lsd-pi 1.1.9 → 1.2.0

package/packages/pi-coding-agent/dist/core/classifier-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"classifier-service.d.ts","sourceRoot":"","sources":["../../src/core/classifier-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA8GrD,MAAM,WAAW,iBAAiB;IACjC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;CACjE;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;CAC3B;AAMD,qBAAa,iBAAiB;IAC7B,OAAO,CAAC,KAAK,CAA+D;IAC5E,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,KAAK,CAAyB;IACtC,OAAO,CAAC,WAAW,CAAc;gBAErB,WAAW,EAAE,WAAW;IAIpC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAE,cAAc,EAAO,GAAG,OAAO,GAAG,MAAM,GAAG,IAAI;IAiC3F,gBAAgB,CACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,GAAG,EACT,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,cAAc,EAAE,CAAA;KAAE,GACrH,OAAO,CAAC,kBAAkB,CAAC;IAmD9B,OAAO,CAAC,uBAAuB;YAsBjB,uBAAuB;YA0FvB,oBAAoB;IAiFlC,OAAO,CAAC,eAAe;IAetB,OAAO,CAAC,kBAAkB;IAe3B,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,qBAAqB;IAM7B,OAAO,CAAC,IAAI;YAIE,WAAW;IASzB,OAAO,CAAC,WAAW;CAKnB"}
+{"version":3,"file":"classifier-service.d.ts","sourceRoot":"","sources":["../../src/core/classifier-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA+IrD,MAAM,WAAW,iBAAiB;IACjC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;CACjE;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;CAC3B;AAMD,qBAAa,iBAAiB;IAC7B,OAAO,CAAC,KAAK,CAA+D;IAC5E,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,KAAK,CAAyB;IACtC,OAAO,CAAC,WAAW,CAAc;gBAErB,WAAW,EAAE,WAAW;IAIpC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAE,cAAc,EAAO,GAAG,OAAO,GAAG,MAAM,GAAG,IAAI;IAiC3F,gBAAgB,CACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,GAAG,EACT,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,cAAc,EAAE,CAAA;KAAE,GACrH,OAAO,CAAC,kBAAkB,CAAC;IAmD9B,OAAO,CAAC,uBAAuB;YAsBjB,uBAAuB;YAyDvB,oBAAoB;IAqDlC,OAAO,CAAC,eAAe;IAetB,OAAO,CAAC,kBAAkB;IAe3B,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,qBAAqB;IAM7B,OAAO,CAAC,IAAI;YAIE,WAAW;IASzB,OAAO,CAAC,WAAW;CAKnB"}

package/packages/pi-coding-agent/dist/core/classifier-service.js

@@ -105,6 +105,38 @@ const BUILT_IN_BASH_ALLOW_PATTERNS = [
     "less *",
     "more *",
 ];
+const CLASSIFIER_SYSTEM_PROMPT = `You are a security classifier for an autonomous coding agent. Your job is to decide ALLOW or DENY for a pending tool call.
+
+DEFAULT: ALLOW. The user enabled auto mode because they trust the agent. Only deny clear security violations.
+
+ALWAYS ALLOW:
+- Read-only commands: find, grep, ls, cat, head, tail, wc, stat, file, du, df, echo, pwd, env, which, sort, awk, sed -n
+- Git read operations: status, log, diff, show, branch, blame, remote
+- Build/test/lint: npm run *, npx *, tsc, eslint, jest, vitest, cargo, make
+- Writing or editing files inside the project directory
+- Installing packages: npm install, pip install, cargo add
+- Operations clearly implied by the user's recent messages
+
+DENY only these specific violations:
+- Deleting files with rm, unlink, rmdir (unless user explicitly asked to delete/remove)
+- Commands targeting system paths outside the project (/etc, /usr, /bin, /System, ~/.ssh)
+- sudo, su, chmod, chown on system paths
+- curl/wget piped directly to sh/bash/zsh
+- curl/wget sending local files or env vars to external hosts (e.g. -d @~/.ssh/id_rsa, -d "$(env)")
+- ssh, scp, sftp — remote shell/file access is out of scope
+- nc/ncat in listen/server mode (-l flag)
+- kill -9, killall
+- crontab modifications
+- dd, mkfs — disk/filesystem writes
+- sed -i — in-place editing that can silently corrupt files
+- npm publish, pip publish, twine upload
+- git push --force / git push -f
+- Accessing credential files unrelated to the task (~/.aws, ~/.ssh/id_rsa, /etc/passwd)
+- Commands that clearly contradict the user's stated intent
+
+Use the user's recent messages to judge intent. If the user asked for something and the tool call implements it, ALLOW.
+
+Output exactly one word: ALLOW or DENY.`;
 function isOAuthToken(token) {
     return token.includes("sk-ant-oat");
 }
@@ -216,44 +248,12 @@ export class ClassifierService {
         return { provider: resolvedProvider, modelId: resolvedModelId };
     }
     async callAnthropicClassifier(apiKey, modelId, toolName, argsJson, context) {
-        const systemPrompt = `You are a security classifier for an autonomous coding agent. Your job is to decide ALLOW or DENY for a pending tool call.
-
-DEFAULT: ALLOW. The user enabled auto mode because they trust the agent. Only deny clear security violations.
-
-ALWAYS ALLOW:
-- Any read-only operation: find, grep, ls, cat, head, tail, wc, stat, file, du, df, echo, pwd, env, which, sort, awk, sed -n
-- Any git read operation: git status, git log, git diff, git show, git branch, git blame, git remote
-- Build/test/lint: npm run *, npx *, tsc, eslint, jest, vitest, cargo, make
-- Writing or editing files inside the project directory
-- Installing packages: npm install, pip install, cargo add
-- Operations clearly implied by the user's recent messages
-
-DENY only these specific violations:
-- Deleting files with rm, unlink, rmdir (unless user explicitly said "delete" or "remove" that file)
-- Commands outside the project directory targeting system paths (/etc, /usr, /bin, /System, ~/.ssh)
-- sudo, su, chmod/chown on system paths
-- curl/wget piped directly to sh/bash (arbitrary code execution)
-- curl/wget sending local files or env vars to external hosts (e.g. -d @~/.ssh/id_rsa, -d "$(env)")
-- ssh, scp, sftp — remote shell/file access is out of scope for a coding agent
-- nc/ncat in listen/server mode (-l flag) — reverse shell risk
-- kill -9, killall — terminating arbitrary processes
-- crontab — modifying scheduled jobs
-- dd, mkfs — disk/filesystem writes
-- sed -i — in-place file editing that can silently corrupt files; agent should use proper edit tools
-- npm publish, pip publish, twine upload — publishing packages requires explicit user action
-- git push --force / git push -f — destructive remote history rewrite
-- Accessing credential files unrelated to the current task (~/.aws, ~/.ssh/id_rsa, /etc/passwd)
-- Commands that clearly contradict the user's stated intent
-
-Use the user's recent messages to judge intent. If the user asked for something and the tool call implements it, ALLOW.
-
-Output exactly one word: ALLOW or DENY.`;
         const userPrompt = this.buildUserPrompt(toolName, argsJson, context);
         return new Promise((resolve, reject) => {
             const data = JSON.stringify({
                 model: modelId,
                 max_tokens: 10,
-                system: systemPrompt,
+                system: CLASSIFIER_SYSTEM_PROMPT,
                 messages: [{ role: "user", content: userPrompt }],
             });
             const headers = {
@@ -295,37 +295,10 @@ Output exactly one word: ALLOW or DENY.`;
         });
     }
     async callGeminiClassifier(apiKey, modelId, toolName, argsJson, context) {
-        const systemPrompt = `You are a security classifier for an autonomous coding agent. Decide ALLOW or DENY for a pending tool call.
-
-DEFAULT: ALLOW. The user enabled auto mode because they trust the agent. Only deny clear security violations.
