hammoc 1.4.0 → 1.6.0

package/packages/server/dist/utils/applySecretsPolicy.js

@@ -0,0 +1,204 @@
+/**
+ * Story 30.3 (Task 2.2): apply the three `secretsPolicy` modes to a payload
+ * before it is written into the bundle.
+ *
+ * Two operating shapes, mirroring `detectSecretsInValue` / `detectSecretsInText`:
+ *
+ *   1. `applyPolicyToValue` walks a JSON-like value (mcp config, settings.json
+ *      hooks block). For `excluded` the matched leaf is deleted from its
+ *      parent; for `placeholder` it is rewritten as `${ENV_REF_NAME}` using
+ *      `secretPlaceholderNamer`; for `included-explicit` the value is left
+ *      untouched.
+ *
+ *   2. `applyPolicyToText` walks line-oriented text (CLAUDE.md, agent body,
+ *      command body). For `excluded` the offending line is replaced with the
+ *      sentinel `<< SECRET REMOVED >>` so line numbers stay stable; for
+ *      `placeholder` every secret substring on that line is rewritten as
+ *      `${ENV_REF_NAME}`; for `included-explicit` the text is unchanged.
+ *
+ * Both return per-call counters that the caller aggregates into the
+ * `ImportApplySummary` (well, the export equivalent — same idea: surface to
+ * the user how many secrets were affected).
+ */
+import { ENV_REF_RE, SECRET_PATTERNS, shannonEntropy, } from './secretHeuristic.js';
+import { namePlaceholder } from './secretPlaceholderNamer.js';
+export const SECRET_REMOVED_TEXT_PLACEHOLDER = '<< SECRET REMOVED >>';
+const BASE64_NON_ALPHA_RE = /[0-9+/=]/;
+function matchPasses(s, pat) {
+    if (pat.minEntropy === undefined)
+        return true;
+    return shannonEntropy(s) >= pat.minEntropy && BASE64_NON_ALPHA_RE.test(s);
+}
+/** Iterate every secret substring inside `text`. */
+function* iterateSecretMatches(text) {
+    for (const pat of SECRET_PATTERNS) {
+        const re = pat.re.global ? pat.re : new RegExp(pat.re.source, pat.re.flags + 'g');
+        re.lastIndex = 0;
+        let m;
+        while ((m = re.exec(text)) !== null) {
+            const raw = m[0];
+            if (matchPasses(raw, pat)) {
+                yield { start: m.index, end: m.index + raw.length, raw, pat };
+            }
+            if (m.index === re.lastIndex)
+                re.lastIndex += 1;
+        }
+    }
+}
+function stripEnvRefs(text) {
+    return text.replace(ENV_REF_RE, '');
+}
+function containsSecret(text) {
+    const stripped = stripEnvRefs(text);
+    for (const _ of iterateSecretMatches(stripped)) {
+        return true;
+    }
+    return false;
+}
+/**
+ * Replace every secret substring inside `text` with the ENV-ref produced by
+ * the namer. Matches on the env-stripped clone first so existing `${FOO}`
+ * indirection isn't double-replaced.
+ */
+function replaceSecretsInText(text, makeName) {
+    // We need the original text positions but the secret-detection regex must
+    // not double-count existing ENV refs. Strategy: collect matches against the
+    // env-stripped clone, then translate offsets back to the original by
+    // walking through both strings in parallel.
+    const stripped = stripEnvRefs(text);
+    if (stripped === text) {
+        return rebuildText(text, makeName);
+    }
+    // When there were ENV refs, the safest fallback is to scan the original text
+    // directly. Existing `${FOO}` snippets won't match `SECRET_PATTERNS` (none of
+    // the regexes accept `{` or `}` in the middle), so direct scanning is fine.
+    return rebuildText(text, makeName);
+}
+function rebuildText(text, makeName) {
+    const matches = [];
+    for (const m of iterateSecretMatches(text)) {
+        matches.push({ start: m.start, end: m.end, raw: m.raw });
+    }
+    if (matches.length === 0)
+        return { text, replacedCount: 0 };
+    // Sort by start ascending, drop overlaps (keep first).
+    matches.sort((a, b) => a.start - b.start);
+    const nonOverlapping = [];
+    let lastEnd = -1;
+    for (const m of matches) {
+        if (m.start >= lastEnd) {
+            nonOverlapping.push(m);
+            lastEnd = m.end;
+        }
+    }
+    let out = '';
+    let cursor = 0;
+    let replaced = 0;
+    for (const m of nonOverlapping) {
+        out += text.slice(cursor, m.start);
+        out += '${' + makeName(m.raw, replaced) + '}';
+        cursor = m.end;
+        replaced += 1;
+    }
+    out += text.slice(cursor);
+    return { text: out, replacedCount: replaced };
+}
+export function applyPolicyToText(input) {
+    const { policy, domain, cardName, hookEvent, text } = input;
+    if (policy === 'included-explicit') {
+        return { text, removedCount: 0, replacedCount: 0 };
+    }
+    if (!text) {
+        return { text, removedCount: 0, replacedCount: 0 };
+    }
+    if (policy === 'excluded') {
+        // Replace each offending line with the sentinel so line numbers stay
+        // stable for downstream tools that index by line.
+        const lines = text.split(/\r?\n/);
+        let removed = 0;
+        for (let i = 0; i < lines.length; i += 1) {
+            if (containsSecret(lines[i])) {
+                lines[i] = SECRET_REMOVED_TEXT_PLACEHOLDER;
+                removed += 1;
+            }
+        }
+        return { text: lines.join('\n'), removedCount: removed, replacedCount: 0 };
+    }
+    // placeholder
+    const seenCounts = new Map();
+    const result = replaceSecretsInText(text, (_raw, idx) => {
+        const base = {
+            domain,
+            fieldPath: `body:${idx}`,
+            cardName,
+            hookEvent,
+        };
+        const baseName = namePlaceholder(base);
+        const count = seenCounts.get(baseName) ?? 0;
+        seenCounts.set(baseName, count + 1);
+        return count === 0 ? baseName : `${baseName}_${count + 1}`;
+    });
+    return { text: result.text, removedCount: 0, replacedCount: result.replacedCount };
+}
+export function applyPolicyToValue(input) {
+    const { policy, domain, cardName, hookEvent, value } = input;
+    if (policy === 'included-explicit') {
+        return { value, removedCount: 0, replacedCount: 0 };
+    }
+    const pathPrefix = input.pathPrefix ?? [];
+    let removedCount = 0;
+    let replacedCount = 0;
+    const seenCounts = new Map();
+    const transform = (v, p) => {
+        if (typeof v === 'string') {
+            const stripped = stripEnvRefs(v);
+            if (!stripped || !containsSecret(stripped)) {
+                return v;
+            }
+            if (policy === 'excluded') {
+                removedCount += 1;
+                // Return a sentinel that the caller (e.g. the mcp/hook config walker)
+                // will interpret as "delete this leaf" — strings, by themselves, can't
+                // disappear from their parent. We use the literal undefined sentinel
+                // and let the array/object handlers filter.
+                return SECRET_REMOVED_SENTINEL;
+            }
+            // placeholder
+            const baseName = namePlaceholder({
+                domain,
+                cardName,
+                hookEvent,
+                fieldPath: p.join('.'),
+            });
+            const count = seenCounts.get(baseName) ?? 0;
+            seenCounts.set(baseName, count + 1);
+            const name = count === 0 ? baseName : `${baseName}_${count + 1}`;
+            replacedCount += 1;
+            return '${' + name + '}';
+        }
+        if (Array.isArray(v)) {
+            return v
+                .map((item, i) => transform(item, [...p, String(i)]))
+                .filter((item) => item !== SECRET_REMOVED_SENTINEL);
+        }
+        if (v && typeof v === 'object') {
+            const out = {};
+            for (const [k, child] of Object.entries(v)) {
+                const next = transform(child, [...p, k]);
+                if (next !== SECRET_REMOVED_SENTINEL)
+                    out[k] = next;
+            }
+            return out;
+        }
+        return v;
+    };
+    const result = transform(value, pathPrefix);
+    // Top-level scalar might be the sentinel — flatten to undefined for callers.
+    return {
+        value: result === SECRET_REMOVED_SENTINEL ? undefined : result,
+        removedCount,
+        replacedCount,
+    };
+}
+const SECRET_REMOVED_SENTINEL = Symbol('secret-removed');
+//# sourceMappingURL=applySecretsPolicy.js.map

