hammoc 1.5.0 → 1.6.0

package/packages/server/dist/services/tokenCountService.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Story 31.3 (Task A.3 / A.5): token attribution + exact count_tokens proxy.
+ *
+ * Two responsibilities, sharing one text-resolution path so the "exact count"
+ * input and the "approximation" input are always the same bytes (N-1):
+ *
+ *   1. listTokenAttribution(projectSlug) — enumerate the measured harness
+ *      elements (project/global CLAUDE.md · each skill's SKILL.md · the
+ *      Hammoc-managed context-builder injection) and report UTF-8 byte size +
+ *      `approxTokens = ceil(bytes/4)` + a sha256 content hash (AC-B1 / AC-B2).
+ *
+ *   2. exactCount(projectSlug, req) — proxy the official `count_tokens` via the
+ *      already-installed `@anthropic-ai/sdk` `messages.countTokens` (spike #2,
+ *      §15 — no new dependency), keyed by a server-recomputed content hash
+ *      (N-B: the request hash is only an optimistic hint). Failures are
+ *      non-blocking (`failed: true`) so the client keeps the approximation
+ *      (AC-B3.c).
+ *
+ * Enumeration REUSES existing controllers/services (claudeMdService,
+ * harnessSkillService, contextBuilderService) — no new file scanner (S-2). The
+ * context-builder injection is estimated from the Story 31.2 manifest WITHOUT
+ * executing the hook (dynamic variable / command values are placeholders).
+ *
+ * Per spike #1 (§14) the SERVER approximation tier is byte `size/4` only — the
+ * `@anthropic-ai/tokenizer` tier was NOT adopted (Task A.4 skipped).
+ */
+import { type TokenAttributionItem, type ExactTokenCountRequest, type ExactTokenCountResponse } from '@hammoc/shared';
+/** ceil(bytes / 4) — the size-based heuristic (§14). */
+export declare function approxTokensFromBytes(bytes: number): number;
+declare class TokenCountService {
+    /** sha256(text) → token count. In-memory; persisted best-effort to disk. */
+    private cache;
+    private cacheLoaded;
+    private cacheFilePath;
+    private loadCache;
+    private persistCache;
+    /**
+     * Enumerate measured harness elements (AC-B1.a). Missing CLAUDE.md files and a
+     * disabled/empty context builder are omitted (they contribute no tokens).
+     */
+    listTokenAttribution(projectSlug: string): Promise<TokenAttributionItem[]>;
+    /**
+     * Exact count for one element (AC-B3). The text is re-resolved server-side and
+     * its sha256 is the AUTHORITATIVE cache key (N-B) — the request `contentHash`
+     * is only an optimistic hint. count_tokens failures return `failed: true`.
+     */
+    exactCount(projectSlug: string, req: ExactTokenCountRequest): Promise<ExactTokenCountResponse>;
+    private makeItem;
+    /** Resolve the text used for BOTH attribution and exact-count (N-1). */
+    private resolveElementText;
+    private readClaudeMd;
+    /**
+     * Read a skill's SKILL.md, validating `elementPath` against the enumerated
+     * skills so an arbitrary client path can never be read (the path must be one
+     * the server itself vouched for in listTokenAttribution).
+     */
+    private readSkillTextByPath;
+    /**
+     * Assemble the context-builder `additionalContext` text WITHOUT executing the
+     * hook (N-1). Reference files are read (their content dominates the size);
+     * dynamic variables / acknowledged commands contribute only their block
+     * headers with a `(dynamic)` placeholder. Mirrors the block format of
+     * `contextBuilderScriptTemplate` for the statically-knowable parts. Returns ''
+     * when the builder is disabled or empty.
+     */
+    private assembleContextBuilderText;
+    private callCountTokens;
+}
+export declare const tokenCountService: TokenCountService;
+export {};
+//# sourceMappingURL=tokenCountService.d.ts.map

package/packages/server/dist/services/tokenCountService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenCountService.d.ts","sourceRoot":"","sources":["../../src/services/tokenCountService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAQH,OAAO,EACL,KAAK,oBAAoB,EAEzB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC7B,MAAM,gBAAgB,CAAC;AAwBxB,wDAAwD;AACxD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AA6BD,cAAM,iBAAiB;IACrB,4EAA4E;IAC5E,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,WAAW,CAAS;IAE5B,OAAO,CAAC,aAAa;YAIP,SAAS;YAcT,YAAY;IAU1B;;;OAGG;IACG,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAkChF;;;;OAIG;IACG,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAqBpG,OAAO,CAAC,QAAQ;IAiBhB,wEAAwE;YAC1D,kBAAkB;YAqBlB,YAAY;IAW1B;;;;OAIG;YACW,mBAAmB;IAkBjC;;;;;;;OAOG;YACW,0BAA0B;YAwC1B,eAAe;CAiB9B;AAED,eAAO,MAAM,iBAAiB,mBAA0B,CAAC"}