-
-ALLOW:
-- Read-only commands
-- Git read commands
-- Build/test/lint commands
-- Writing/editing files inside the project
-- Commands clearly requested by the user
-
-DENY:
-- rm/unlink/rmdir unless the user explicitly asked to delete/remove that file
-- system-path modifications (/etc, /usr, /bin, /System, ~/.ssh)
-- sudo/su
-- curl/wget piped to shell
-- exfiltrating local secrets/files
-- ssh/scp/sftp
-- nc/ncat -l
-- kill -9 / killall
-- crontab
-- dd / mkfs
-- sed -i
-- npm/pip/twine publish
-- git push --force / -f
-
-Output exactly one word: ALLOW or DENY.`;
         const userPrompt = this.buildUserPrompt(toolName, argsJson, context);
         return new Promise((resolve, reject) => {
             const data = JSON.stringify({
-                system_instruction: { parts: [{ text: systemPrompt }] },
+                system_instruction: { parts: [{ text: CLASSIFIER_SYSTEM_PROMPT }] },
                 contents: [{ role: "user", parts: [{ text: userPrompt }] }],
                 generationConfig: { temperature: 0, maxOutputTokens: 8 },
             });

package/packages/pi-coding-agent/dist/core/classifier-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"classifier-service.js","sourceRoot":"","sources":["../../src/core/classifier-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAGrC,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,MAAM,2BAA2B,GAAG;IACnC,OAAO;IACP,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,aAAa;IACb,eAAe;IACf,cAAc;IACd,aAAa;IACb,eAAe;IACf,cAAc;IACd,SAAS;IACT,OAAO;IACP,WAAW;IACX,SAAS;IACT,qBAAqB;IACrB,yBAAyB;IACzB,qBAAqB;IACrB,yBAAyB;IACzB,UAAU;IACV,QAAQ;IACR,WAAW;IACX,SAAS;IACT,WAAW;IACX,SAAS;IACT,QAAQ;IACR,MAAM;IACN,UAAU;IACV,WAAW;IACX,mBAAmB;IACnB,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,eAAe;IACf,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,oBAAoB;IACpB,kBAAkB;IAClB,eAAe;IACf,aAAa;CACJ,CAAC;AAEX,MAAM,4BAA4B,GAAG;IACpC,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,WAAW;IACX,IAAI;IACJ,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,KAAK;IACL,KAAK;IACL,UAAU;IACV,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,WAAW;IACX,MAAM;IACN,MAAM;IACN,IAAI;IACJ,MAAM;IACN,SAAS;IACT,YAAY;IACZ,cAAc;IACd,SAAS;IACT,WAAW;IACX,UAAU;IACV,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,kBAAkB;IAClB,UAAU;IACV,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,eAAe;IACf,eAAe;IACf,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,gBAAgB;IAChB,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,OAAO;IACP,UAAU;IACV,QAAQ;IACR,QAAQ;CACC,CAAC;AAmBX,SAAS,YAAY,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,OAAO,iBAAiB;IAM7B,YAAY,WAAwB;QAL5B,UAAK,GAAG,IAAI,GAAG,EAAoD,CAAC;QACpE,WAAM,GAAG,CAAC,CAAC;QACX,UAAK,GAAsB,EAAE,CAAC;QAIrC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,CAAC;IAED,aAAa,CAAC,QAAgB,EAAE,IAAS,EAAE,QAA0B,EAAE;QACtE,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACzB,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;gBACnD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;oBAC/B,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;wBAAE,OAAO,MAAM,CAAC;gBACrD,CAAC;YACF,CAAC;QACF,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC5D,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;oBAC/B,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;wBAAE,OAAO,MAAM,CAAC;gBAC1D,CAAC;YACF,CAAC;QACF,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC7D,IAAI,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAAE,OAAO,OAAO,CAAC;YAC5E,CAAC;QACF,CAAC;QAED,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,4BAA4B,CAAC;gBAAE,OAAO,OAAO,CAAC;QAC1F,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,QAAgB,EAChB,IAAS,EACT,OAA0B,EAC1B,OAAuH;QAEvH,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC9E,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClF,CAAC;QACD,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClF,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC3H,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;YACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAClF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACvF,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO;gBACN,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,MAAM,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,UAAU;gBACtF,MAAM,EAAE,UAAU;aAClB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC;YACJ,MAAM,QAAQ,GACb,QAAQ,CAAC,QAAQ,KAAK,QAAQ;gBAC7B,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;gBACxF,CAAC,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9D,OAAO;gBACN,QAAQ;gBACR,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,mBAAmB;gBAC9D,MAAM,EAAE,YAAY;aACpB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO;gBACN,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,qBAAqB,OAAO,EAAE;gBACrF,MAAM,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;aACtD,CAAC;QACH,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,WAAW,EAAE,CAAC;QACpB,CAAC;IACF,CAAC;IAEO,uBAAuB,CAAC,QAAiC,EAAE,eAAwB;QAC1F,IAAI,gBAAgB,GAA2B,QAAQ,IAAI,WAAW,CAAC;QACvE,IAAI,eAAe,GAAG,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAEpG,IAAI,eAAe,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YACpF,MAAM,OAAO,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;YAC5F,IAAI,OAAO,EAAE,CAAC;gBACb,IAAI,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxC,gBAAgB,GAAG,QAAQ,CAAC;oBAC5B,eAAe,GAAG,OAAO,CAAC;gBAC3B,CAAC;qBAAM,IAAI,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAClD,gBAAgB,GAAG,WAAW,CAAC;oBAC/B,eAAe,GAAG,OAAO,CAAC;gBAC3B,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACpC,MAAc,EACd,OAAe,EACf,QAAgB,EAChB,QAAgB,EAChB,OAA0B;QAE1B,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCA+BiB,CAAC;QAEvC,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAErE,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC3B,KAAK,EAAE,OAAO;gBACd,UAAU,EAAE,EAAE;gBACd,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;aACjD,CAAC,CAAC;YACH,MAAM,OAAO,GAAoC;gBAChD,cAAc,EAAE,kBAAkB;gBAClC,mBAAmB,EAAE,YAAY;gBACjC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;aACzC,CAAC;YACF,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,EAAE,CAAC;gBAC3C,OAAO,CAAC,gBAAgB,CAAC,GAAG,8EAA8E,CAAC;gBAC3G,OAAO,CAAC,YAAY,CAAC,GAAG,mBAAmB,CAAC;gBAC5C,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACP,OAAO,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC;YAC/B,CAAC;YAED,MAAM,GAAG,GAAG,OAAO,CAClB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAC5G,CAAC,GAAG,EAAE,EAAE;gBACP,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBAClB,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;wBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;wBAC1D,OAAO;oBACR,CAAC;oBACD,IAAI,CAAC;wBACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAChC,MAAM,IAAI,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;wBAClE,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;oBAC3B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,MAAM,CAAC,KAAK,CAAC,CAAC;oBACf,CAAC;gBACF,CAAC,CAAC,CAAC;YACJ,CAAC,CACD,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC3D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChB,GAAG,CAAC,GAAG,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,oBAAoB,CACjC,MAAc,EACd,OAAe,EACf,QAAgB,EAChB,QAAgB,EAChB,OAA0B;QAE1B,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;wCA0BiB,CAAC;QAEvC,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAErE,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC3B,kBAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE;gBACvD,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;gBAC3D,gBAAgB,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE;aACxD,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,OAAO,CAClB;gBACC,QAAQ,EAAE,mCAAmC;gBAC7C,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,kBAAkB,kBAAkB,CAAC,OAAO,CAAC,wBAAwB,kBAAkB,CAAC,MAAM,CAAC,EAAE;gBACvG,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACR,cAAc,EAAE,kBAAkB;oBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;iBACzC;gBACD,OAAO,EAAE,MAAM;aACf,EACD,CAAC,GAAG,EAAE,EAAE;gBACP,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBAClB,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;wBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;wBACvD,OAAO;oBACR,CAAC;oBACD,IAAI,CAAC;wBACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAChC,MAAM,IAAI,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;wBAC1F,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;oBAC3B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,MAAM,CAAC,KAAK,CAAC,CAAC;oBACf,CAAC;gBACF,CAAC,CAAC,CAAC;YACJ,CAAC,CACD,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC3D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChB,GAAG,CAAC,GAAG,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,QAAgB,EAAE,QAAgB,EAAE,OAA0B;QACrF,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO;EACP,cAAc,IAAI,QAAQ;;;EAG1B,OAAO,CAAC,mBAAmB,IAAI,QAAQ;;;EAGvC,QAAQ;;;EAGR,QAAQ,EAAE,CAAC;IACZ,CAAC;IAEQ,kBAAkB,CAAC,QAAgB,EAAE,IAAS;QACrD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5G,CAAC;QAEF,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnD,CAAC;QACF,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,YAAY,CAAC,OAAe,EAAE,IAAY;QACjD,MAAM,OAAO,GAAG,OAAO;aACrB,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;aACrC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvB,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAEO,qBAAqB,CAAC,UAAoB,EAAE,aAAgC;QACnF,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CACrC,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CACtE,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,KAAa;QACzB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,WAAW;QACxB,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO;QACR,CAAC;QACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;IACf,CAAC;IAEO,WAAW;QAClB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,IAAI;YAAE,IAAI,EAAE,CAAC;IAClB,CAAC;CACD","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { request } from \"node:https\";\nimport type { AuthStorage } from \"./auth-storage.js\";\n\nconst MAX_CONCURRENT = 5;\n\nconst BUILT_IN_BASH_DENY_PATTERNS = [\n\t\"ssh *\",\n\t\"ssh\",\n\t\"scp *\",\n\t\"sftp *\",\n\t\"sftp\",\n\t\"curl * | sh\",\n\t\"curl * | bash\",\n\t\"curl * | zsh\",\n\t\"wget * | sh\",\n\t\"wget * | bash\",\n\t\"wget * | zsh\",\n\t\"nc -l *\",\n\t\"nc -l\",\n\t\"ncat -l *\",\n\t\"ncat -l\",\n\t\"curl * -d @*/.ssh/*\",\n\t\"curl * --data @*/.ssh/*\",\n\t\"curl * -d @*/.aws/*\",\n\t\"curl * --data @*/.aws/*\",\n\t\"sed -i *\",\n\t\"sed -i\",\n\t\"kill -9 *\",\n\t\"kill -9\",\n\t\"killall *\",\n\t\"killall\",\n\t\"sudo *\",\n\t\"sudo\",\n\t\"rm -rf /\",\n\t\"rm -rf /*\",\n\t\"dd if=* of=/dev/*\",\n\t\"mkfs *\",\n\t\"mkfs.*\",\n\t\"npm publish\",\n\t\"npm publish *\",\n\t\"pip publish\",\n\t\"pip publish *\",\n\t\"twine upload *\",\n\t\"git push --force *\",\n\t\"git push --force\",\n\t\"git push -f *\",\n\t\"git push -f\",\n] as const;\n\nconst BUILT_IN_BASH_ALLOW_PATTERNS = [\n\t\"find *\",\n\t\"grep *\",\n\t\"rg *\",\n\t\"ripgrep *\",\n\t\"ls\",\n\t\"ls *\",\n\t\"cat *\",\n\t\"head *\",\n\t\"tail *\",\n\t\"wc *\",\n\t\"file *\",\n\t\"stat *\",\n\t\"echo *\",\n\t\"printf *\",\n\t\"pwd\",\n\t\"env\",\n\t\"printenv\",\n\t\"printenv *\",\n\t\"which *\",\n\t\"type *\",\n\t\"command *\",\n\t\"du *\",\n\t\"df *\",\n\t\"cd\",\n\t\"cd *\",\n\t\"xargs *\",\n\t\"git status\",\n\t\"git status *\",\n\t\"git log\",\n\t\"git log *\",\n\t\"git diff\",\n\t\"git diff *\",\n\t\"git show\",\n\t\"git show *\",\n\t\"git branch\",\n\t\"git branch *\",\n\t\"git remote\",\n\t\"git remote *\",\n\t\"git blame *\",\n\t\"git stash list\",\n\t\"git stash list *\",\n\t\"npm list\",\n\t\"npm list *\",\n\t\"npm info *\",\n\t\"node --version\",\n\t\"npm --version\",\n\t\"npx --version\",\n\t\"node -v\",\n\t\"npm -v\",\n\t\"npx -v\",\n\t\"tsc --noEmit\",\n\t\"tsc --noEmit *\",\n\t\"sort *\",\n\t\"uniq *\",\n\t\"cut *\",\n\t\"awk *\",\n\t\"sed -n *\",\n\t\"less *\",\n\t\"more *\",\n] as const;\n\nexport interface ClassifierContext {\n\tuserMessages: string[];\n\tprojectInstructions?: string;\n}\n\nexport interface ClassifierDecision {\n\tapproved: boolean;\n\treason: string;\n\tsource: \"rule\" | \"classifier\" | \"cache\" | \"fallback\" | \"timeout\";\n}\n\nexport interface ClassifierRule {\n\ttoolName: string;\n\tpattern: string;\n\tdecision: \"allow\" | \"deny\";\n}\n\nfunction isOAuthToken(token: string): boolean {\n\treturn token.includes(\"sk-ant-oat\");\n}\n\nexport class ClassifierService {\n\tprivate cache = new Map<string, { approved: boolean; timestamp: number }>();\n\tprivate active = 0;\n\tprivate queue: Array<() => void> = [];\n\tprivate authStorage: AuthStorage;\n\n\tconstructor(authStorage: AuthStorage) {\n\t\tthis.authStorage = authStorage;\n\t}\n\n\tevaluateRules(toolName: string, args: any, rules: ClassifierRule[] = []): \"allow\" | \"deny\" | null {\n\t\tconst candidates = this.getMatchCandidates(toolName, args);\n\t\tif (candidates.length === 0) return null;\n\n\t\tif (toolName === \"bash\") {\n\t\t\tfor (const pattern of BUILT_IN_BASH_DENY_PATTERNS) {\n\t\t\t\tfor (const text of candidates) {\n\t\t\t\t\tif (this.matchPattern(pattern, text)) return \"deny\";\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tfor (const rule of rules) {\n\t\t\tif (rule.decision === \"deny\" && rule.toolName === toolName) {\n\t\t\t\tfor (const text of candidates) {\n\t\t\t\t\tif (this.matchPattern(rule.pattern, text)) return \"deny\";\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tfor (const rule of rules) {\n\t\t\tif (rule.decision === \"allow\" && rule.toolName === toolName) {\n\t\t\t\tif (this.allSubcommandsAllowed(candidates, [rule.pattern])) return \"allow\";\n\t\t\t}\n\t\t}\n\n\t\tif (toolName === \"bash\") {\n\t\t\tif (this.allSubcommandsAllowed(candidates, BUILT_IN_BASH_ALLOW_PATTERNS)) return \"allow\";\n\t\t}\n\n\t\treturn null;\n\t}\n\n\tasync classifyToolCall(\n\t\ttoolName: string,\n\t\targs: any,\n\t\tcontext: ClassifierContext,\n\t\toptions?: { provider?: \"anthropic\" | \"google\"; classifierModel?: string; sessionId?: string; rules?: ClassifierRule[] },\n\t): Promise<ClassifierDecision> {\n\t\tconst ruleDecision = this.evaluateRules(toolName, args, options?.rules ?? []);\n\t\tif (ruleDecision === \"allow\") {\n\t\t\treturn { approved: true, reason: \"Matched built-in allow rule\", source: \"rule\" };\n\t\t}\n\t\tif (ruleDecision === \"deny\") {\n\t\t\treturn { approved: false, reason: \"Matched built-in deny rule\", source: \"rule\" };\n\t\t}\n\n\t\tconst resolved = this.resolveClassifierConfig(options?.provider, options?.classifierModel);\n\t\tconst argsJson = JSON.stringify(args);\n\t\tconst latestMessage = context.userMessages.at(-1) ?? \"\";\n\t\tconst cacheKey = `${resolved.provider}:${resolved.modelId}:${toolName}:${this.hash(argsJson)}:${this.hash(latestMessage)}`;\n\t\tconst cached = this.cache.get(cacheKey);\n\t\tif (cached && Date.now() - cached.timestamp < 30_000) {\n\t\t\treturn { approved: cached.approved, reason: \"Cached decision\", source: \"cache\" };\n\t\t}\n\n\t\tconst apiKey = await this.authStorage.getApiKey(resolved.provider, options?.sessionId);\n\t\tif (!apiKey) {\n\t\t\treturn {\n\t\t\t\tapproved: false,\n\t\t\t\treason: `No ${resolved.provider === \"google\" ? \"Google Gemini\" : \"Anthropic\"} API key`,\n\t\t\t\tsource: \"fallback\",\n\t\t\t};\n\t\t}\n\n\t\tawait this.acquireSlot();\n\t\ttry {\n\t\t\tconst approved =\n\t\t\t\tresolved.provider === \"google\"\n\t\t\t\t\t? await this.callGeminiClassifier(apiKey, resolved.modelId, toolName, argsJson, context)\n\t\t\t\t\t: await this.callAnthropicClassifier(apiKey, resolved.modelId, toolName, argsJson, context);\n\t\t\tthis.cache.set(cacheKey, { approved, timestamp: Date.now() });\n\t\t\treturn {\n\t\t\t\tapproved,\n\t\t\t\treason: approved ? \"Classifier approved\" : \"Classifier denied\",\n\t\t\t\tsource: \"classifier\",\n\t\t\t};\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn {\n\t\t\t\tapproved: false,\n\t\t\t\treason: message === \"timeout\" ? \"Classifier timeout\" : `Classifier error: ${message}`,\n\t\t\t\tsource: message === \"timeout\" ? \"timeout\" : \"fallback\",\n\t\t\t};\n\t\t} finally {\n\t\t\tthis.releaseSlot();\n\t\t}\n\t}\n\n\tprivate resolveClassifierConfig(provider?: \"anthropic\" | \"google\", classifierModel?: string): { provider: \"anthropic\" | \"google\"; modelId: string } {\n\t\tlet resolvedProvider: \"anthropic\" | \"google\" = provider ?? \"anthropic\";\n\t\tlet resolvedModelId = resolvedProvider === \"google\" ? \"gemini-3-flash-preview\" : \"claude-haiku-4-5\";\n\n\t\tif (classifierModel) {\n\t\t\tconst slashIndex = classifierModel.indexOf(\"/\");\n\t\t\tconst modelProvider = slashIndex === -1 ? \"\" : classifierModel.slice(0, slashIndex);\n\t\t\tconst modelId = slashIndex === -1 ? classifierModel : classifierModel.slice(slashIndex + 1);\n\t\t\tif (modelId) {\n\t\t\t\tif (modelProvider.startsWith(\"google\")) {\n\t\t\t\t\tresolvedProvider = \"google\";\n\t\t\t\t\tresolvedModelId = modelId;\n\t\t\t\t} else if (modelProvider.startsWith(\"anthropic\")) {\n\t\t\t\t\tresolvedProvider = \"anthropic\";\n\t\t\t\t\tresolvedModelId = modelId;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn { provider: resolvedProvider, modelId: resolvedModelId };\n\t}\n\n\tprivate async callAnthropicClassifier(\n\t\tapiKey: string,\n\t\tmodelId: string,\n\t\ttoolName: string,\n\t\targsJson: string,\n\t\tcontext: ClassifierContext,\n\t): Promise<boolean> {\n\t\tconst systemPrompt = `You are a security classifier for an autonomous coding agent. Your job is to decide ALLOW or DENY for a pending tool call.\n\nDEFAULT: ALLOW. The user enabled auto mode because they trust the agent. Only deny clear security violations.