package/packages/server/dist/utils/applySecretsPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applySecretsPolicy.js","sourceRoot":"","sources":["../../src/utils/applySecretsPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EACL,UAAU,EACV,eAAe,EACf,cAAc,GAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAA6B,MAAM,6BAA6B,CAAC;AAGzF,MAAM,CAAC,MAAM,+BAA+B,GAAG,sBAAsB,CAAC;AAgCtE,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAEvC,SAAS,WAAW,CAAC,CAAS,EAAE,GAAkB;IAChD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,cAAc,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,oDAAoD;AACpD,QAAQ,CAAC,CAAC,oBAAoB,CAAC,IAAY;IACzC,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;QAClF,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACjB,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACjB,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,SAAS;gBAAE,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,IAAY,EAAE,QAAgD;IAC1F,0EAA0E;IAC1E,4EAA4E;IAC5E,qEAAqE;IACrE,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,OAAO,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,QAAgD;IACjF,MAAM,OAAO,GAAuD,EAAE,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAE5D,uDAAuD;IACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAmB,EAAE,CAAC;IAC1C,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC;YACvB,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACvB,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACnC,GAAG,IAAI,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,GAAG,CAAC;QAC9C,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC;QACf,QAAQ,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAA2B;IAC3D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC5D,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1B,qEAAqE;QACrE,kDAAkD;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,KAAK,CAAC,CAAC,CAAC,GAAG,+BAA+B,CAAC;gBAC3C,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAC7E,CAAC;IAED,cAAc;IACd,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACtD,MAAM,IAAI,GAAyB;YACjC,MAAM;YACN,SAAS,EAAE,QAAQ,GAAG,EAAE;YACxB,QAAQ;YACR,SAAS;SACV,CAAC;QACF,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5C,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACpC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAA4B;IAC7D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC7D,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1C,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE7C,MAAM,SAAS,GAAG,CAAC,CAAU,EAAE,CAAW,EAAW,EAAE;QACrD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,QAAQ,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3C,OAAO,CAAC,CAAC;YACX,CAAC;YACD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC1B,YAAY,IAAI,CAAC,CAAC;gBAClB,sEAAsE;gBACtE,uEAAuE;gBACvE,qEAAqE;gBACrE,4CAA4C;gBAC5C,OAAO,uBAAuB,CAAC;YACjC,CAAC;YACD,cAAc;YACd,MAAM,QAAQ,GAAG,eAAe,CAAC;gBAC/B,MAAM;gBACN,QAAQ;gBACR,SAAS;gBACT,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;aACvB,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5C,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACjE,aAAa,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC;iBACL,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBACpD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACzC,IAAI,IAAI,KAAK,uBAAuB;oBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;YACtD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5C,6EAA6E;IAC7E,OAAO;QACL,KAAK,EAAE,MAAM,KAAK,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;QAC9D,YAAY;QACZ,aAAa;KACd,CAAC;AACJ,CAAC;AAED,MAAM,uBAAuB,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC"}