package/packages/server/dist/services/tokenCountService.js

@@ -0,0 +1,313 @@
+/**
+ * Story 31.3 (Task A.3 / A.5): token attribution + exact count_tokens proxy.
+ *
+ * Two responsibilities, sharing one text-resolution path so the "exact count"
+ * input and the "approximation" input are always the same bytes (N-1):
+ *
+ *   1. listTokenAttribution(projectSlug) — enumerate the measured harness
+ *      elements (project/global CLAUDE.md · each skill's SKILL.md · the
+ *      Hammoc-managed context-builder injection) and report UTF-8 byte size +
+ *      `approxTokens = ceil(bytes/4)` + a sha256 content hash (AC-B1 / AC-B2).
+ *
+ *   2. exactCount(projectSlug, req) — proxy the official `count_tokens` via the
+ *      already-installed `@anthropic-ai/sdk` `messages.countTokens` (spike #2,
+ *      §15 — no new dependency), keyed by a server-recomputed content hash
+ *      (N-B: the request hash is only an optimistic hint). Failures are
+ *      non-blocking (`failed: true`) so the client keeps the approximation
+ *      (AC-B3.c).
+ *
+ * Enumeration REUSES existing controllers/services (claudeMdService,
+ * harnessSkillService, contextBuilderService) — no new file scanner (S-2). The
+ * context-builder injection is estimated from the Story 31.2 manifest WITHOUT
+ * executing the hook (dynamic variable / command values are placeholders).
+ *
+ * Per spike #1 (§14) the SERVER approximation tier is byte `size/4` only — the
+ * `@anthropic-ai/tokenizer` tier was NOT adopted (Task A.4 skipped).
+ */
+import fs from 'node:fs/promises';
+import { readFileSync } from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { createHash } from 'node:crypto';
+import Anthropic from '@anthropic-ai/sdk';
+import { createLogger } from '../utils/logger.js';
+import { claudeMdService } from './claudeMdService.js';
+import { harnessSkillService } from './harnessSkillService.js';
+import { contextBuilderService } from './contextBuilderService.js';
+import { projectService } from './projectService.js';
+const log = createLogger('tokenCountService');
+/**
+ * Model passed to count_tokens. The count is tokenizer-family stable across
+ * Claude 4.x, so any current model works; overridable via env in case the
+ * default is later deprecated. spike #2 verified the call live.
+ */
+const COUNT_TOKENS_MODEL = process.env.OBSERVABILITY_COUNT_TOKENS_MODEL || 'claude-sonnet-4-6';
+function sha256(text) {
+    return createHash('sha256').update(text, 'utf8').digest('hex');
+}
+function utf8Bytes(text) {
+    return Buffer.byteLength(text, 'utf8');
+}
+/** ceil(bytes / 4) — the size-based heuristic (§14). */
+export function approxTokensFromBytes(bytes) {
+    return Math.ceil(Math.max(0, bytes) / 4);
+}
+function samePath(a, b) {
+    const na = path.normalize(a);
+    const nb = path.normalize(b);
+    return process.platform === 'win32' ? na.toLowerCase() === nb.toLowerCase() : na === nb;
+}
+/**
+ * Construct an Anthropic client for count_tokens (spike #2). Priority:
+ * `ANTHROPIC_API_KEY` → the Claude Code OAuth access token from
+ * `~/.claude/.credentials.json` (verified live). Returns null when neither is
+ * available — the caller degrades gracefully.
+ */
+function getAnthropicClient() {
+    if (process.env.ANTHROPIC_API_KEY)
+        return new Anthropic();
+    try {
+        const credPath = path.join(os.homedir(), '.claude', '.credentials.json');
+        const cred = JSON.parse(readFileSync(credPath, 'utf8'));
+        const token = cred?.claudeAiOauth?.accessToken;
+        if (token)
+            return new Anthropic({ authToken: token });
+    }
+    catch {
+        // no credentials — fall through.
+    }
+    return null;
+}
+class TokenCountService {
+    /** sha256(text) → token count. In-memory; persisted best-effort to disk. */
+    cache = new Map();
+    cacheLoaded = false;
+    cacheFilePath() {
+        return path.join(os.homedir(), '.hammoc', 'observability', 'token-count-cache.json');
+    }
+    async loadCache() {
+        if (this.cacheLoaded)
+            return;
+        this.cacheLoaded = true;
+        try {
+            const text = await fs.readFile(this.cacheFilePath(), 'utf8');
+            const obj = JSON.parse(text);
+            for (const [k, v] of Object.entries(obj)) {
+                if (typeof v === 'number')
+                    this.cache.set(k, v);
+            }
+        }