\n\nALWAYS ALLOW:\n- Any read-only operation: find, grep, ls, cat, head, tail, wc, stat, file, du, df, echo, pwd, env, which, sort, awk, sed -n\n- Any git read operation: git status, git log, git diff, git show, git branch, git blame, git remote\n- Build/test/lint: npm run *, npx *, tsc, eslint, jest, vitest, cargo, make\n- Writing or editing files inside the project directory\n- Installing packages: npm install, pip install, cargo add\n- Operations clearly implied by the user's recent messages\n\nDENY only these specific violations:\n- Deleting files with rm, unlink, rmdir (unless user explicitly said \"delete\" or \"remove\" that file)\n- Commands outside the project directory targeting system paths (/etc, /usr, /bin, /System, ~/.ssh)\n- sudo, su, chmod/chown on system paths\n- curl/wget piped directly to sh/bash (arbitrary code execution)\n- curl/wget sending local files or env vars to external hosts (e.g. -d @~/.ssh/id_rsa, -d \"$(env)\")\n- ssh, scp, sftp — remote shell/file access is out of scope for a coding agent\n- nc/ncat in listen/server mode (-l flag) — reverse shell risk\n- kill -9, killall — terminating arbitrary processes\n- crontab — modifying scheduled jobs\n- dd, mkfs — disk/filesystem writes\n- sed -i — in-place file editing that can silently corrupt files; agent should use proper edit tools\n- npm publish, pip publish, twine upload — publishing packages requires explicit user action\n- git push --force / git push -f — destructive remote history rewrite\n- Accessing credential files unrelated to the current task (~/.aws, ~/.ssh/id_rsa, /etc/passwd)\n- Commands that clearly contradict the user's stated intent\n\nUse the user's recent messages to judge intent. If the user asked for something and the tool call implements it, ALLOW.\n\nOutput exactly one word: ALLOW or DENY.`;\n\n\t\tconst userPrompt = this.buildUserPrompt(toolName, argsJson, context);\n\n\t\treturn new Promise<boolean>((resolve, reject) => {\n\t\t\tconst data = JSON.stringify({\n\t\t\t\tmodel: modelId,\n\t\t\t\tmax_tokens: 10,\n\t\t\t\tsystem: systemPrompt,\n\t\t\t\tmessages: [{ role: \"user\", content: userPrompt }],\n\t\t\t});\n\t\t\tconst headers: Record<string, string | number> = {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\"anthropic-version\": \"2023-06-01\",\n\t\t\t\t\"Content-Length\": Buffer.byteLength(data),\n\t\t\t};\n\t\t\tif (isOAuthToken(apiKey)) {\n\t\t\t\theaders.Authorization = `Bearer ${apiKey}`;\n\t\t\t\theaders[\"anthropic-beta\"] = \"claude-code-20250219,oauth-2025-04-20,fine-grained-tool-streaming-2025-05-14\";\n\t\t\t\theaders[\"user-agent\"] = \"claude-cli/2.1.62\";\n\t\t\t\theaders[\"x-app\"] = \"cli\";\n\t\t\t} else {\n\t\t\t\theaders[\"x-api-key\"] = apiKey;\n\t\t\t}\n\n\t\t\tconst req = request(\n\t\t\t\t{ hostname: \"api.anthropic.com\", port: 443, path: \"/v1/messages\", method: \"POST\", headers, timeout: 10_000 },\n\t\t\t\t(res) => {\n\t\t\t\t\tlet body = \"\";\n\t\t\t\t\tres.on(\"data\", (chunk) => { body += chunk; });\n\t\t\t\t\tres.on(\"end\", () => {\n\t\t\t\t\t\tif (res.statusCode !== 200) {\n\t\t\t\t\t\t\treject(new Error(`anthropic ${res.statusCode}: ${body}`));\n\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t}\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tconst parsed = JSON.parse(body);\n\t\t\t\t\t\t\tconst text = parsed?.content?.[0]?.text?.trim?.().toUpperCase?.();\n\t\t\t\t\t\t\tresolve(text === \"ALLOW\");\n\t\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\t\treject(error);\n\t\t\t\t\t\t}\n\t\t\t\t\t});\n\t\t\t\t},\n\t\t\t);\n\t\t\treq.on(\"timeout\", () => req.destroy(new Error(\"timeout\")));\n\t\t\treq.on(\"error\", reject);\n\t\t\treq.write(data);\n\t\t\treq.end();\n\t\t});\n\t}\n\n\tprivate async callGeminiClassifier(\n\t\tapiKey: string,\n\t\tmodelId: string,\n\t\ttoolName: string,\n\t\targsJson: string,\n\t\tcontext: ClassifierContext,\n\t): Promise<boolean> {\n\t\tconst systemPrompt = `You are a security classifier for an autonomous coding agent. Decide ALLOW or DENY for a pending tool call.\n\nDEFAULT: ALLOW. The user enabled auto mode because they trust the agent. Only deny clear security violations.\n\nALLOW:\n- Read-only commands\n- Git read commands\n- Build/test/lint commands\n- Writing/editing files inside the project\n- Commands clearly requested by the user\n\nDENY:\n- rm/unlink/rmdir unless the user explicitly asked to delete/remove that file\n- system-path modifications (/etc, /usr, /bin, /System, ~/.ssh)\n- sudo/su\n- curl/wget piped to shell\n- exfiltrating local secrets/files\n- ssh/scp/sftp\n- nc/ncat -l\n- kill -9 / killall\n- crontab\n- dd / mkfs\n- sed -i\n- npm/pip/twine publish\n- git push --force / -f\n\nOutput exactly one word: ALLOW or DENY.`;\n\n\t\tconst userPrompt = this.buildUserPrompt(toolName, argsJson, context);\n\n\t\treturn new Promise<boolean>((resolve, reject) => {\n\t\t\tconst data = JSON.stringify({\n\t\t\t\tsystem_instruction: { parts: [{ text: systemPrompt }] },\n\t\t\t\tcontents: [{ role: \"user\", parts: [{ text: userPrompt }] }],\n\t\t\t\tgenerationConfig: { temperature: 0, maxOutputTokens: 8 },\n\t\t\t});\n\n\t\t\tconst req = request(\n\t\t\t\t{\n\t\t\t\t\thostname: \"generativelanguage.googleapis.com\",\n\t\t\t\t\tport: 443,\n\t\t\t\t\tpath: `/v1beta/models/${encodeURIComponent(modelId)}:generateContent?key=${encodeURIComponent(apiKey)}`,\n\t\t\t\t\tmethod: \"POST\",\n\t\t\t\t\theaders: {\n\t\t\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\t\t\"Content-Length\": Buffer.byteLength(data),\n\t\t\t\t\t},\n\t\t\t\t\ttimeout: 10_000,\n\t\t\t\t},\n\t\t\t\t(res) => {\n\t\t\t\t\tlet body = \"\";\n\t\t\t\t\tres.on(\"data\", (chunk) => { body += chunk; });\n\t\t\t\t\tres.on(\"end\", () => {\n\t\t\t\t\t\tif (res.statusCode !== 200) {\n\t\t\t\t\t\t\treject(new Error(`gemini ${res.statusCode}: ${body}`));\n\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t}\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tconst parsed = JSON.parse(body);\n\t\t\t\t\t\t\tconst text = parsed?.candidates?.[0]?.content?.parts?.[0]?.text?.trim?.().toUpperCase?.();\n\t\t\t\t\t\t\tresolve(text === \"ALLOW\");\n\t\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\t\treject(error);\n\t\t\t\t\t\t}\n\t\t\t\t\t});\n\t\t\t\t},\n\t\t\t);\n\t\t\treq.on(\"timeout\", () => req.destroy(new Error(\"timeout\")));\n\t\t\treq.on(\"error\", reject);\n\t\t\treq.write(data);\n\t\t\treq.end();\n\t\t});\n\t}\n\n\tprivate buildUserPrompt(toolName: string, argsJson: string, context: ClassifierContext): string {\n\t\tconst recentMessages = context.userMessages.slice(-10).join(\"\\n\\n\");\n\t\treturn `Recent user messages:\n${recentMessages || \"(none)\"}\n\nProject instructions:\n${context.projectInstructions || \"(none)\"}\n\nTool:\n${toolName}\n\nArgs JSON:\n${argsJson}`;\n\t}\n\n\t\tprivate getMatchCandidates(toolName: string, args: any): string[] {\n\t\t\tif (toolName === \"bash\") {\n\t\t\t\tconst command = typeof args?.command === \"string\" ? args.command.trim() : \"\";\n\t\t\t\treturn command ? command.split(/(?:\\n|&&|;|\\|\\|)/).map((part: string) => part.trim()).filter(Boolean) : [];\n\t\t\t}\n\n\t\tconst values: string[] = [];\n\t\tif (args && typeof args === \"object\") {\n\t\t\tfor (const value of Object.values(args)) {\n\t\t\t\tif (typeof value === \"string\") values.push(value);\n\t\t\t}\n\t\t}\n\t\treturn values;\n\t}\n\n\tprivate matchPattern(pattern: string, text: string): boolean {\n\t\tconst escaped = pattern\n\t\t\t.replace(/[.+?^${}()|[\\]\\\\]/g, \"\\\\$&\")\n\t\t\t.replace(/\\*/g, \".*\");\n\t\treturn new RegExp(`^${escaped}$`, \"i\").test(text.trim());\n\t}\n\n\tprivate allSubcommandsAllowed(candidates: string[], allowPatterns: readonly string[]): boolean {\n\t\treturn candidates.every((candidate) =>\n\t\t\tallowPatterns.some((pattern) => this.matchPattern(pattern, candidate)),\n\t\t);\n\t}\n\n\tprivate hash(input: string): string {\n\t\treturn createHash(\"sha256\").update(input).digest(\"hex\").slice(0, 16);\n\t}\n\n\tprivate async acquireSlot(): Promise<void> {\n\t\tif (this.active < MAX_CONCURRENT) {\n\t\t\tthis.active++;\n\t\t\treturn;\n\t\t}\n\t\tawait new Promise<void>((resolve) => this.queue.push(resolve));\n\t\tthis.active++;\n\t}\n\n\tprivate releaseSlot(): void {\n\t\tthis.active = Math.max(0, this.active - 1);\n\t\tconst next = this.queue.shift();\n\t\tif (next) next();\n\t}\n}\n"]}