package/packages/server/dist/utils/assertNoSecretOnShared.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Story 30.1 (Task 6.2): server-side guard that escalates a secret detection
+ * to a hard `HARNESS_SECRET_ON_SHARED` block when the target file is tracked
+ * by git (`shared` verdict from `harnessShareScopeService`).
+ *
+ * Sub-spike 6.2.0 decision: option (b) — distributed at the four domain
+ * services (agent / command / hook / mcp). Rationale:
+ *   - `harnessService.write` IS a single common call site, so option (a)
+ *     would also work for the raw write path. But AC4.d carves out
+ *     domain-specific scopes (settings.json values, hook command/prompt
+ *     fields, agent frontmatter) that the single point cannot meaningfully
+ *     filter without re-parsing the file. Distributing the helper keeps each
+ *     domain's existing per-field detection in place and just adds the
+ *     "shared → block" escalation on top.
+ *
+ * The helper performs the cheap path-classification round trip
+ * (`harnessShareScopeService.evaluate` is a single `.gitignore` load + one
+ * `isIgnored()` call). User-scope writes are no-ops (no `.gitignore`
+ * involved).
+ */
+import { type HarnessScope } from '@hammoc/shared';
+export interface AssertNoSecretOnSharedInput {
+    scope: HarnessScope;
+    projectSlug?: string;
+    /** Project-relative POSIX path of the file being written (e.g. `.claude/agents/dev.md`). */
+    relativePath: string;
+    /**
+     * Pre-computed detection result from the calling service. The helper does
+     * not re-run secret detection because each service knows which fields are
+     * in-scope per AC4.d.
+     */
+    secretDetected: boolean;
+    /** Optional secret locations (line numbers / dot-paths) to surface in the error. */
+    detectedAt?: {
+        lines?: number[];
+        paths?: string[];
+    };
+}
+export declare function assertNoSecretOnShared(input: AssertNoSecretOnSharedInput): Promise<void>;
+//# sourceMappingURL=assertNoSecretOnShared.d.ts.map

package/packages/server/dist/utils/assertNoSecretOnShared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertNoSecretOnShared.d.ts","sourceRoot":"","sources":["../../src/utils/assertNoSecretOnShared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAGnE,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,YAAY,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB,oFAAoF;IACpF,UAAU,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACrD;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,2BAA2B,GACjC,OAAO,CAAC,IAAI,CAAC,CAsBf"}