+        catch {
+            // missing/corrupt — start empty.
+        }
+    }
+    async persistCache() {
+        try {
+            const file = this.cacheFilePath();
+            await fs.mkdir(path.dirname(file), { recursive: true });
+            await fs.writeFile(file, JSON.stringify(Object.fromEntries(this.cache)), 'utf8');
+        }
+        catch (err) {
+            log.warn(`token cache persist failed: ${err.message}`);
+        }
+    }
+    /**
+     * Enumerate measured harness elements (AC-B1.a). Missing CLAUDE.md files and a
+     * disabled/empty context builder are omitted (they contribute no tokens).
+     */
+    async listTokenAttribution(projectSlug) {
+        const items = [];
+        // project / global CLAUDE.md
+        const projectMd = await this.readClaudeMd({ scope: 'project', projectSlug });
+        if (projectMd)
+            items.push(this.makeItem('claudeMd-project', 'CLAUDE.md (project)', projectMd.text, projectMd.path));
+        const globalMd = await this.readClaudeMd({ scope: 'user' });
+        if (globalMd)
+            items.push(this.makeItem('claudeMd-global', 'CLAUDE.md (global)', globalMd.text, globalMd.path));
+        // each skill's SKILL.md (active source only)
+        try {
+            const { cards } = await harnessSkillService.listCards(projectSlug);
+            for (const card of cards) {
+                const root = card.sources[0]?.absoluteRoot;
+                if (!root)
+                    continue;
+                const skillMd = path.join(root, 'SKILL.md');
+                try {
+                    const text = await fs.readFile(skillMd, 'utf8');
+                    items.push(this.makeItem('skill', `skill: ${card.name}`, text, skillMd));
+                }
+                catch {
+                    // SKILL.md unreadable — skip this card.
+                }
+            }
+        }
+        catch (err) {
+            log.warn(`skill enumeration failed: ${err.message}`);
+        }
+        // Hammoc-managed context builder injection (manifest-assembled, no execution)
+        const cbText = await this.assembleContextBuilderText(projectSlug);
+        if (cbText)
+            items.push(this.makeItem('contextBuilder', 'Context builder injection', cbText));
+        return items;
+    }
+    /**
+     * Exact count for one element (AC-B3). The text is re-resolved server-side and
+     * its sha256 is the AUTHORITATIVE cache key (N-B) — the request `contentHash`
+     * is only an optimistic hint. count_tokens failures return `failed: true`.
+     */
+    async exactCount(projectSlug, req) {
+        const text = await this.resolveElementText(projectSlug, req.kind, req.path);
+        if (text == null)
+            return { tokens: 0, cached: false, failed: true };
+        const key = sha256(text);
+        await this.loadCache();
+        const hit = this.cache.get(key);
+        if (hit !== undefined)
+            return { tokens: hit, cached: true };
+        const tokens = await this.callCountTokens(text);
+        if (tokens == null)
+            return { tokens: 0, cached: false, failed: true };
+        this.cache.set(key, tokens);
+        void this.persistCache();
+        return { tokens, cached: false };
+    }
+    // -------------------------------------------------------------------------
+    // internals
+    // -------------------------------------------------------------------------
+    makeItem(kind, label, text, filePath) {
+        const bytes = utf8Bytes(text);
+        return {
+            kind,
+            label,
+            ...(filePath ? { path: filePath } : {}),
+            bytes,
+            approxTokens: approxTokensFromBytes(bytes),
+            contentHash: sha256(text),
+        };
+    }
+    /** Resolve the text used for BOTH attribution and exact-count (N-1). */
+    async resolveElementText(projectSlug, kind, elementPath) {
+        switch (kind) {
+            case 'claudeMd-project':
+                return (await this.readClaudeMd({ scope: 'project', projectSlug }))?.text ?? null;
+            case 'claudeMd-global':
+                return (await this.readClaudeMd({ scope: 'user' }))?.text ?? null;
+            case 'contextBuilder': {
+                const t = await this.assembleContextBuilderText(projectSlug);
+                return t || null;
+            }
+            case 'skill':