+{"version":3,"file":"classifier-service.js","sourceRoot":"","sources":["../../src/core/classifier-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAGrC,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,MAAM,2BAA2B,GAAG;IACnC,OAAO;IACP,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,aAAa;IACb,eAAe;IACf,cAAc;IACd,aAAa;IACb,eAAe;IACf,cAAc;IACd,SAAS;IACT,OAAO;IACP,WAAW;IACX,SAAS;IACT,qBAAqB;IACrB,yBAAyB;IACzB,qBAAqB;IACrB,yBAAyB;IACzB,UAAU;IACV,QAAQ;IACR,WAAW;IACX,SAAS;IACT,WAAW;IACX,SAAS;IACT,QAAQ;IACR,MAAM;IACN,UAAU;IACV,WAAW;IACX,mBAAmB;IACnB,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,eAAe;IACf,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,oBAAoB;IACpB,kBAAkB;IAClB,eAAe;IACf,aAAa;CACJ,CAAC;AAEX,MAAM,4BAA4B,GAAG;IACpC,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,WAAW;IACX,IAAI;IACJ,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,KAAK;IACL,KAAK;IACL,UAAU;IACV,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,WAAW;IACX,MAAM;IACN,MAAM;IACN,IAAI;IACJ,MAAM;IACN,SAAS;IACT,YAAY;IACZ,cAAc;IACd,SAAS;IACT,WAAW;IACX,UAAU;IACV,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,kBAAkB;IAClB,UAAU;IACV,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,eAAe;IACf,eAAe;IACf,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,gBAAgB;IAChB,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,OAAO;IACP,UAAU;IACV,QAAQ;IACR,QAAQ;CACC,CAAC;AAEX,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCA+BO,CAAC;AAmBzC,SAAS,YAAY,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,OAAO,iBAAiB;IAM7B,YAAY,WAAwB;QAL5B,UAAK,GAAG,IAAI,GAAG,EAAoD,CAAC;QACpE,WAAM,GAAG,CAAC,CAAC;QACX,UAAK,GAAsB,EAAE,CAAC;QAIrC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,CAAC;IAED,aAAa,CAAC,QAAgB,EAAE,IAAS,EAAE,QAA0B,EAAE;QACtE,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACzB,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;gBACnD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;oBAC/B,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;wBAAE,OAAO,MAAM,CAAC;gBACrD,CAAC;YACF,CAAC;QACF,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC5D,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;oBAC/B,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;wBAAE,OAAO,MAAM,CAAC;gBAC1D,CAAC;YACF,CAAC;QACF,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC7D,IAAI,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAAE,OAAO,OAAO,CAAC;YAC5E,CAAC;QACF,CAAC;QAED,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,4BAA4B,CAAC;gBAAE,OAAO,OAAO,CAAC;QAC1F,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,QAAgB,EAChB,IAAS,EACT,OAA0B,EAC1B,OAAuH;QAEvH,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC9E,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClF,CAAC;QACD,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClF,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC3H,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;YACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAClF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACvF,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO;gBACN,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,MAAM,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,UAAU;gBACtF,MAAM,EAAE,UAAU;aAClB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC;YACJ,MAAM,QAAQ,GACb,QAAQ,CAAC,QAAQ,KAAK,QAAQ;gBAC7B,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;gBACxF,CAAC,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9D,OAAO;gBACN,QAAQ;gBACR,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,mBAAmB;gBAC9D,MAAM,EAAE,YAAY;aACpB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO;gBACN,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,qBAAqB,OAAO,EAAE;gBACrF,MAAM,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;aACtD,CAAC;QACH,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,WAAW,EAAE,CAAC;QACpB,CAAC;IACF,CAAC;IAEO,uBAAuB,CAAC,QAAiC,EAAE,eAAwB;QAC1F,IAAI,gBAAgB,GAA2B,QAAQ,IAAI,WAAW,CAAC;QACvE,IAAI,eAAe,GAAG,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAEpG,IAAI,eAAe,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YACpF,MAAM,OAAO,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;YAC5F,IAAI,OAAO,EAAE,CAAC;gBACb,IAAI,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxC,gBAAgB,GAAG,QAAQ,CAAC;oBAC5B,eAAe,GAAG,OAAO,CAAC;gBAC3B,CAAC;qBAAM,IAAI,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAClD,gBAAgB,GAAG,WAAW,CAAC;oBAC/B,eAAe,GAAG,OAAO,CAAC;gBAC3B,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACpC,MAAc,EACd,OAAe,EACf,QAAgB,EAChB,QAAgB,EAChB,OAA0B;QAE1B,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAErE,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC3B,KAAK,EAAE,OAAO;gBACd,UAAU,EAAE,EAAE;gBACd,MAAM,EAAE,wBAAwB;gBAChC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;aACjD,CAAC,CAAC;YACH,MAAM,OAAO,GAAoC;gBAChD,cAAc,EAAE,kBAAkB;gBAClC,mBAAmB,EAAE,YAAY;gBACjC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;aACzC,CAAC;YACF,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,EAAE,CAAC;gBAC3C,OAAO,CAAC,gBAAgB,CAAC,GAAG,8EAA8E,CAAC;gBAC3G,OAAO,CAAC,YAAY,CAAC,GAAG,mBAAmB,CAAC;gBAC5C,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACP,OAAO,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC;YAC/B,CAAC;YAED,MAAM,GAAG,GAAG,OAAO,CAClB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAC5G,CAAC,GAAG,EAAE,EAAE;gBACP,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBAClB,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;wBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;wBAC1D,OAAO;oBACR,CAAC;oBACD,IAAI,CAAC;wBACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAChC,MAAM,IAAI,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;wBAClE,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;oBAC3B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,MAAM,CAAC,KAAK,CAAC,CAAC;oBACf,CAAC;gBACF,CAAC,CAAC,CAAC;YACJ,CAAC,CACD,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC3D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChB,GAAG,CAAC,GAAG,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,oBAAoB,CACjC,MAAc,EACd,OAAe,EACf,QAAgB,EAChB,QAAgB,EAChB,OAA0B;QAE1B,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAErE,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC3B,kBAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE;gBACnE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;gBAC3D,gBAAgB,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE;aACxD,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,OAAO,CAClB;gBACC,QAAQ,EAAE,mCAAmC;gBAC7C,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,kBAAkB,kBAAkB,CAAC,OAAO,CAAC,wBAAwB,kBAAkB,CAAC,MAAM,CAAC,EAAE;gBACvG,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACR,cAAc,EAAE,kBAAkB;oBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;iBACzC;gBACD,OAAO,EAAE,MAAM;aACf,EACD,CAAC,GAAG,EAAE,EAAE;gBACP,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBAClB,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;wBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;wBACvD,OAAO;oBACR,CAAC;oBACD,IAAI,CAAC;wBACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAChC,MAAM,IAAI,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;wBAC1F,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;oBAC3B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,MAAM,CAAC,KAAK,CAAC,CAAC;oBACf,CAAC;gBACF,CAAC,CAAC,CAAC;YACJ,CAAC,CACD,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC3D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChB,GAAG,CAAC,GAAG,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,QAAgB,EAAE,QAAgB,EAAE,OAA0B;QACrF,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO;EACP,cAAc,IAAI,QAAQ;;;EAG1B,OAAO,CAAC,mBAAmB,IAAI,QAAQ;;;EAGvC,QAAQ;;;EAGR,QAAQ,EAAE,CAAC;IACZ,CAAC;IAEQ,kBAAkB,CAAC,QAAgB,EAAE,IAAS;QACrD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5G,CAAC;QAEF,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnD,CAAC;QACF,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,YAAY,CAAC,OAAe,EAAE,IAAY;QACjD,MAAM,OAAO,GAAG,OAAO;aACrB,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;aACrC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvB,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAEO,qBAAqB,CAAC,UAAoB,EAAE,aAAgC;QACnF,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CACrC,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CACtE,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,KAAa;QACzB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,WAAW;QACxB,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO;QACR,CAAC;QACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;IACf,CAAC;IAEO,WAAW;QAClB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,IAAI;YAAE,IAAI,EAAE,CAAC;IAClB,CAAC;CACD","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { request } from \"node:https\";\nimport type { AuthStorage } from \"./auth-storage.js\";\n\nconst MAX_CONCURRENT = 5;\n\nconst BUILT_IN_BASH_DENY_PATTERNS = [\n\t\"ssh *\",\n\t\"ssh\",\n\t\"scp *\",\n\t\"sftp *\",\n\t\"sftp\",\n\t\"curl * | sh\",\n\t\"curl * | bash\",\n\t\"curl * | zsh\",\n\t\"wget * | sh\",\n\t\"wget * | bash\",\n\t\"wget * | zsh\",\n\t\"nc -l *\",\n\t\"nc -l\",\n\t\"ncat -l *\",\n\t\"ncat -l\",\n\t\"curl * -d @*/.ssh/*\",\n\t\"curl * --data @*/.ssh/*\",\n\t\"curl * -d @*/.aws/*\",\n\t\"curl * --data @*/.aws/*\",\n\t\"sed -i *\",\n\t\"sed -i\",\n\t\"kill -9 *\",\n\t\"kill -9\",\n\t\"killall *\",\n\t\"killall\",\n\t\"sudo *\",\n\t\"sudo\",\n\t\"rm -rf /\",\n\t\"rm -rf /*\",\n\t\"dd if=* of=/dev/*\",\n\t\"mkfs *\",\n\t\"mkfs.