package/packages/server/dist/utils/assertNoSecretOnShared.js

@@ -0,0 +1,47 @@
+/**
+ * Story 30.1 (Task 6.2): server-side guard that escalates a secret detection
+ * to a hard `HARNESS_SECRET_ON_SHARED` block when the target file is tracked
+ * by git (`shared` verdict from `harnessShareScopeService`).
+ *
+ * Sub-spike 6.2.0 decision: option (b) — distributed at the four domain
+ * services (agent / command / hook / mcp). Rationale:
+ *   - `harnessService.write` IS a single common call site, so option (a)
+ *     would also work for the raw write path. But AC4.d carves out
+ *     domain-specific scopes (settings.json values, hook command/prompt
+ *     fields, agent frontmatter) that the single point cannot meaningfully
+ *     filter without re-parsing the file. Distributing the helper keeps each
+ *     domain's existing per-field detection in place and just adds the
+ *     "shared → block" escalation on top.
+ *
+ * The helper performs the cheap path-classification round trip
+ * (`harnessShareScopeService.evaluate` is a single `.gitignore` load + one
+ * `isIgnored()` call). User-scope writes are no-ops (no `.gitignore`
+ * involved).
+ */
+import { HARNESS_ERRORS } from '@hammoc/shared';
+import { harnessShareScopeService } from '../services/harnessShareScopeService.js';
+export async function assertNoSecretOnShared(input) {
+    if (!input.secretDetected)
+        return;
+    // User scope (`~/.claude`) is not git-tracked — `.gitignore` does not apply.
+    if (input.scope !== 'project' || !input.projectSlug)
+        return;
+    const result = await harnessShareScopeService.evaluate({
+        projectSlug: input.projectSlug,
+        relativePaths: [input.relativePath],
+    });
+    const verdict = result.cards[input.relativePath];
+    // Only `shared` triggers the hard block. `local` / `fullyIgnored` keep
+    // the existing per-service acknowledgement flow.
+    if (verdict !== 'shared')
+        return;
+    const err = new Error('plaintext secret detected on a git-tracked file');
+    err.code = HARNESS_ERRORS.HARNESS_SECRET_ON_SHARED.code;
+    err.relativePath = input.relativePath;
+    if (input.detectedAt?.lines)
+        err.lines = input.detectedAt.lines;
+    if (input.detectedAt?.paths)
+        err.paths = input.detectedAt.paths;
+    throw err;
+}
+//# sourceMappingURL=assertNoSecretOnShared.js.map

package/packages/server/dist/utils/assertNoSecretOnShared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertNoSecretOnShared.js","sourceRoot":"","sources":["../../src/utils/assertNoSecretOnShared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,cAAc,EAAqB,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAiBnF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAkC;IAElC,IAAI,CAAC,KAAK,CAAC,cAAc;QAAE,OAAO;IAClC,6EAA6E;IAC7E,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO;IAE5D,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,QAAQ,CAAC;QACrD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,aAAa,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAEjD,uEAAuE;IACvE,iDAAiD;IACjD,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO;IAEjC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,iDAAiD,CACN,CAAC;IAClE,GAAG,CAAC,IAAI,GAAG,cAAc,CAAC,wBAAwB,CAAC,IAAI,CAAC;IACxD,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACtC,IAAI,KAAK,CAAC,UAAU,EAAE,KAAK;QAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;IAChE,IAAI,KAAK,CAAC,UAAU,EAAE,KAAK;QAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;IAChE,MAAM,GAAG,CAAC;AACZ,CAAC"}

package/packages/server/dist/utils/assertSafeBundlePath.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Story 30.5 (AC9): single-source guard against ZIP-slip / path-traversal
+ * during harness bundle import.
+ *
+ * `jszip` does not normalise entry paths — a malicious bundle can ship an
+ * entry called `../../etc/passwd` or `C:\Windows\System32\evil.dll` and naive
+ * code that joins it to the project root would write outside the target.
+ * Every entry path read from an import ZIP must therefore pass through this
+ * function before the bundle service touches disk.
+ *
+ * Rejected shapes:
+ *   - absolute POSIX (`/etc/...`)
+ *   - absolute Windows (`C:\...`, `C:/...`)
+ *   - UNC (`\\server\share`, `//server/share`)
+ *   - any traversal component (`..` segment anywhere in the path)
+ *   - embedded null byte (would terminate the path early in fs APIs)
+ *
+ * Accepted shapes:
+ *   - POSIX-style relative paths (`skills/foo/SKILL.md`)
+ *   - Windows-style backslashes are normalised, then validated
+ *   - the empty string (the zip "/" root) is rejected as it carries no entry
+ */
+export declare class UnsafeBundlePathError extends Error {
+    readonly code = "HARNESS_BUNDLE_UNSAFE_PATH";
+    readonly relativePath: string;
+    constructor(relativePath: string, reason: string);
+}
+export declare function assertSafeBundlePath(relativePath: string): void;
+//# sourceMappingURL=assertSafeBundlePath.d.ts.map