+                return this.readSkillTextByPath(projectSlug, elementPath);
+            default:
+                return null;
+        }
+    }
+    async readClaudeMd(ref) {
+        try {
+            const res = await claudeMdService.read(ref);
+            return { text: res.content ?? '', path: res.absolutePath ?? 'CLAUDE.md' };
+        }
+        catch {
+            return null; // missing / not-a-file → omit.
+        }
+    }
+    /**
+     * Read a skill's SKILL.md, validating `elementPath` against the enumerated
+     * skills so an arbitrary client path can never be read (the path must be one
+     * the server itself vouched for in listTokenAttribution).
+     */
+    async readSkillTextByPath(projectSlug, elementPath) {
+        if (!elementPath)
+            return null;
+        try {
+            const { cards } = await harnessSkillService.listCards(projectSlug);
+            for (const card of cards) {
+                const root = card.sources[0]?.absoluteRoot;
+                if (!root)
+                    continue;
+                const skillMd = path.join(root, 'SKILL.md');
+                if (samePath(skillMd, elementPath)) {
+                    return await fs.readFile(skillMd, 'utf8');
+                }
+            }
+        }
+        catch {
+            // fall through.
+        }
+        return null;
+    }
+    /**
+     * Assemble the context-builder `additionalContext` text WITHOUT executing the
+     * hook (N-1). Reference files are read (their content dominates the size);
+     * dynamic variables / acknowledged commands contribute only their block
+     * headers with a `(dynamic)` placeholder. Mirrors the block format of
+     * `contextBuilderScriptTemplate` for the statically-knowable parts. Returns ''
+     * when the builder is disabled or empty.
+     */
+    async assembleContextBuilderText(projectSlug) {
+        let manifest;
+        try {
+            ({ manifest } = await contextBuilderService.readManifest(projectSlug));
+        }
+        catch {
+            return '';
+        }
+        if (!manifest.enabled)
+            return '';
+        let projectRoot;
+        try {
+            projectRoot = await projectService.resolveOriginalPath(projectSlug);
+        }
+        catch {
+            return '';
+        }
+        const blocks = [];
+        for (const rel of manifest.files) {
+            const abs = path.resolve(projectRoot, rel);
+            try {
+                const content = await fs.readFile(abs, 'utf8');
+                blocks.push(`## Reference file: ${rel}\n\n${content}`);
+            }
+            catch {
+                blocks.push(`## Reference file: ${rel}\n\n(파일을 찾을 수 없음: ${rel})`);
+            }
+        }
+        // Dynamic variable headers (values are computed at hook runtime — placeholder here).
+        if (manifest.variables.gitBranch)
+            blocks.push('## Current git branch\n\n(dynamic)');
+        if (manifest.variables.recentCommits) {
+            blocks.push(`## Recent ${manifest.recentCommitsCount ?? 5} commit(s)\n\n(dynamic)`);
+        }
+        if (manifest.variables.uncommittedCount)
+            blocks.push('## Uncommitted file count\n\n(dynamic)');
+        if (manifest.variables.today)
+            blocks.push('## Today\n\n(dynamic)');
+        if (manifest.variables.activeBmadStory)
+            blocks.push('## Active BMad story\n\n(dynamic)');
+        for (const cc of manifest.customCommands) {
+            if (cc.acknowledged)
+                blocks.push(`## Command: ${cc.command}\n\n(dynamic)`);
+        }
+        return blocks.join('\n\n');
+    }
+    async callCountTokens(text) {
+        const client = getAnthropicClient();
+        if (!client) {
+            log.warn('count_tokens unavailable — no ANTHROPIC_API_KEY and no OAuth credentials');
+            return null;
+        }
+        try {
+            const res = await client.messages.countTokens({
+                model: COUNT_TOKENS_MODEL,
+                messages: [{ role: 'user', content: text }],
+            });
+            return res.input_tokens;
+        }
+        catch (err) {
+            log.warn(`count_tokens failed: ${err.message}`);
+            return null;
+        }
+    }
+}
+export const tokenCountService = new TokenCountService();
+//# sourceMappingURL=tokenCountService.js.map

