-color: var(--accent); }\n  .aod-check { display: flex; align-items: center; gap: 8px; font-family: var(--sans); cursor: pointer; }\n  .aod-steps { list-style: decimal; }\n  .aod-step { margin: 0.5em 0; }\n  .aod-step-actions { display: inline-flex; gap: 6px; margin-left: 8px; }`\n\n/**\n * Wrap rendered inner HTML in the self-contained document shell. `extraStyle` is\n * appended to the inline stylesheet so the interactive variant can add its own\n * rules without a second `<style>` block. Static callers pass \"\" (default), so\n * the static document is byte-identical to the pre-refactor output.\n */\nfunction wrapArtifactDocument(body: string, title: string, extraStyle = \"\"): string {\n  return `<!doctype html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>${escapeHtml(title)}</title>\n<style>\n${BASE_STYLE}${extraStyle}\n</style>\n</head>\n<body>\n<main>\n${body}\n</main>\n</body>\n</html>\n`\n}\n\n/* -------------------------------------------------------------------------- */\n/* Interactive artifacts (contract v2.2 §4: declarative data-aod-* vocab)      */\n/* -------------------------------------------------------------------------- */\n\nexport interface InteractiveOption {\n  /** Stable id echoed back as `elementId` in the action event. Required. */\n  elementId: string\n  /** Human-visible label. */\n  label: string\n  /** Optional value echoed as `data-aod-value` (checkbox submits use \"true\"/\"false\"). */\n  value?: string\n}\n\n/** One immediate-fire choice group: each option posts an action the instant it is clicked. */\nexport interface ChooseOneBlock {\n  kind: \"choose-one\"\n  /** `data-aod-group` shared by the options (marks them as one decision). */\n  group: string\n  prompt?: string\n  /** `data-aod-action` verb for every option (default \"choose\"). */\n  action?: string\n  options: InteractiveOption[]\n}\n\n/** A multi-select group: checkbox toggles plus one submit that carries {group, selected}. */\nexport interface MultiSelectBlock {\n  kind: \"multi-select\"\n  group: string\n  prompt?: string\n  submitLabel?: string\n  submitElementId?: string\n  options: InteractiveOption[]\n}\n\nexport interface StepAction {\n  /** `data-aod-action` verb (e.g. \"approve\", \"skip\"). */\n  action: string\n  label: string\n  value?: string\n}\n\nexport interface StepItem {\n  /** Stable `data-aod-id` echoed as `elementId`. */\n  elementId: string\n  label: string\n  sourceLine?: number\n  actions: StepAction[]\n}\n\n/** An ordered list of plan steps, each with its own inline action buttons. */\nexport interface StepsBlock {\n  kind: \"steps\"\n  steps: StepItem[]\n}\n\nexport type InteractiveBlock = ChooseOneBlock | MultiSelectBlock | StepsBlock\n\nexport interface InteractivePlanModel {\n  /** Optional prose rendered above the interactive blocks (same escaping as static). */\n  markdown?: string\n  blocks: InteractiveBlock[]\n}\n\n/** Build a ` data-x=\"y\"` attribute string, dropping undefined values, all escaped. */\nfunction dataAttrs(pairs: Array<[string, string | undefined]>): string {\n  let out = \"\"\n  for (const [name, value] of pairs) {\n    if (value === undefined) continue\n    out += ` ${name}=\"${escapeHtml(value)}\"`\n  }\n  return out\n}\n\nfunction renderChooseOne(block: ChooseOneBlock): string {\n  const action = block.action && block.action.trim() ? block.action : \"choose\"\n  const prompt = block.prompt ? `<p class=\"aod-prompt\">${escapeHtml(block.prompt)}</p>` : \"\"\n  const options = block.options\n    .filter((o) => o.elementId.trim() !== \"\")\n    .map((o) => {\n      const attrs = dataAttrs([\n        [\"data-aod-action\", action],\n        [\"data-aod-group\", block.group],\n        [\"data-aod-id\", o.elementId],\n        [\"data-aod-value\", o.value],\n      ])\n      return `<button type=\"button\" class=\"aod-action\"${attrs}>${escapeHtml(o.label)}</button>`\n    })\n    .join(\"\\n\")\n  return `<div class=\"aod-group aod-choose-one\"${dataAttrs([[\"data-aod-group\", block.group]])}>\n${prompt}<div class=\"aod-options\">\n${options}\n</div>\n</div>`\n}\n\nfunction renderMultiSelect(block: MultiSelectBlock): string {\n  const prompt = block.prompt ? `<p class=\"aod-prompt\">${escapeHtml(block.prompt)}</p>` : \"\"\n  const options = block.options\n    .filter((o) => o.elementId.trim() !== \"\")\n    .map((o) => {\n      const attrs = dataAttrs([\n        [\"data-aod-action\", \"check\"],\n        [\"data-aod-group\", block.group],\n        [\"data-aod-id\", o.elementId],\n        [\"data-aod-value\", o.value],\n      ])\n      return `<label class=\"aod-check\"><input type=\"checkbox\"${attrs}> <span>${escapeHtml(o.label)}</span></label>`\n    })\n    .join(\"\\n\")\n  const submitId = block.submitElementId && block.submitElementId.trim()\n    ? block.submitElementId\n    : `${block.group}-submit`\n  const submitAttrs = dataAttrs([\n    [\"data-aod-action\", \"submit\"],\n    [\"data-aod-group\", block.group],\n    [\"data-aod-id\", submitId],\n  ])\n  const submitLabel = block.submitLabel && block.submitLabel.trim() ? block.submitLabel : \"Submit\"\n  return `<div class=\"aod-group aod-multi-select\"${dataAttrs([[\"data-aod-group\", block.group]])}>\n${prompt}<div class=\"aod-options\">\n${options}\n</div>\n<button type=\"button\" class=\"aod-submit\"${submitAttrs}>${escapeHtml(submitLabel)}</button>\n</div>`\n}\n\nfunction renderSteps(block: StepsBlock): string {\n  const items = block.steps\n    .filter((s) => s.elementId.trim() !== \"\")\n    .map((s) => {\n      const liAttrs = dataAttrs([\n        [\"data-aod-id\", s.elementId],\n        [\"data-source-line\", s.sourceLine === undefined ? undefined : String(s.sourceLine)],\n      ])\n      const actions = s.actions\n        .map((a) => {\n          const attrs = dataAttrs([\n            [\"data-aod-action\", a.action],\n            [\"data-aod-id\", s.elementId],\n            [\"data-aod-value\", a.value],\n          ])\n          return `<button type=\"button\" class=\"aod-action\"${attrs}>${escapeHtml(a.label)}</button>`\n        })\n        .join(\"\")\n      return `<li