package/packages/server/dist/utils/assertSafeBundlePath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertSafeBundlePath.d.ts","sourceRoot":"","sources":["../../src/utils/assertSafeBundlePath.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,gCAAgC;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;gBAClB,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAIjD;AAED,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAmB/D"}

package/packages/server/dist/utils/assertSafeBundlePath.js

@@ -0,0 +1,53 @@
+/**
+ * Story 30.5 (AC9): single-source guard against ZIP-slip / path-traversal
+ * during harness bundle import.
+ *
+ * `jszip` does not normalise entry paths — a malicious bundle can ship an
+ * entry called `../../etc/passwd` or `C:\Windows\System32\evil.dll` and naive
+ * code that joins it to the project root would write outside the target.
+ * Every entry path read from an import ZIP must therefore pass through this
+ * function before the bundle service touches disk.
+ *
+ * Rejected shapes:
+ *   - absolute POSIX (`/etc/...`)
+ *   - absolute Windows (`C:\...`, `C:/...`)
+ *   - UNC (`\\server\share`, `//server/share`)
+ *   - any traversal component (`..` segment anywhere in the path)
+ *   - embedded null byte (would terminate the path early in fs APIs)
+ *
+ * Accepted shapes:
+ *   - POSIX-style relative paths (`skills/foo/SKILL.md`)
+ *   - Windows-style backslashes are normalised, then validated
+ *   - the empty string (the zip "/" root) is rejected as it carries no entry
+ */
+const ABSOLUTE_WIN_RE = /^[A-Za-z]:[\\/]/;
+const TRAVERSAL_SEGMENT_RE = /(^|[\\/])\.\.([\\/]|$)/;
+export class UnsafeBundlePathError extends Error {
+    code = 'HARNESS_BUNDLE_UNSAFE_PATH';
+    relativePath;
+    constructor(relativePath, reason) {
+        super(`unsafe bundle entry "${relativePath}": ${reason}`);
+        this.relativePath = relativePath;
+    }
+}
+export function assertSafeBundlePath(relativePath) {
+    if (typeof relativePath !== 'string' || relativePath.length === 0) {
+        throw new UnsafeBundlePathError(String(relativePath), 'empty entry path');
+    }
+    if (relativePath.includes('\0')) {
+        throw new UnsafeBundlePathError(relativePath, 'null byte in entry path');
+    }
+    if (relativePath.startsWith('/') || relativePath.startsWith('\\')) {
+        throw new UnsafeBundlePathError(relativePath, 'absolute path not allowed');
+    }
+    if (ABSOLUTE_WIN_RE.test(relativePath)) {
+        throw new UnsafeBundlePathError(relativePath, 'Windows-absolute path not allowed');
+    }
+    if (relativePath.startsWith('\\\\') || relativePath.startsWith('//')) {
+        throw new UnsafeBundlePathError(relativePath, 'UNC path not allowed');
+    }
+    if (TRAVERSAL_SEGMENT_RE.test(relativePath)) {
+        throw new UnsafeBundlePathError(relativePath, 'parent-directory traversal not allowed');
+    }
+}
+//# sourceMappingURL=assertSafeBundlePath.js.map

package/packages/server/dist/utils/assertSafeBundlePath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertSafeBundlePath.js","sourceRoot":"","sources":["../../src/utils/assertSafeBundlePath.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAC1C,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AAEtD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,GAAG,4BAA4B,CAAC;IACpC,YAAY,CAAS;IAC9B,YAAY,YAAoB,EAAE,MAAc;QAC9C,KAAK,CAAC,wBAAwB,YAAY,MAAM,MAAM,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB,CAAC,YAAoB;IACvD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,qBAAqB,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,qBAAqB,CAAC,YAAY,EAAE,2BAA2B,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,qBAAqB,CAAC,YAAY,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,qBAAqB,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,qBAAqB,CAAC,YAAY,EAAE,wCAAwC,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC"}

package/packages/server/dist/utils/bundledBinaryModelSupport.d.ts

@@ -0,0 +1,7 @@
+/**
+ * True when `model` is a known native-1M model but the bundled binary does NOT
+ * recognize it — so its 1M context silently falls back to ~200K. Conservative:
+ * returns false (no warning) for bare aliases, unreadable binaries, or uncertainty.
+ */
+export declare function modelMissingNative1MSupport(model?: string): Promise<boolean>;
+//# sourceMappingURL=bundledBinaryModelSupport.d.ts.map

package/packages/server/dist/utils/bundledBinaryModelSupport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundledBinaryModelSupport.d.ts","sourceRoot":"","sources":["../../src/utils/bundledBinaryModelSupport.ts"],"names":[],"mappings":"AA8EA;;;;GAIG;AACH,wBAAsB,2BAA2B,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAgBlF"}