*\",\n\t\"npm publish\",\n\t\"npm publish *\",\n\t\"pip publish\",\n\t\"pip publish *\",\n\t\"twine upload *\",\n\t\"git push --force *\",\n\t\"git push --force\",\n\t\"git push -f *\",\n\t\"git push -f\",\n] as const;\n\nconst BUILT_IN_BASH_ALLOW_PATTERNS = [\n\t\"find *\",\n\t\"grep *\",\n\t\"rg *\",\n\t\"ripgrep *\",\n\t\"ls\",\n\t\"ls *\",\n\t\"cat *\",\n\t\"head *\",\n\t\"tail *\",\n\t\"wc *\",\n\t\"file *\",\n\t\"stat *\",\n\t\"echo *\",\n\t\"printf *\",\n\t\"pwd\",\n\t\"env\",\n\t\"printenv\",\n\t\"printenv *\",\n\t\"which *\",\n\t\"type *\",\n\t\"command *\",\n\t\"du *\",\n\t\"df *\",\n\t\"cd\",\n\t\"cd *\",\n\t\"xargs *\",\n\t\"git status\",\n\t\"git status *\",\n\t\"git log\",\n\t\"git log *\",\n\t\"git diff\",\n\t\"git diff *\",\n\t\"git show\",\n\t\"git show *\",\n\t\"git branch\",\n\t\"git branch *\",\n\t\"git remote\",\n\t\"git remote *\",\n\t\"git blame *\",\n\t\"git stash list\",\n\t\"git stash list *\",\n\t\"npm list\",\n\t\"npm list *\",\n\t\"npm info *\",\n\t\"node --version\",\n\t\"npm --version\",\n\t\"npx --version\",\n\t\"node -v\",\n\t\"npm -v\",\n\t\"npx -v\",\n\t\"tsc --noEmit\",\n\t\"tsc --noEmit *\",\n\t\"sort *\",\n\t\"uniq *\",\n\t\"cut *\",\n\t\"awk *\",\n\t\"sed -n *\",\n\t\"less *\",\n\t\"more *\",\n] as const;\n\nconst CLASSIFIER_SYSTEM_PROMPT = `You are a security classifier for an autonomous coding agent. Your job is to decide ALLOW or DENY for a pending tool call.\n\nDEFAULT: ALLOW. The user enabled auto mode because they trust the agent. Only deny clear security violations.\n\nALWAYS ALLOW:\n- Read-only commands: find, grep, ls, cat, head, tail, wc, stat, file, du, df, echo, pwd, env, which, sort, awk, sed -n\n- Git read operations: status, log, diff, show, branch, blame, remote\n- Build/test/lint: npm run *, npx *, tsc, eslint, jest, vitest, cargo, make\n- Writing or editing files inside the project directory\n- Installing packages: npm install, pip install, cargo add\n- Operations clearly implied by the user's recent messages\n\nDENY only these specific violations:\n- Deleting files with rm, unlink, rmdir (unless user explicitly asked to delete/remove)\n- Commands targeting system paths outside the project (/etc, /usr, /bin, /System, ~/.ssh)\n- sudo, su, chmod, chown on system paths\n- curl/wget piped directly to sh/bash/zsh\n- curl/wget sending local files or env vars to external hosts (e.g. -d @~/.ssh/id_rsa, -d \"$(env)\")\n- ssh, scp, sftp — remote shell/file access is out of scope\n- nc/ncat in listen/server mode (-l flag)\n- kill -9, killall\n- crontab modifications\n- dd, mkfs — disk/filesystem writes\n- sed -i — in-place editing that can silently corrupt files\n- npm publish, pip publish, twine upload\n- git push --force / git push -f\n- Accessing credential files unrelated to the task (~/.aws, ~/.ssh/id_rsa, /etc/passwd)\n- Commands that clearly contradict the user's stated intent\n\nUse the user's recent messages to judge intent. If the user asked for something and the tool call implements it, ALLOW.\n\nOutput exactly one word: ALLOW or DENY.`;\n\nexport interface ClassifierContext {\n\tuserMessages: string[];\n\tprojectInstructions?: string;\n}\n\nexport interface ClassifierDecision {\n\tapproved: boolean;\n\treason: string;\n\tsource: \"rule\" | \"classifier\" | \"cache\" | \"fallback\" | \"timeout\";\n}\n\nexport interface ClassifierRule {\n\ttoolName: string;\n\tpattern: string;\n\tdecision: \"allow\" | \"deny\";\n}\n\nfunction isOAuthToken(token: string): boolean {\n\treturn token.includes(\"sk-ant-oat\");\n}\n\nexport class ClassifierService {\n\tprivate cache = new Map<string, { approved: boolean; timestamp: number }>();\n\tprivate active = 0;\n\tprivate queue: Array<() => void> = [];\n\tprivate authStorage: AuthStorage;\n\n\tconstructor(authStorage: AuthStorage) {\n\t\tthis.authStorage = authStorage;\n\t}\n\n\tevaluateRules(toolName: string, args: any, rules: ClassifierRule[] = []): \"allow\" | \"deny\" | null {\n\t\tconst candidates = this.getMatchCandidates(toolName, args);\n\t\tif (candidates.length === 0) return null;\n\n\t\tif (toolName === \"bash\") {\n\t\t\tfor (const pattern of BUILT_IN_BASH_DENY_PATTERNS) {\n\t\t\t\tfor (const text of candidates) {\n\t\t\t\t\tif (this.matchPattern(pattern, text)) return \"deny\";\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tfor (const rule of rules) {\n\t\t\tif (rule.decision === \"deny\" && rule.toolName === toolName) {\n\t\t\t\tfor (const text of candidates) {\n\t\t\t\t\tif (this.matchPattern(rule.pattern, text)) return \"deny\";\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tfor (const rule of rules) {\n\t\t\tif (rule.decision === \"allow\" && rule.toolName === toolName) {\n\t\t\t\tif (this.allSubcommandsAllowed(candidates, [rule.pattern])) return \"allow\";\n\t\t\t}\n\t\t}\n\n\t\tif (toolName === \"bash\") {\n\t\t\tif (this.allSubcommandsAllowed(candidates, BUILT_IN_BASH_ALLOW_PATTERNS)) return \"allow\";\n\t\t}\n\n\t\treturn null;\n\t}\n\n\tasync classifyToolCall(\n\t\ttoolName: string,\n\t\targs: any,\n\t\tcontext: ClassifierContext,\n\t\toptions?: { provider?: \"anthropic\" | \"google\"; classifierModel?: string; sessionId?: string; rules?: ClassifierRule[] },\n\t): Promise<ClassifierDecision> {\n\t\tconst ruleDecision = this.evaluateRules(toolName, args, options?.rules ?? []);\n\t\tif (ruleDecision === \"allow\") {\n\t\t\treturn { approved: true, reason: \"Matched built-in allow rule\", source: \"rule\" };\n\t\t}\n\t\tif (ruleDecision === \"deny\") {\n\t\t\treturn { approved: false, reason: \"Matched built-in deny rule\", source: \"rule\" };\n\t\t}\n\n\t\tconst resolved = this.resolveClassifierConfig(options?.provider, options?.classifierModel);\n\t\tconst argsJson = JSON.stringify(args);\n\t\tconst latestMessage = context.userMessages.at(-1) ?? \"\";\n\t\tconst cacheKey = `${resolved.provider}:${resolved.modelId}:${toolName}:${this.hash(argsJson)}:${this.hash(latestMessage)}`;\n\t\tconst cached = this.cache.get(cacheKey);\n\t\tif (cached && Date.now() - cached.timestamp < 30_000) {\n\t\t\treturn { approved: cached.approved, reason: \"Cached decision\", source: \"cache\" };\n\t\t}\n\n\t\tconst apiKey = await this.authStorage.getApiKey(resolved.provider, options?.sessionId);\n\t\tif (!apiKey) {\n\t\t\treturn {\n\t\t\t\tapproved: false,\n\t\t\t\treason: `No ${resolved.provider === \"google\" ? \"Google Gemini\" : \"Anthropic\"} API key`,\n\t\t\t\tsource: \"fallback\",\n\t\t\t};\n\t\t}\n\n\t\tawait this.acquireSlot();\n\t\ttry {\n\t\t\tconst approved =\n\t\t\t\tresolved.provider === \"google\"\n\t\t\t\t\t? await this.callGeminiClassifier(apiKey, resolved.modelId, toolName, argsJson, context)\n\t\t\t\t\t: await this.callAnthropicClassifier(apiKey, resolved.modelId, toolName, argsJson, context);\n\t\t\tthis.cache.set(cacheKey, { approved, timestamp: Date.now() });\n\t\t\treturn {\n\t\t\t\tapproved,\n\t\t\t\treason: approved ? \"Classifier approved\" : \"Classifier denied\",\n\t\t\t\tsource: \"classifier\",\n\t\t\t};\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn {\n\t\t\t\tapproved: false,\n\t\t\t\treason: message === \"timeout\" ? \"Classifier timeout\" : `Classifier error: ${message}`,\n\t\t\t\tsource: message === \"timeout\" ? \"timeout\" : \"fallback\",\n\t\t\t};\n\t\t} finally {\n\t\t\tthis.releaseSlot();\n\t\t}\n\t}\n\n\tprivate resolveClassifierConfig(provider?: \"anthropic\" | \"google\", classifierModel?: string): { provider: \"anthropic\" | \"google\"; modelId: string } {\n\t\tlet resolvedProvider: \"anthropic\" | \"google\" = provider ?? \"anthropic\";\n\t\tlet resolvedModelId = resolvedProvider === \"google\" ? \"gemini-3-flash-preview\" : \"claude-haiku-4-5\";\n\n\t\tif (classifierModel) {\n\t\t\tconst slashIndex = classifierModel.indexOf(\"/\");\n\t\t\tconst modelProvider = slashIndex === -1 ? \"\" : classifierModel.slice(0, slashIndex);\n\t\t\tconst modelId = slashIndex === -1 ? classifierModel : classifierModel.slice(slashIndex + 1);\n\t\t\tif (modelId) {\n\t\t\t\tif (modelProvider.startsWith(\"google\")) {\n\t\t\t\t\tresolvedProvider = \"google\";\n\t\t\t\t\tresolvedModelId = modelId;\n\t\t\t\t} else if (modelProvider.startsWith(\"anthropic\")) {\n\t\t\t\t\tresolvedProvider = \"anthropic\";\n\t\t\t\t\tresolvedModelId = modelId;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn { provider: resolvedProvider, modelId: resolvedModelId };\n\t}\n\n\tprivate async callAnthropicClassifier(\n\t\tapiKey: string,\n\t\tmodelId: string,\n\t\ttoolName: string,\n\t\targsJson: string,\n\t\tcontext: ClassifierContext,\n\t): Promise<boolean> {\n\t\tconst userPrompt = this.buildUserPrompt(toolName, argsJson, context);\n\n\t\treturn new Promise<boolean>((resolve, reject) => {\n\t\t\tconst data = JSON.stringify({\n\t\t\t\tmodel: modelId,\n\t\t\t\tmax_tokens: 10,\n\t\t\t\tsystem: CLASSIFIER_SYSTEM_PROMPT,\n\t\t\t\tmessages: [{ role: \"user\", content: userPrompt }],\n\t\t\t});\n\t\t\tconst headers: Record<string, string | number> = {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\"anthropic-version\": \"2023-06-01\",\n\t\t\t\t\"Content-Length\": Buffer.byteLength(data),\n\t\t\t};\n\t\t\tif (isOAuthToken(apiKey)) {\n\t\t\t\theaders.Authorization = `Bearer ${apiKey}`;\n\t\t\t\theaders[\"anthropic-beta\"] = \"claude-code-20250219,oauth-2025-04-20,fine-grained-tool-streaming-2025-05-14\";\n\t\t\t\theaders[\"user-agent\"] = \"claude-cli/2.1.62\";\n\t\t\t\theaders[\"x-app\"] = \"cli\";\n\t\t\t} else {\n\t\t\t\theaders[\"x-api-key\"] = apiKey;\n\t\t\t}\n\n\t\t\tconst req = request(\n\t\t\t\t{ hostname: \"api.anthropic.com\", port: 443, path: \"/v1/messages\", method: \"POST\", headers, timeout: 10_000 },\n\t\t\t\t(res) => {\n\t\t\t\t\tlet body = \"\";\n\t\t\t\t\tres.on(\"data\", (chunk) => { body += chunk; });\n\t\t\t\t\tres.on(\"end\", () => {\n\t\t\t\t\t\tif (res.statusCode !