class=\"aod-step\"${liAttrs}><span class=\"aod-step-label\">${escapeHtml(s.label)}</span><span class=\"aod-step-actions\">${actions}</span></li>`\n    })\n    .join(\"\\n\")\n  return `<ol class=\"aod-steps\">\n${items}\n</ol>`\n}\n\nfunction renderInteractiveBlock(block: InteractiveBlock): string {\n  switch (block.kind) {\n    case \"choose-one\":\n      return renderChooseOne(block)\n    case \"multi-select\":\n      return renderMultiSelect(block)\n    case \"steps\":\n      return renderSteps(block)\n    default:\n      return \"\"\n  }\n}\n\n/**\n * Render a typed interactive plan model into a self-contained HTML document that\n * carries the declarative `data-aod-*` action vocabulary the ai-or-die panel SDK\n * wires (contract v2.2 §4). Optional prose (`markdown`) is rendered with the SAME\n * escaping + dangerous-URL neutralization as the static path; all control\n * attributes and labels are HTML-escaped, so no author string can break out of an\n * attribute or inject live markup.\n */\nexport function renderInteractivePlanHtml(model: InteractivePlanModel, title = \"Plan\"): string {\n  const prose = model.markdown && model.markdown.trim() ? renderMarkdownBody(model.markdown) : \"\"\n  const blocks = model.blocks.map(renderInteractiveBlock).filter((h) => h.trim() !== \"\").join(\"\\n\")\n  const body = [prose, blocks].filter((s) => s.trim() !== \"\").join(\"\\n\")\n  return wrapArtifactDocument(body || `<pre>${escapeHtml(JSON.stringify(model))}</pre>`, title, INTERACTIVE_STYLE)\n}\n","/**\n * The internal `internal-artifact-open` subcommand: invoked by a spawned Claude\n * Code session's `PostToolUse` hook (matcher `ExitPlanMode`), registered into the\n * mirrored settings.json by the launcher when running inside an ai-or-die tab\n * (`AIORDIE_SESSION_ID` set). It auto-opens the just-finalized plan in the\n * ai-or-die Artifact review panel so the human reviews it WITHOUT the model\n * having to call artifact_open itself.\n *\n * Auth: AIORDIE_TOKEN is stripped from the child env, so the token can't come via\n * env or argv (argv leaks to `ps`). The launcher writes a mode-600\n * `.aiordie-artifact.json` into CLAUDE_CONFIG_DIR; this hook reads it.\n *\n * Plan: the EXACT plan for THIS session comes from the ExitPlanMode payload —\n * `tool_input.planFilePath` (per-session; never the globally-newest file in the\n * shared plans dir) with `tool_input.plan` as the markdown fallback. The plan\n * markdown is rendered to a self-contained styled HTML file (HTML is the\n * canonical artifact, lavish's model — formatted + annotatable, not raw md), and\n * THAT `.html` is opened.\n *\n * Side-effect only: never writes stdout, never throws, always exits 0. Skips\n * subagent payloads (agent_id/agent_type) like the other hooks.