package/packages/server/dist/utils/bundledBinaryModelSupport.js

@@ -0,0 +1,107 @@
+/**
+ * Detects whether the bundled Claude Code engine (the platform binary shipped
+ * inside @anthropic-ai/claude-agent-sdk-<platform>-<arch>) actually recognizes a
+ * given model id.
+ *
+ * Native 1M context is opted into via the `[1m]` model suffix, but the binary
+ * only honors it for models baked into its own model table. If the selected model
+ * is newer than the bundled binary, the suffix is silently ignored and the model
+ * falls back to ~200K — which makes long sessions auto-compact far below their
+ * real limit and can break resume (thinking-block signature rejection). This util
+ * lets the server surface that silent fallback instead of failing mysteriously.
+ */
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+import { createRequire } from 'module';
+import { isNative1MModel } from '@hammoc/shared';
+import { createLogger } from './logger.js';
+const log = createLogger('bundledBinaryModelSupport');
+/** Claude model ids embedded in the binary, e.g. claude-opus-4-8, claude-sonnet-4-6, claude-opus-4-20250514. */
+const MODEL_ID_RE = /claude-(?:opus|sonnet|haiku)-[0-9]+(?:-[0-9]+)*/g;
+let cache = null;
+let scanPromise = null;
+/** Resolve the platform binary path (claude.exe on Windows, claude elsewhere), or null if not installed. */
+function resolveBundledBinaryPath() {
+    const pkg = `@anthropic-ai/claude-agent-sdk-${os.platform()}-${os.arch()}`;
+    const exe = os.platform() === 'win32' ? 'claude.exe' : 'claude';
+    try {
+        const require = createRequire(import.meta.url);
+        const pkgJsonPath = require.resolve(`${pkg}/package.json`);
+        return path.join(path.dirname(pkgJsonPath), exe);
+    }
+    catch {
+        return null;
+    }
+}
+/** Stream the (large) binary in chunks and collect every Claude model id it contains. */
+function scanBinaryForModels(binPath) {
+    return new Promise((resolve) => {
+        const models = new Set();
+        let tail = '';
+        const stream = fs.createReadStream(binPath, { encoding: 'latin1', highWaterMark: 1 << 22 });
+        stream.on('data', (chunk) => {
+            const text = tail + chunk;
+            const matches = text.match(MODEL_ID_RE);
+            if (matches)
+                for (const m of matches)
+                    models.add(m);
+            // keep a small overlap so ids straddling a chunk boundary still match
+            tail = text.slice(-64);
+        });
+        stream.on('end', () => resolve(models));
+        stream.on('error', (err) => {
+            log.warn(`binary model scan failed: ${err instanceof Error ? err.message : String(err)}`);
+            resolve(new Set());
+        });
+    });
+}
+/** Model ids the bundled binary recognizes (memoized by path+mtime). Empty set if unreadable. */
+async function getRecognizedModels() {
+    const binPath = resolveBundledBinaryPath();
+    if (!binPath)
+        return new Set();
+    let mtimeMs = 0;
+    try {
+        mtimeMs = fs.statSync(binPath).mtimeMs;
+    }
+    catch {
+        return new Set();
+    }
+    if (cache && cache.path === binPath && cache.mtimeMs === mtimeMs)
+        return cache.models;
+    if (!scanPromise) {
+        scanPromise = scanBinaryForModels(binPath).then((models) => {
+            cache = { path: binPath, mtimeMs, models };
+            scanPromise = null;
+            return models;
+        });
+    }
+    return scanPromise;
+}
+/**
+ * True when `model` is a known native-1M model but the bundled binary does NOT
+ * recognize it — so its 1M context silently falls back to ~200K. Conservative:
+ * returns false (no warning) for bare aliases, unreadable binaries, or uncertainty.
+ */
+export async function modelMissingNative1MSupport(model) {
+    if (!model)
+        return false;
+    const base = model.replace(/\[1m\]$/i, '');
+    // Only fully-versioned ids are checkable against the binary; bare aliases like
+    // 'opus'/'sonnet' resolve to a concrete model server-side, so skip them.
+    if (!/^claude-(?:opus|sonnet|haiku)-[0-9]/.test(base))
+        return false;
+    if (!isNative1MModel(base))
+        return false;
+    const recognized = await getRecognizedModels();
+    if (recognized.size === 0)
+        return false; // couldn't read the binary → don't false-warn
+    for (const r of recognized) {
+        // exact, or either is the date-suffixed snapshot of the other (suffix always starts with '-')
+        if (r === base || r.startsWith(`${base}-`) || base.startsWith(`${r}-`))
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=bundledBinaryModelSupport.js.map