== 200) {\n\t\t\t\t\t\t\treject(new Error(`anthropic ${res.statusCode}: ${body}`));\n\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t}\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tconst parsed = JSON.parse(body);\n\t\t\t\t\t\t\tconst text = parsed?.content?.[0]?.text?.trim?.().toUpperCase?.();\n\t\t\t\t\t\t\tresolve(text === \"ALLOW\");\n\t\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\t\treject(error);\n\t\t\t\t\t\t}\n\t\t\t\t\t});\n\t\t\t\t},\n\t\t\t);\n\t\t\treq.on(\"timeout\", () => req.destroy(new Error(\"timeout\")));\n\t\t\treq.on(\"error\", reject);\n\t\t\treq.write(data);\n\t\t\treq.end();\n\t\t});\n\t}\n\n\tprivate async callGeminiClassifier(\n\t\tapiKey: string,\n\t\tmodelId: string,\n\t\ttoolName: string,\n\t\targsJson: string,\n\t\tcontext: ClassifierContext,\n\t): Promise<boolean> {\n\t\tconst userPrompt = this.buildUserPrompt(toolName, argsJson, context);\n\n\t\treturn new Promise<boolean>((resolve, reject) => {\n\t\t\tconst data = JSON.stringify({\n\t\t\t\tsystem_instruction: { parts: [{ text: CLASSIFIER_SYSTEM_PROMPT }] },\n\t\t\t\tcontents: [{ role: \"user\", parts: [{ text: userPrompt }] }],\n\t\t\t\tgenerationConfig: { temperature: 0, maxOutputTokens: 8 },\n\t\t\t});\n\n\t\t\tconst req = request(\n\t\t\t\t{\n\t\t\t\t\thostname: \"generativelanguage.googleapis.com\",\n\t\t\t\t\tport: 443,\n\t\t\t\t\tpath: `/v1beta/models/${encodeURIComponent(modelId)}:generateContent?key=${encodeURIComponent(apiKey)}`,\n\t\t\t\t\tmethod: \"POST\",\n\t\t\t\t\theaders: {\n\t\t\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\t\t\"Content-Length\": Buffer.byteLength(data),\n\t\t\t\t\t},\n\t\t\t\t\ttimeout: 10_000,\n\t\t\t\t},\n\t\t\t\t(res) => {\n\t\t\t\t\tlet body = \"\";\n\t\t\t\t\tres.on(\"data\", (chunk) => { body += chunk; });\n\t\t\t\t\tres.on(\"end\", () => {\n\t\t\t\t\t\tif (res.statusCode !== 200) {\n\t\t\t\t\t\t\treject(new Error(`gemini ${res.statusCode}: ${body}`));\n\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t}\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tconst parsed = JSON.parse(body);\n\t\t\t\t\t\t\tconst text = parsed?.candidates?.[0]?.content?.parts?.[0]?.text?.trim?.().toUpperCase?.();\n\t\t\t\t\t\t\tresolve(text === \"ALLOW\");\n\t\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\t\treject(error);\n\t\t\t\t\t\t}\n\t\t\t\t\t});\n\t\t\t\t},\n\t\t\t);\n\t\t\treq.on(\"timeout\", () => req.destroy(new Error(\"timeout\")));\n\t\t\treq.on(\"error\", reject);\n\t\t\treq.write(data);\n\t\t\treq.end();\n\t\t});\n\t}\n\n\tprivate buildUserPrompt(toolName: string, argsJson: string, context: ClassifierContext): string {\n\t\tconst recentMessages = context.userMessages.slice(-10).join(\"\\n\\n\");\n\t\treturn `Recent user messages:\n${recentMessages || \"(none)\"}\n\nProject instructions:\n${context.projectInstructions || \"(none)\"}\n\nTool:\n${toolName}\n\nArgs JSON:\n${argsJson}`;\n\t}\n\n\t\tprivate getMatchCandidates(toolName: string, args: any): string[] {\n\t\t\tif (toolName === \"bash\") {\n\t\t\t\tconst command = typeof args?.command === \"string\" ? args.command.trim() : \"\";\n\t\t\t\treturn command ? command.split(/(?:\\n|&&|;|\\|\\|)/).map((part: string) => part.trim()).filter(Boolean) : [];\n\t\t\t}\n\n\t\tconst values: string[] = [];\n\t\tif (args && typeof args === \"object\") {\n\t\t\tfor (const value of Object.values(args)) {\n\t\t\t\tif (typeof value === \"string\") values.push(value);\n\t\t\t}\n\t\t}\n\t\treturn values;\n\t}\n\n\tprivate matchPattern(pattern: string, text: string): boolean {\n\t\tconst escaped = pattern\n\t\t\t.replace(/[.+?^${}()|[\\]\\\\]/g, \"\\\\$&\")\n\t\t\t.replace(/\\*/g, \".*\");\n\t\treturn new RegExp(`^${escaped}$`, \"i\").test(text.trim());\n\t}\n\n\tprivate allSubcommandsAllowed(candidates: string[], allowPatterns: readonly string[]): boolean {\n\t\treturn candidates.every((candidate) =>\n\t\t\tallowPatterns.some((pattern) => this.matchPattern(pattern, candidate)),\n\t\t);\n\t}\n\n\tprivate hash(input: string): string {\n\t\treturn createHash(\"sha256\").update(input).digest(\"hex\").slice(0, 16);\n\t}\n\n\tprivate async acquireSlot(): Promise<void> {\n\t\tif (this.active < MAX_CONCURRENT) {\n\t\t\tthis.active++;\n\t\t\treturn;\n\t\t}\n\t\tawait new Promise<void>((resolve) => this.queue.push(resolve));\n\t\tthis.active++;\n\t}\n\n\tprivate releaseSlot(): void {\n\t\tthis.active = Math.max(0, this.active - 1);\n\t\tconst next = this.queue.shift();\n\t\tif (next) next();\n\t}\n}\n"]}

package/packages/pi-coding-agent/dist/core/compaction/utils.d.ts

@@ -74,5 +74,5 @@ export declare function createSummarizationMessage(promptText: string): [{
  * reasonable token budgets. Full content is not needed for summarization.
  */
 export declare function serializeConversation(messages: Message[]): string;
-export declare const SUMMARIZATION_SYSTEM_PROMPT = "You are a context summarization assistant. Your task is to read a conversation between a user and an AI coding assistant, then produce a structured summary following the exact format specified.\n\nDo NOT continue the conversation. Do NOT respond to any questions in the conversation. ONLY output the structured summary.";
+export declare const SUMMARIZATION_SYSTEM_PROMPT = "You are a context summarization assistant. Your task is to read a conversation between a user and an AI coding assistant, then produce a structured summary following the exact format specified.\n\nDo NOT continue the conversation. Do NOT respond to any questions in the conversation. ONLY output the structured summary.\n\nCRITICAL: Never reproduce secrets, API keys, tokens, passwords, or credentials in the summary. If you encounter any, redact them as [REDACTED].";
 //# sourceMappingURL=utils.d.ts.map

package/packages/pi-coding-agent/dist/core/compaction/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/core/compaction/utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAO1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAM1D,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACpB;AAED,wBAAgB,aAAa,IAAI,cAAc,CAM9C;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CA2B9F;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,cAAc,GAAG;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAK1G;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,MAAM,CAUzF;AAMD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,EAAE,eAAe,UAAQ,GAAG,YAAY,GAAG,SAAS,CAqB1G;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC9B,OAAO,EAAE,YAAY,EAAE,EACvB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,eAAe,UAAQ,GACrB,YAAY,EAAE,CAOhB;AAMD;;;GAGG;AACH,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,EAC/C,SAAS,SAAO,GACd,MAAM,CAKR;AAMD;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAQ/I;AAkBD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAqDjE;AAMD,eAAO,MAAM,2BAA2B,oUAEmF,CAAC"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/core/compaction/utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAO1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAM1D,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACpB;AAED,wBAAgB,aAAa,IAAI,cAAc,CAM9C;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CA2B9F;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,cAAc,GAAG;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAK1G;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,MAAM,CAUzF;AAMD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,EAAE,eAAe,UAAQ,GAAG,YAAY,GAAG,SAAS,CAqB1G;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC9B,OAAO,EAAE,YAAY,EAAE,EACvB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,eAAe,UAAQ,GACrB,YAAY,EAAE,CAOhB;AAMD;;;GAGG;AACH,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,EAC/C,SAAS,SAAO,GACd,MAAM,CAKR;AAMD;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAQ/I;AAkBD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAqDjE;AAMD,eAAO,MAAM,2BAA2B,udAIwG,CAAC"}

package/packages/pi-coding-agent/dist/core/compaction/utils.js

@@ -227,5 +227,7 @@ export function serializeConversation(messages) {
 // ============================================================================
 export const SUMMARIZATION_SYSTEM_PROMPT = `You are a context summarization assistant. Your task is to read a conversation between a user and an AI coding assistant, then produce a structured summary following the exact format specified.
 
-Do NOT continue the conversation. Do NOT respond to any questions in the conversation. ONLY output the structured summary.`;
+Do NOT continue the conversation. Do NOT respond to any questions in the conversation. ONLY output the structured summary.