\n */\n\nimport { defineCommand } from \"citty\"\n\nimport { readFileSync, realpathSync, writeFileSync } from \"node:fs\"\nimport { homedir } from \"node:os\"\nimport path from \"node:path\"\n\nimport { ArtifactClient } from \"./lib/artifact/client\"\nimport { renderPlanHtml } from \"./lib/artifact/plan-html\"\nimport { isSubagentContext } from \"./lib/orchestration/stop-gate-policy\"\n\ninterface ArtifactCreds {\n  baseUrl: string\n  token: string\n  sessionId: string\n  insecureTLS: boolean\n}\n\ninterface ExitPlanPayload {\n  planFilePath?: string\n  planMarkdown?: string\n}\n\nfunction readStdin(): string {\n  try {\n    if (process.stdin.isTTY) return \"\"\n    return readFileSync(0, \"utf8\")\n  } catch {\n    return \"\"\n  }\n}\n\nfunction credsPath(): string {\n  const dir = process.env.CLAUDE_CONFIG_DIR || path.join(homedir(), \".claude\")\n  return path.join(dir, \".aiordie-artifact.json\")\n}\n\nfunction isSubagent(payload: unknown): boolean {\n  try {\n    return isSubagentContext(payload as Parameters<typeof isSubagentContext>[0])\n  } catch {\n    return false\n  }\n}\n\n/** Pull the per-session plan path + markdown content out of the hook payload. */\nexport function parseExitPlanPayload(raw: string): ExitPlanPayload {\n  try {\n    const obj = JSON.parse(raw) as { tool_input?: { planFilePath?: unknown; plan?: unknown } }\n    const ti = obj.tool_input ?? {}\n    const planFilePath = typeof ti.planFilePath === \"string\" && ti.planFilePath.trim() ? ti.planFilePath : undefined\n    const planMarkdown = typeof ti.plan === \"string\" && ti.plan.trim() ? ti.plan : undefined\n    return { planFilePath, planMarkdown }\n  } catch {\n    return {}\n  }\n}\n\nfunction readCreds(): ArtifactCreds | undefined {\n  try {\n    const parsed = JSON.parse(readFileSync(credsPath(), \"utf8\")) as Partial<ArtifactCreds>\n    if (!parsed.baseUrl || !parsed.token || !parsed.sessionId) return undefined\n    return {\n      baseUrl: parsed.baseUrl,\n      token: parsed.token,\n      sessionId: parsed.sessionId,\n      insecureTLS: parsed.insecureTLS === true,\n    }\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Resolve the plan markdown + a title, preferring the file at `planFilePath`\n * (the source of truth, may be newer than the payload's snapshot), falling back\n * to the inline `tool_input.plan` content.\n */\nfunction resolvePlanMarkdown(p: ExitPlanPayload): { markdown: string; title: string; nearPath?: string } | undefined {\n  if (p.planFilePath) {\n    try {\n      const md = readFileSync(p.planFilePath, \"utf8\")\n      if (md.trim()) return { markdown: md, title: path.basename(p.planFilePath, path.extname(p.planFilePath)), nearPath: p.planFilePath }\n    } catch {\n      /* fall through to inline content */\n    }\n  }\n  if (p.planMarkdown) return { markdown: p.planMarkdown, title: \"Plan\" }\n  return undefined\n}\n\n/**\n * Write the rendered HTML next to the plan (an allowed root) when we have a real\n * path, else into the plans dir under CLAUDE_CONFIG_DIR. Returns the realpath of\n * the written `.html`, or undefined on failure.\n */\nfunction writePlanHtml(html: string, nearPath: string | undefined): string | undefined {\n  let target: string\n  if (nearPath) {\n    // `<plan>.md` -> `<plan>.aiordie.html` (or append when there is no .md ext).\n    const base = nearPath.replace(/\\.