package/packages/server/dist/utils/bundledBinaryModelSupport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundledBinaryModelSupport.js","sourceRoot":"","sources":["../../src/utils/bundledBinaryModelSupport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,GAAG,GAAG,YAAY,CAAC,2BAA2B,CAAC,CAAC;AAEtD,gHAAgH;AAChH,MAAM,WAAW,GAAG,kDAAkD,CAAC;AAEvE,IAAI,KAAK,GAAkE,IAAI,CAAC;AAChF,IAAI,WAAW,GAAgC,IAAI,CAAC;AAEpD,4GAA4G;AAC5G,SAAS,wBAAwB;IAC/B,MAAM,GAAG,GAAG,kCAAkC,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3E,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,SAAS,mBAAmB,CAAC,OAAe;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5F,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,IAAI,GAAG,IAAI,GAAI,KAAgB,CAAC;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACxC,IAAI,OAAO;gBAAE,KAAK,MAAM,CAAC,IAAI,OAAO;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACpD,sEAAsE;YACtE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,GAAG,CAAC,IAAI,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1F,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iGAAiG;AACjG,KAAK,UAAU,mBAAmB;IAChC,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,GAAG,EAAE,CAAC;IAAC,CAAC;IAC3E,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IACtF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACzD,KAAK,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAC3C,WAAW,GAAG,IAAI,CAAC;YACnB,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAAc;IAC9D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3C,+EAA+E;IAC/E,yEAAyE;IACzE,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAEzC,MAAM,UAAU,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAC/C,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,8CAA8C;IAEvF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,8FAA8F;QAC9F,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/packages/server/dist/utils/effortUtils.d.ts

@@ -6,13 +6,13 @@ import type { ThinkingEffort } from '@hammoc/shared';
 /**
  * Clamp unsupported effort levels:
  *   · 'max'   → 'high' unless model supports it (Opus 4.6+, Sonnet 4.6)
- *   · 'xhigh' → 'high' unless model supports it (Opus 4.7 only)
+ *   · 'xhigh' → 'high' unless model supports it (Opus 4.7+)
  * Other levels pass through unchanged.
  */
 export declare function clampEffortForModel(effort: ThinkingEffort | undefined, model: string | undefined): ThinkingEffort | undefined;
 /**
  * Whether the model supports Anthropic's adaptive thinking mode
- * (`thinking: { type: 'adaptive' }`). Opus 4.7 requires adaptive;
+ * (`thinking: { type: 'adaptive' }`). Opus 4.7+ requires adaptive;
  * Opus 4.6 and Sonnet 4.6 accept adaptive as the recommended mode.
  * Older models (Sonnet 4.5, Opus 4.5, Haiku, Sonnet 4, etc.) do NOT
  * support adaptive and must stay on the legacy `maxThinkingTokens` path.

package/packages/server/dist/utils/effortUtils.js

@@ -5,15 +5,15 @@
 /**
  * Clamp unsupported effort levels:
  *   · 'max'   → 'high' unless model supports it (Opus 4.6+, Sonnet 4.6)
- *   · 'xhigh' → 'high' unless model supports it (Opus 4.7 only)
+ *   · 'xhigh' → 'high' unless model supports it (Opus 4.7+)
  * Other levels pass through unchanged.
  */
 export function clampEffortForModel(effort, model) {
     if (!effort)
         return effort;
     const supportsMax = !!model && (model === 'opus' || model === 'sonnet' ||
-        model.includes('opus-4-6') || model.includes('opus-4-7') || model.includes('sonnet-4-6'));
-    const supportsXHigh = !!model && (model === 'opus' || model.includes('opus-4-7'));
+        model.includes('opus-4-6') || model.includes('opus-4-7') || model.includes('opus-4-8') || model.includes('sonnet-4-6'));
+    const supportsXHigh = !!model && (model === 'opus' || model.includes('opus-4-7') || model.includes('opus-4-8'));
     if (effort === 'max' && !supportsMax)
         return 'high';
     if (effort === 'xhigh' && !supportsXHigh)
@@ -22,7 +22,7 @@ export function clampEffortForModel(effort, model) {
 }
 /**
  * Whether the model supports Anthropic's adaptive thinking mode
- * (`thinking: { type: 'adaptive' }`). Opus 4.7 requires adaptive;
+ * (`thinking: { type: 'adaptive' }`). Opus 4.7+ requires adaptive;
  * Opus 4.6 and Sonnet 4.6 accept adaptive as the recommended mode.
  * Older models (Sonnet 4.5, Opus 4.5, Haiku, Sonnet 4, etc.) do NOT
  * support adaptive and must stay on the legacy `maxThinkingTokens` path.
@@ -31,6 +31,6 @@ export function supportsAdaptiveThinking(model) {
     if (!model)
         return false;
     return (model === 'opus' || model === 'sonnet' ||
-        model.includes('opus-4-6') || model.includes('opus-4-7') || model.includes('sonnet-4-6'));
+        model.includes('opus-4-6') || model.includes('opus-4-7') || model.includes('opus-4-8') || model.includes('sonnet-4-6'));
 }
 //# sourceMappingURL=effortUtils.js.map