package/packages/server/dist/services/tokenCountService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenCountService.js","sourceRoot":"","sources":["../../src/services/tokenCountService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAO1C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AAE9C;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,mBAAmB,CAAC;AAE/F,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;AAC1F,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB;IACzB,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAAE,OAAO,IAAI,SAAS,EAAE,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAErD,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,EAAE,aAAa,EAAE,WAAW,CAAC;QAC/C,IAAI,KAAK;YAAE,OAAO,IAAI,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,iBAAiB;IACrB,4EAA4E;IACpE,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClC,WAAW,GAAG,KAAK,CAAC;IAEpB,aAAa;QACnB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,wBAAwB,CAAC,CAAC;IACvF,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,CAAC;YAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA2B,CAAC;YACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,+BAAgC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,oBAAoB,CAAC,WAAmB;QAC5C,MAAM,KAAK,GAA2B,EAAE,CAAC;QAEzC,6BAA6B;QAC7B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QAC7E,IAAI,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACpH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5D,IAAI,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/G,6CAA6C;QAC7C,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACnE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;gBAC3C,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBAC5C,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAChD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC3E,CAAC;gBAAC,MAAM,CAAC;oBACP,wCAAwC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,6BAA8B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,8EAA8E;QAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;QAClE,IAAI,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,2BAA2B,EAAE,MAAM,CAAC,CAAC,CAAC;QAE7F,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,GAA2B;QAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5E,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAEpE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAE5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAEtE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;IAED,4EAA4E;IAC5E,YAAY;IACZ,4EAA4E;IAEpE,QAAQ,CACd,IAA0B,EAC1B,KAAa,EACb,IAAY,EACZ,QAAiB;QAEjB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO;YACL,IAAI;YACJ,KAAK;YACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,KAAK;YACL,YAAY,EAAE,qBAAqB,CAAC,KAAK,CAAC;YAC1C,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC;SAC1B,CAAC;IACJ,CAAC;IAED,wEAAwE;IAChE,KAAK,CAAC,kBAAkB,CAC9B,WAAmB,EACnB,IAA0B,EAC1B,WAAoB;QAEpB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,kBAAkB;gBACrB,OAAO,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;YACpF,KAAK,iBAAiB;gBACpB,OAAO,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;YACpE,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;gBAC7D,OAAO,CAAC,IAAI,IAAI,CAAC;YACnB,CAAC;YACD,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAC5D;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,GAAkE;QAElE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5C,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,CAAC,+BAA+B;QAC9C,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,mBAAmB,CAAC,WAAmB,EAAE,WAAoB;QACzE,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACnE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;gBAC3C,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBAC5C,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;oBACnC,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB;QAClB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,0BAA0B,CAAC,WAAmB;QAC1D,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,CAAC,EAAE,QAAQ,EAAE,GAAG,MAAM,qBAAqB,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAEjC,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,cAAc,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC/C,MAAM,CAAC,IAAI,CAAC,sBAAsB,GAAG,OAAO,OAAO,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,sBAAsB,GAAG,qBAAqB,GAAG,GAAG,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QACD,qFAAqF;QACrF,IAAI,QAAQ,CAAC,SAAS,CAAC,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACpF,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,kBAAkB,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,QAAQ,CAAC,SAAS,CAAC,gBAAgB;YAAE,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC/F,IAAI,QAAQ,CAAC,SAAS,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,SAAS,CAAC,eAAe;YAAE,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACzF,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;YACzC,IAAI,EAAE,CAAC,YAAY;gBAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,OAAO,eAAe,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,IAAY;QACxC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;YACrF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC5C,KAAK,EAAE,kBAAkB;gBACzB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;aAC5C,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,YAAY,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,wBAAyB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC"}