(md|markdown)$/i, \"\")\n    target = `${base}.aiordie.html`\n  } else {\n    const dir = path.join(process.env.CLAUDE_CONFIG_DIR || path.join(homedir(), \".claude\"), \"plans\")\n    target = path.join(dir, `aiordie-plan-${process.pid}.html`)\n  }\n  try {\n    writeFileSync(target, html, \"utf8\")\n    try {\n      return realpathSync.native(target)\n    } catch {\n      return target\n    }\n  } catch {\n    return undefined\n  }\n}\n\nexport const internalArtifactOpen = defineCommand({\n  meta: { name: \"internal-artifact-open\", description: \"Open the finalized plan in the ai-or-die panel\" },\n  async run() {\n    try {\n      const raw = readStdin()\n      let payload: unknown\n      try {\n        payload = JSON.parse(raw)\n      } catch {\n        payload = undefined\n      }\n      if (isSubagent(payload)) return\n      const creds = readCreds()\n      if (!creds) return\n      const plan = resolvePlanMarkdown(parseExitPlanPayload(raw))\n      if (!plan) return\n      const htmlPath = writePlanHtml(renderPlanHtml(plan.markdown, plan.title), plan.nearPath)\n      if (!htmlPath) return\n      const client = new ArtifactClient(creds)\n      await client.open(htmlPath)\n    } catch {\n      /* side-effect only: never block, never throw */\n    }\n  },\n})\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAgBA,SAAS,WAAW,GAAmB;CACrC,OAAO,EACJ,QAAQ,MAAM,OAAO,CAAC,CACtB,QAAQ,MAAM,MAAM,CAAC,CACrB,QAAQ,MAAM,MAAM,CAAC,CACrB,QAAQ,MAAM,QAAQ,CAAC,CACvB,QAAQ,MAAM,OAAO;AAC1B;;;;;AAMA,MAAM,aAAqC;CACzC,OAAO;CAAK,KAAK;CAAM,SAAS;CAAM,KAAK;CAAK,MAAM;CAAK,KAAK;CAAK,MAAM;CAAK,MAAM;AACxF;AACA,SAAS,eAAe,GAAmB;CACzC,OAAO,EAAE,QAAQ,8CAA8C,GAAG,SAAiB;EACjF,IAAI,KAAK,OAAO,KAAK;GACnB,MAAM,OAAO,KAAK,OAAO,OAAO,KAAK,OAAO,MACxC,OAAO,SAAS,KAAK,MAAM,CAAC,GAAG,EAAE,IACjC,OAAO,SAAS,KAAK,MAAM,CAAC,GAAG,EAAE;GACrC,OAAO,OAAO,SAAS,IAAI,KAAK,OAAO,KAAK,QAAQ,UAAW,OAAO,cAAc,IAAI,IAAI;EAC9F;EACA,OAAO,WAAW,KAAK,YAAY,MAAM;CAC3C,CAAC;AACH;;AAGA,SAAS,eAAe,KAAa,SAA2B;CAG9D,MAAM,IAAI,MAAM,KAAK,eAAe,GAAG,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,WAAW,CAAC,IAAI,EAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,YAAY;CACrG,IAAI,EAAE,WAAW,aAAa,KAAK,EAAE,WAAW,WAAW,GAAG,OAAO;CACrE,IAAI,EAAE,WAAW,OAAO,GAEtB,OAAO,EAAE,WAAW,EAAE,WAAW,aAAa,KAAK,CAAC,EAAE,WAAW,gBAAgB;CAEnF,OAAO;AACT;;AAGA,SAAS,aAAqB;CAC5B,MAAM,IAAI,IAAI,OAAO;EAAE,KAAK;EAAM,QAAQ;CAAM,CAAC;CACjD,EAAE,IAAI,EACJ,UAAU,EAER,KAAK,OAAwB;EAE3B,OAAO,WADM,OAAO,UAAU,WAAW,QAAU,MAA4B,QAAQ,EACjE;CACxB,EACF,EACF,CAAC;CACD,OAAO;AACT;;;;;;AAgBA,SAAS,eAAe,QAAyB;CAC/C,KAAK,MAAM,KAAK,QAAQ;EACtB,KAAK,EAAE,SAAS,UAAU,EAAE,SAAS,YAAY,OAAO,EAAE,SAAS,UAC7D;OAAA,eAAe,EAAE,MAAM,EAAE,SAAS,OAAO,GAAG,EAAE,OAAO;EAAA;EAE3D,IAAI,EAAE,QAAQ,eAAe,EAAE,MAAM;EACrC,IAAI,EAAE,OAAO,eAAe,EAAE,KAAK;EACnC,IAAI,EAAE,QAAa;QAAA,MAAM,QAAQ,EAAE,QAAQ,IAAI,KAAK,QAAQ,eAAe,KAAK,MAAM;EAAA;EACtF,IAAI,EAAE,MAAW;QAAA,MAAM,OAAO,EAAE,MAAM,KAAK,MAAM,QAAQ,KAAK,IAAI,KAAK,QAAQ,eAAe,KAAK,MAAM;EAAA;CAC3G;AACF;;AAGA,SAAS,cAAc,MAAc,MAAsB;CACzD,OAAO,KAAK,QAAQ,2BAA2B,2BAA2B,KAAK,EAAE;AACnF;;;;;AAMA,SAAgB,mBAAmB,QAAwB;CACzD,MAAM,IAAI,WAAW;CACrB,IAAI;CACJ,IAAI;EACF,SAAS,EAAE,MAAM,MAAM;CACzB,QAAQ;EAEN,OAAO,QAAQ,WAAW,MAAM,EAAE;CACpC;CACA,eAAe,MAAmB;CAClC,IAAI,OAAO;CACX,IAAI,MAAM;CACV,KAAK,MAAM,OAAO,QAAQ;EACxB,IAAI;EACJ,IAAI;GACF,OAAO,EAAE,OAAO,CAAC,GAAG,CAAmC;EACzD,QAAQ;GACN,OAAO;EACT;EACA,IAAI,KAAK,KAAK,GAAG,OAAO,cAAc,MAAM,IAAI;EAChD,QAAS,IAAI,KAAK,MAAM,KAAK,CAAC,EAAE,UAAU;CAC5C;CACA,OAAO,OAAO,QAAQ,WAAW,MAAM,EAAE;AAC3C;;;;;AAMA,SAAgB,eAAe,QAAgB,QAAQ,QAAgB;CACrE,OAAO,qBAAqB,mBAAmB,MAAM,GAAG,KAAK;AAC/D;AAEA,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDnB,SAAS,qBAAqB,MAAc,OAAe,aAAa,IAAY;CAClF,OAAO;;;;;SAKA,WAAW,KAAK,EAAE;;EAEzB,aAAa,WAAW;;;;;EAKxB,KAAK;;;;;AAKP;;;;;;;;;;;;;;;;;;;;;;;;;ACtKA,SAAS,YAAoB;CAC3B,IAAI;EACF,IAAI,QAAQ,MAAM,OAAO,OAAO;EAChC,OAAO,aAAa,GAAG,MAAM;CAC/B,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,YAAoB;CAC3B,MAAM,MAAM,QAAQ,IAAI,qBAAqB,KAAK,KAAK,QAAQ,GAAG,SAAS;CAC3E,OAAO,KAAK,KAAK,KAAK,wBAAwB;AAChD;AAEA,SAAS,WAAW,SAA2B;CAC7C,IAAI;EACF,OAAO,kBAAkB,OAAkD;CAC7E,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,qBAAqB,KAA8B;CACjE,IAAI;EAEF,MAAM,KADM,KAAK,MAAM,GACV,CAAC,CAAC,cAAc,CAAC;EAG9B,OAAO;GAAE,cAFY,OAAO,GAAG,iBAAiB,YAAY,GAAG,aAAa,KAAK,IAAI,GAAG,eAAe,KAAA;GAEhF,cADF,OAAO,GAAG,SAAS,YAAY,GAAG,KAAK,KAAK,IAAI,GAAG,OAAO,KAAA;EAC3C;CACtC,QAAQ;EACN,OAAO,CAAC;CACV;AACF;AAEA,SAAS,YAAuC;CAC9C,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,aAAa,UAAU,GAAG,MAAM,CAAC;EAC3D,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,SAAS,CAAC,OAAO,WAAW,OAAO,KAAA;EAClE,OAAO;GACL,SAAS,OAAO;GAChB,OAAO,OAAO;GACd,WAAW,OAAO;GAClB,aAAa,OAAO,gBAAgB;EACtC;CACF,QAAQ;EACN;CACF;AACF;;;;;;AAOA,SAAS,oBAAoB,GAAwF;CACnH,IAAI,EAAE,cACJ,IAAI;EACF,MAAM,KAAK,aAAa,EAAE,cAAc,MAAM;EAC9C,IAAI,GAAG,KAAK,GAAG,OAAO;GAAE,UAAU;GAAI,OAAO,KAAK,SAAS,EAAE,cAAc,KAAK,QAAQ,EAAE,YAAY,CAAC;GAAG,UAAU,EAAE;EAAa;CACrI,QAAQ,CAER;CAEF,IAAI,EAAE,cAAc,OAAO;EAAE,UAAU,EAAE;EAAc,OAAO;CAAO;AAEvE;;;;;;AAOA,SAAS,cAAc,MAAc,UAAkD;CACrF,IAAI;CACJ,IAAI,UAGF,SAAS,GADI,SAAS,QAAQ,qBAAqB,EACpC,EAAE;MACZ;EACL,MAAM,MAAM,KAAK,KAAK,QAAQ,IAAI,qBAAqB,KAAK,KAAK,QAAQ,GAAG,SAAS,GAAG,OAAO;EAC/F,SAAS,KAAK,KAAK,KAAK,gBAAgB,QAAQ,IAAI,MAAM;CAC5D;CACA,IAAI;EACF,cAAc,QAAQ,MAAM,MAAM;EAClC,IAAI;GACF,OAAO,aAAa,OAAO,MAAM;EACnC,QAAQ;GACN,OAAO;EACT;CACF,QAAQ;EACN;CACF;AACF;AAEA,MAAa,uBAAuB,cAAc;CAChD,MAAM;EAAE,MAAM;EAA0B,aAAa;CAAiD;CACtG,MAAM,MAAM;EACV,IAAI;GACF,MAAM,MAAM,UAAU;GACtB,IAAI;GACJ,IAAI;IACF,UAAU,KAAK,MAAM,GAAG;GAC1B,QAAQ;IACN,UAAU,KAAA;GACZ;GACA,IAAI,WAAW,OAAO,GAAG;GACzB,MAAM,QAAQ,UAAU;GACxB,IAAI,CAAC,OAAO;GACZ,MAAM,OAAO,oBAAoB,qBAAqB,GAAG,CAAC;GAC1D,IAAI,CAAC,MAAM;GACX,MAAM,WAAW,cAAc,eAAe,KAAK,UAAU,KAAK,KAAK,GAAG,KAAK,QAAQ;GACvF,IAAI,CAAC,UAAU;GAEf,MAAM,IADa,eAAe,KACvB,CAAC,CAAC,KAAK,QAAQ;EAC5B,QAAQ,CAER;CACF;AACF,CAAC"}

package/dist/{internal-fast-dispatch-guard-CPlCrTlU.js → internal-fast-dispatch-guard-CYOWbxjX.js}

@@ -1,2 +1,2 @@
-import { n as internalFastDispatchGuard } from "./internal-fast-dispatch-guard-Xyu17k9X.js";
+import { n as internalFastDispatchGuard } from "./internal-fast-dispatch-guard-D2HcfXZv.js";
 export { internalFastDispatchGuard };