package/packages/server/dist/utils/effortUtils.js.map

@@ -1 +1 @@
-{"version":3,"file":"effortUtils.js","sourceRoot":"","sources":["../../src/utils/effortUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAkC,EAAE,KAAyB;IAC/F,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3B,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,IAAI,CAC7B,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ;QACtC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CACzF,CAAC;IACF,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAClF,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,WAAW;QAAE,OAAO,MAAM,CAAC;IACpD,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,aAAa;QAAE,OAAO,MAAM,CAAC;IACxD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAyB;IAChE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,CACL,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ;QACtC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CACzF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"effortUtils.js","sourceRoot":"","sources":["../../src/utils/effortUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAkC,EAAE,KAAyB;IAC/F,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3B,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,IAAI,CAC7B,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ;QACtC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CACvH,CAAC;IACF,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAChH,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,WAAW;QAAE,OAAO,MAAM,CAAC;IACpD,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,aAAa;QAAE,OAAO,MAAM,CAAC;IACxD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAyB;IAChE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,CACL,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ;QACtC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CACvH,CAAC;AACJ,CAAC"}

package/packages/server/dist/utils/errors.d.ts

@@ -12,6 +12,7 @@ export declare enum SDKErrorCode {
     NETWORK_ERROR = "NETWORK_ERROR",
     INVALID_REQUEST = "INVALID_REQUEST",
     CONTEXT_OVERFLOW = "CONTEXT_OVERFLOW",
+    RESUME_THINKING_INVALID = "RESUME_THINKING_INVALID",
     SERVICE_UNAVAILABLE = "SERVICE_UNAVAILABLE",
     PERMISSION_DENIED = "PERMISSION_DENIED",
     INVALID_PATH = "INVALID_PATH",

package/packages/server/dist/utils/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;GAEG;AACH,oBAAY,YAAY;IACtB,OAAO,YAAY;IACnB,mBAAmB,wBAAwB;IAC3C,oBAAoB,yBAAyB;IAC7C,aAAa,kBAAkB;IAC/B,eAAe,oBAAoB;IACnC,gBAAgB,qBAAqB;IACrC,mBAAmB,wBAAwB;IAC3C,iBAAiB,sBAAsB;IACvC,YAAY,iBAAiB;IAC7B,OAAO,YAAY;CACpB;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAWzD,CAAC;AAEF;;GAEG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC;gBAG7B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,YAAmC,EACzC,OAAO,CAAC,EAAE;QACR,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,KAAK,CAAC;KACvB;IAeH,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CASlC;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,QAAQ;gBAC9B,UAAU,GAAE,MAAW,EAAE,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM;CAQ7E;AAED;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,QAAQ;gBACnC,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM;CAQpD;AAED;;GAEG;AACH,qBAAa,YAAa,SAAQ,QAAQ;gBAC5B,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM;CAQpD;AAED;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,QAAQ;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM;CASlE;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,QAAQ;gBACvC,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM;CAQpD;AAED;;GAEG;AACH,qBAAa,YAAa,SAAQ,QAAQ;gBAC5B,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM;CAQpD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,CAsErE"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;GAEG;AACH,oBAAY,YAAY;IACtB,OAAO,YAAY;IACnB,mBAAmB,wBAAwB;IAC3C,oBAAoB,yBAAyB;IAC7C,aAAa,kBAAkB;IAC/B,eAAe,oBAAoB;IACnC,gBAAgB,qBAAqB;IAIrC,uBAAuB,4BAA4B;IACnD,mBAAmB,wBAAwB;IAC3C,iBAAiB,sBAAsB;IACvC,YAAY,iBAAiB;IAC7B,OAAO,YAAY;CACpB;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAYzD,CAAC;AAEF;;GAEG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC;gBAG7B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,YAAmC,EACzC,OAAO,CAAC,EAAE;QACR,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,KAAK,CAAC;KACvB;IAeH,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CASlC;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,QAAQ;gBAC9B,UAAU,GAAE,MAAW,EAAE,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM;CAQ7E;AAED;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,QAAQ;gBACnC,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM;CAQpD;AAED;;GAEG;AACH,qBAAa,YAAa,SAAQ,QAAQ;gBAC5B,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM;CAQpD;AAED;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,QAAQ;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM;CASlE;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,QAAQ;gBACvC,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM;CAQpD;AAED;;GAEG;AACH,qBAAa,YAAa,SAAQ,QAAQ;gBAC5B,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM;CAQpD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,CAqFrE"}