package/packages/server/dist/snippets/apply-qa-fixes

@@ -1,5 +1,7 @@
-/BMad:agents:dev
----
-*review-qa {arg1}
-
-After completing QA fixes, update the gate YAML file's gate field to 'FIXED'.
+/BMad:agents:dev
+---
+*review-qa {arg1}
+
+After the fixes are applied and you update the story's Dev Agent Record, record which QA gate you addressed so Hammoc can track it. Read the `updated:` value from this story's QA gate YAML, then append this exact line inside the Completion Notes — replace the placeholder with that value. Do NOT change Status and do NOT edit the gate file:
+<!-- hammoc:qa-fix gate="<paste the gate's updated value>" applied="true" -->
+This flips the story from "apply QA fixes" to "request QA re-review" in Hammoc.

package/packages/server/dist/snippets/qa-review

@@ -1,3 +1,7 @@
 /BMad:agents:qa
 ---
-*review {arg1}
+*review {arg1}
+
+When you write the quality gate, if the gate decision is CONCERNS or FAIL, also record it in the story so Hammoc tracks that a fix is pending. Append this exact line inside the story's QA Results section, replacing the placeholder with the gate's `updated:` value you just wrote:
+<!-- hammoc:qa-fix gate="<paste the gate's updated value>" applied="false" -->
+For a PASS or WAIVED gate, do not add this marker.

package/packages/server/dist/utils/assertSafeBundlePath.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Story 30.5 (AC9): single-source guard against ZIP-slip / path-traversal
+ * during harness bundle import.
+ *
+ * `jszip` does not normalise entry paths — a malicious bundle can ship an
+ * entry called `../../etc/passwd` or `C:\Windows\System32\evil.dll` and naive
+ * code that joins it to the project root would write outside the target.
+ * Every entry path read from an import ZIP must therefore pass through this
+ * function before the bundle service touches disk.
+ *
+ * Rejected shapes:
+ *   - absolute POSIX (`/etc/...`)
+ *   - absolute Windows (`C:\...`, `C:/...`)
+ *   - UNC (`\\server\share`, `//server/share`)
+ *   - any traversal component (`..` segment anywhere in the path)
+ *   - embedded null byte (would terminate the path early in fs APIs)
+ *
+ * Accepted shapes:
+ *   - POSIX-style relative paths (`skills/foo/SKILL.md`)
+ *   - Windows-style backslashes are normalised, then validated
+ *   - the empty string (the zip "/" root) is rejected as it carries no entry
+ */
+export declare class UnsafeBundlePathError extends Error {
+    readonly code = "HARNESS_BUNDLE_UNSAFE_PATH";
+    readonly relativePath: string;
+    constructor(relativePath: string, reason: string);
+}
+export declare function assertSafeBundlePath(relativePath: string): void;
+//# sourceMappingURL=assertSafeBundlePath.d.ts.map

package/packages/server/dist/utils/assertSafeBundlePath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertSafeBundlePath.d.ts","sourceRoot":"","sources":["../../src/utils/assertSafeBundlePath.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,gCAAgC;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;gBAClB,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAIjD;AAED,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAmB/D"}

package/packages/server/dist/utils/assertSafeBundlePath.js

@@ -0,0 +1,53 @@
+/**
+ * Story 30.5 (AC9): single-source guard against ZIP-slip / path-traversal
+ * during harness bundle import.
+ *
+ * `jszip` does not normalise entry paths — a malicious bundle can ship an
+ * entry called `../../etc/passwd` or `C:\Windows\System32\evil.dll` and naive
+ * code that joins it to the project root would write outside the target.
+ * Every entry path read from an import ZIP must therefore pass through this
+ * function before the bundle service touches disk.
+ *
+ * Rejected shapes:
+ *   - absolute POSIX (`/etc/...`)
+ *   - absolute Windows (`C:\...`, `C:/...`)
+ *   - UNC (`\\server\share`, `//server/share`)
+ *   - any traversal component (`..` segment anywhere in the path)
+ *   - embedded null byte (would terminate the path early in fs APIs)
+ *
+ * Accepted shapes:
+ *   - POSIX-style relative paths (`skills/foo/SKILL.md`)
+ *   - Windows-style backslashes are normalised, then validated
+ *   - the empty string (the zip "/" root) is rejected as it carries no entry
+ */
+const ABSOLUTE_WIN_RE = /^[A-Za-z]:[\\/]/;
+const TRAVERSAL_SEGMENT_RE = /(^|[\\/])\.\.([\\/]|$)/;
+export class UnsafeBundlePathError extends Error {
+    code = 'HARNESS_BUNDLE_UNSAFE_PATH';
+    relativePath;
+    constructor(relativePath, reason) {
+        super(`unsafe bundle entry "${relativePath}": ${reason}`);
+        this.relativePath = relativePath;
+    }
+}
+export function assertSafeBundlePath(relativePath) {
+    if (typeof relativePath !== 'string' || relativePath.length === 0) {
+        throw new UnsafeBundlePathError(String(relativePath), 'empty entry path');
+    }
+    if (relativePath.includes('\0')) {
+        throw new UnsafeBundlePathError(relativePath, 'null byte in entry path');
+    }
+    if (relativePath.startsWith('/') || relativePath.startsWith('\\')) {
+        throw new UnsafeBundlePathError(relativePath, 'absolute path not allowed');
+    }
+    if (ABSOLUTE_WIN_RE.test(relativePath)) {
+        throw new UnsafeBundlePathError(relativePath, 'Windows-absolute path not allowed');
+    }
+    if (relativePath.startsWith('\\\\') || relativePath.startsWith('//')) {
+        throw new UnsafeBundlePathError(relativePath, 'UNC path not allowed');
+    }
+    if (TRAVERSAL_SEGMENT_RE.test(relativePath)) {
+        throw new UnsafeBundlePathError(relativePath, 'parent-directory traversal not allowed');
+    }
+}
+//# sourceMappingURL=assertSafeBundlePath.js.map

package/packages/server/dist/utils/assertSafeBundlePath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertSafeBundlePath.js","sourceRoot":"","sources":["../../src/utils/assertSafeBundlePath.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAC1C,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AAEtD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,GAAG,4BAA4B,CAAC;IACpC,YAAY,CAAS;IAC9B,YAAY,YAAoB,EAAE,MAAc;QAC9C,KAAK,CAAC,wBAAwB,YAAY,MAAM,MAAM,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB,CAAC,YAAoB;IACvD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,qBAAqB,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,qBAAqB,CAAC,YAAY,EAAE,2BAA2B,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,qBAAqB,CAAC,YAAY,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,qBAAqB,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,qBAAqB,CAAC,YAAY,EAAE,wCAAwC,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC"}

package/packages/server/dist/utils/bundledBinaryModelSupport.d.ts

@@ -0,0 +1,7 @@
+/**
+ * True when `model` is a known native-1M model but the bundled binary does NOT
+ * recognize it — so its 1M context silently falls back to ~200K. Conservative:
+ * returns false (no warning) for bare aliases, unreadable binaries, or uncertainty.
+ */
+export declare function modelMissingNative1MSupport(model?: string): Promise<boolean>;
+//# sourceMappingURL=bundledBinaryModelSupport.d.ts.map

package/packages/server/dist/utils/bundledBinaryModelSupport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundledBinaryModelSupport.d.ts","sourceRoot":"","sources":["../../src/utils/bundledBinaryModelSupport.ts"],"names":[],"mappings":"AA8EA;;;;GAIG;AACH,wBAAsB,2BAA2B,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAgBlF"}

package/packages/server/dist/utils/bundledBinaryModelSupport.js

@@ -0,0 +1,107 @@
+/**
+ * Detects whether the bundled Claude Code engine (the platform binary shipped
+ * inside @anthropic-ai/claude-agent-sdk-<platform>-<arch>) actually recognizes a
+ * given model id.
+ *
+ * Native 1M context is opted into via the `[1m]` model suffix, but the binary
+ * only honors it for models baked into its own model table. If the selected model
+ * is newer than the bundled binary, the suffix is silently ignored and the model
+ * falls back to ~200K — which makes long sessions auto-compact far below their
+ * real limit and can break resume (thinking-block signature rejection). This util
+ * lets the server surface that silent fallback instead of failing mysteriously.
+ */
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+import { createRequire } from 'module';
+import { isNative1MModel } from '@hammoc/shared';
+import { createLogger } from './logger.js';
+const log = createLogger('bundledBinaryModelSupport');
+/** Claude model ids embedded in the binary, e.g. claude-opus-4-8, claude-sonnet-4-6, claude-opus-4-20250514. */
+const MODEL_ID_RE = /claude-(?:opus|sonnet|haiku)-[0-9]+(?:-[0-9]+)*/g;
+let cache = null;
+let scanPromise = null;
+/** Resolve the platform binary path (claude.exe on Windows, claude elsewhere), or null if not installed. */
+function resolveBundledBinaryPath() {
+    const pkg = `@anthropic-ai/claude-agent-sdk-${os.platform()}-${os.arch()}`;
+    const exe = os.platform() === 'win32' ? 'claude.exe' : 'claude';
+    try {
+        const require = createRequire(import.meta.url);
+        const pkgJsonPath = require.resolve(`${pkg}/package.json`);
+        return path.join(path.dirname(pkgJsonPath), exe);
+    }
+    catch {
+        return null;
+    }
+}
+/** Stream the (large) binary in chunks and collect every Claude model id it contains. */
+function scanBinaryForModels(binPath) {
+    return new Promise((resolve) => {
+        const models = new Set();
+        let tail = '';
+        const stream = fs.createReadStream(binPath, { encoding: 'latin1', highWaterMark: 1 << 22 });
+        stream.on('data', (chunk) => {
+            const text = tail + chunk;
+            const matches = text.match(MODEL_ID_RE);
+            if (matches)
+                for (const m of matches)
+                    models.add(m);
+            // keep a small overlap so ids straddling a chunk boundary still match
+            tail = text.slice(-64);
+        });
+        stream.on('end', () => resolve(models));
+        stream.on('error', (err) => {
+            log.warn(`binary model scan failed: ${err instanceof Error ? err.message : String(err)}`);
+            resolve(new Set());
+        });
+    });
+}
+/** Model ids the bundled binary recognizes (memoized by path+mtime). Empty set if unreadable. */
+async function getRecognizedModels() {
+    const binPath = resolveBundledBinaryPath();
+    if (!binPath)
+        return new Set();
+    let mtimeMs = 0;
+    try {
+        mtimeMs = fs.statSync(binPath).mtimeMs;
+    }
+    catch {
+        return new Set();
+    }
+    if (cache && cache.path === binPath && cache.mtimeMs === mtimeMs)
+        return cache.models;
+    if (!scanPromise) {
+        scanPromise = scanBinaryForModels(binPath).then((models) => {
+            cache = { path: binPath, mtimeMs, models };
+            scanPromise = null;
+            return models;
+        });
+    }
+    return scanPromise;
+}
+/**
+ * True when `model` is a known native-1M model but the bundled binary does NOT
+ * recognize it — so its 1M context silently falls back to ~200K. Conservative:
+ * returns false (no warning) for bare aliases, unreadable binaries, or uncertainty.
+ */
+export async function modelMissingNative1MSupport(model) {
+    if (!model)
+        return false;
+    const base = model.replace(/\[1m\]$/i, '');
+    // Only fully-versioned ids are checkable against the binary; bare aliases like
+    // 'opus'/'sonnet' resolve to a concrete model server-side, so skip them.
+    if (!/^claude-(?:opus|sonnet|haiku)-[0-9]/.test(base))
+        return false;
+    if (!isNative1MModel(base))
+        return false;
+    const recognized = await getRecognizedModels();
+    if (recognized.size === 0)
+        return false; // couldn't read the binary → don't false-warn
+    for (const r of recognized) {
+        // exact, or either is the date-suffixed snapshot of the other (suffix always starts with '-')
+        if (r === base || r.startsWith(`${base}-`) || base.startsWith(`${r}-`))
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=bundledBinaryModelSupport.js.map

package/packages/server/dist/utils/bundledBinaryModelSupport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundledBinaryModelSupport.js","sourceRoot":"","sources":["../../src/utils/bundledBinaryModelSupport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,GAAG,GAAG,YAAY,CAAC,2BAA2B,CAAC,CAAC;AAEtD,gHAAgH;AAChH,MAAM,WAAW,GAAG,kDAAkD,CAAC;AAEvE,IAAI,KAAK,GAAkE,IAAI,CAAC;AAChF,IAAI,WAAW,GAAgC,IAAI,CAAC;AAEpD,4GAA4G;AAC5G,SAAS,wBAAwB;IAC/B,MAAM,GAAG,GAAG,kCAAkC,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3E,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,SAAS,mBAAmB,CAAC,OAAe;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5F,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,IAAI,GAAG,IAAI,GAAI,KAAgB,CAAC;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACxC,IAAI,OAAO;gBAAE,KAAK,MAAM,CAAC,IAAI,OAAO;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACpD,sEAAsE;YACtE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,GAAG,CAAC,IAAI,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1F,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iGAAiG;AACjG,KAAK,UAAU,mBAAmB;IAChC,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,GAAG,EAAE,CAAC;IAAC,CAAC;IAC3E,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IACtF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACzD,KAAK,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAC3C,WAAW,GAAG,IAAI,CAAC;YACnB,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAAc;IAC9D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3C,+EAA+E;IAC/E,yEAAyE;IACzE,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAEzC,MAAM,UAAU,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAC/C,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,8CAA8C;IAEvF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,8FAA8F;QAC9F,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}