+
+CRITICAL: Never reproduce secrets, API keys, tokens, passwords, or credentials in the summary. If you encounter any, redact them as [REDACTED].`;
 //# sourceMappingURL=utils.js.map

package/packages/pi-coding-agent/dist/core/compaction/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/core/compaction/utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACN,0BAA0B,EAC1B,8BAA8B,EAC9B,mBAAmB,GACnB,MAAM,gBAAgB,CAAC;AAaxB,MAAM,UAAU,aAAa;IAC5B,OAAO;QACN,IAAI,EAAE,IAAI,GAAG,EAAE;QACf,OAAO,EAAE,IAAI,GAAG,EAAE;QAClB,MAAM,EAAE,IAAI,GAAG,EAAE;KACjB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAqB,EAAE,OAAuB;IACvF,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO;IACzC,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO;IAEvE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC1D,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS;QAC9D,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAAE,SAAS;QAE5D,MAAM,IAAI,GAAG,KAAK,CAAC,SAAgD,CAAC;QACpE,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,MAAM;gBACV,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvB,MAAM;YACP,KAAK,OAAO;gBACX,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC1B,MAAM;YACP,KAAK,MAAM;gBACV,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACzB,MAAM;QACR,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAuB;IACvD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,MAAM,aAAa,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAmB,EAAE,aAAuB;IAChF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC,iBAAiB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC,qBAAqB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAmB,EAAE,eAAe,GAAG,KAAK;IAC/E,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,SAAS;YACb,IAAI,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY;gBAAE,OAAO,SAAS,CAAC;YAC7E,OAAO,KAAK,CAAC,OAAO,CAAC;QAEtB,KAAK,gBAAgB;YACpB,OAAO,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAE5G,KAAK,gBAAgB;YACpB,OAAO,0BAA0B,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAEjF,KAAK,YAAY;YAChB,OAAO,8BAA8B,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAE3F,KAAK,uBAAuB,CAAC;QAC7B,KAAK,cAAc,CAAC;QACpB,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO;YACX,OAAO,SAAS,CAAC;IACnB,CAAC;AACF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC9B,OAAuB,EACvB,UAAkB,EAClB,QAAgB,EAChB,eAAe,GAAG,KAAK;IAEvB,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QAC7D,IAAI,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CACjC,OAA+C,EAC/C,SAAS,GAAG,IAAI;IAEhB,OAAO,OAAO;SACZ,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;SACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,IAAI,CAAC,SAAS,CAAC,CAAC;AACnB,CAAC;AAED,+EAA+E;AAC/E,qCAAqC;AACrC,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,UAAkB;IAC5D,OAAO;QACN;YACC,IAAI,EAAE,MAAe;YACrB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YACtD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB;KACD,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,sDAAsD;AAEtD;;;GAGG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,QAAgB;IACzD,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;IAC9C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,YAAY,cAAc,6BAA6B,CAAC;AAC1F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAmB;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,OAAO,GACZ,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;gBAC9B,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,GAAG,CAAC,OAAO;qBACV,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;qBACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;qBAClB,IAAI,CAAC,EAAE,CAAC,CAAC;YACd,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACrC,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,MAAM,aAAa,GAAa,EAAE,CAAC;YACnC,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC3B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACtC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpC,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAoC,CAAC;oBACxD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;yBAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC5C,IAAI,CAAC,IAAI,CAAC,CAAC;oBACb,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,CAAC;gBAC7C,CAAC;YACF,CAAC;YAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,yBAAyB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,gBAAgB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,2BAA2B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;QACF,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO;iBACzB,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;iBACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,CAAC,EAAE,CAAC,CAAC;YACX,IAAI,OAAO,EAAE,CAAC;gBACb,KAAK,CAAC,IAAI,CAAC,kBAAkB,kBAAkB,CAAC,OAAO,EAAE,qBAAqB,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,8BAA8B;AAC9B,+EAA+E;AAE/E,MAAM,CAAC,MAAM,2BAA2B,GAAG;;2HAEgF,CAAC","sourcesContent":["/**\n * Shared utilities for compaction and branch summarization.\n */\n\nimport type { AgentMessage } from \"@gsd/pi-agent-core\";\nimport type { Message } from \"@gsd/pi-ai\";\nimport { TOOL_RESULT_MAX_CHARS } from \"../constants.js\";\nimport {\n\tcreateBranchSummaryMessage,\n\tcreateCompactionSummaryMessage,\n\tcreateCustomMessage,\n} from \"../messages.js\";\nimport type { SessionEntry } from \"../session-manager.js\";\n\n// ============================================================================\n// File Operation Tracking\n// ============================================================================\n\nexport interface FileOperations {\n\tread: Set<string>;\n\twritten: Set<string>;\n\tedited: Set<string>;\n}\n\nexport function createFileOps(): FileOperations {\n\treturn {\n\t\tread: new Set(),\n\t\twritten: new Set(),\n\t\tedited: new Set(),\n\t};\n}\n\n/**\n * Extract file operations from tool calls in an assistant message.\n */\nexport function extractFileOpsFromMessage(message: AgentMessage, fileOps: FileOperations): void {\n\tif (message.role !== \"assistant\") return;\n\tif (!(\"content\" in message) || !Array.isArray(message.content)) return;\n\n\tfor (const block of message.content) {\n\t\tif (typeof block !== \"object\" || block === null) continue;\n\t\tif (!(\"type\" in block) || block.type !== \"toolCall\") continue;\n\t\tif (!(\"arguments\" in block) || !(\"name\" in block)) continue;\n\n\t\tconst args = block.arguments as Record<string, unknown> | undefined;\n\t\tif (!args) continue;\n\n\t\tconst path = typeof args.path === \"string\" ? args.path : undefined;\n\t\tif (!path) continue;\n\n\t\tswitch (block.name) {\n\t\t\tcase \"read\":\n\t\t\t\tfileOps.read.add(path);\n\t\t\t\tbreak;\n\t\t\tcase \"write\":\n\t\t\t\tfileOps.written.add(path);\n\t\t\t\tbreak;\n\t\t\tcase \"edit\":\n\t\t\t\tfileOps.edited.add(path);\n\t\t\t\tbreak;\n\t\t}\n\t}\n}\n\n/**\n * Compute final file lists from file operations.\n * Returns readFiles (files only read, not modified) and modifiedFiles.\n */\nexport function computeFileLists(fileOps: FileOperations): { readFiles: string[]; modifiedFiles: string[] } {\n\tconst modified = new Set([...fileOps.edited, ...fileOps.written]);\n\tconst readOnly = [...fileOps.read].filter((f) => !modified.has(f)).sort();\n\tconst modifiedFiles = [...modified].sort();\n\treturn { readFiles: readOnly, modifiedFiles };\n}\n\n/**\n * Format file operations as XML tags for summary.\n */\nexport function formatFileOperations(readFiles: string[], modifiedFiles: string[]): string {\n\tconst sections: string[] = [];\n\tif (readFiles.length > 0) {\n\t\tsections.push(`<read-files>\\n${readFiles.join(\"\\n\")}\\n</read-files>`);\n\t}\n\tif (modifiedFiles.length > 0) {\n\t\tsections.push(`<modified-files>\\n${modifiedFiles.join(\"\\n\")}\\n</modified-files>`);\n\t}\n\tif (sections.length === 0) return \"\";\n\treturn `\\n\\n${sections.join(\"\\n\\n\")}`;\n}\n\n// ============================================================================\n// Message Extraction\n// ============================================================================\n\n/**\n * Extract AgentMessage from a session entry.\n *\n * Handles all entry types: message, custom_message, branch_summary, and compaction.\n * Returns undefined for entries that don't contribute to LLM context (e.g., settings changes).\n *\n * @param skipToolResults - If true, skips toolResult messages (used by branch summarization\n *   where tool call context is sufficient). Default false.\n */\nexport function getMessageFromEntry(entry: SessionEntry, skipToolResults = false): AgentMessage | undefined {\n\tswitch (entry.type) {\n\t\tcase \"message\":\n\t\t\tif (skipToolResults && entry.message.role === \"toolResult\") return undefined;\n\t\t\treturn entry.message;\n\n\t\tcase \"custom_message\":\n\t\t\treturn createCustomMessage(entry.customType, entry.content, entry.display, entry.details, entry.timestamp);\n\n\t\tcase \"branch_summary\":\n\t\t\treturn createBranchSummaryMessage(entry.summary, entry.fromId, entry.timestamp);\n\n\t\tcase \"compaction\":\n\t\t\treturn createCompactionSummaryMessage(entry.summary, entry.tokensBefore, entry.timestamp);\n\n\t\tcase \"thinking_level_change\":\n\t\tcase \"model_change\":\n\t\tcase \"custom\":\n\t\tcase \"label\":\n\t\t\treturn undefined;\n\t}\n}\n\n/**\n * Collect AgentMessages from a range of session entries.\n *\n * @param entries - Session entries array\n * @param startIndex - First index (inclusive)\n * @param endIndex - Last index (exclusive)\n * @param skipToolResults - If true, skips toolResult messages. Default false.\n */\nexport function collectMessages(\n\tentries: SessionEntry[],\n\tstartIndex: number,\n\tendIndex: number,\n\tskipToolResults = false,\n): AgentMessage[] {\n\tconst result: AgentMessage[] = [];\n\tfor (let i = startIndex; i < endIndex; i++) {\n\t\tconst msg = getMessageFromEntry(entries[i], skipToolResults);\n\t\tif (msg) result.push(msg);\n\t}\n\treturn result;\n}\n\n// ============================================================================\n// Text Content Extraction\n// ============================================================================\n\n/**\n * Extract text from an array of content blocks, filtering to text-type blocks.\n * Replaces the recurring `.filter(c => c.type === \"text\").map(c => c.text).join(sep)` pattern.\n */\nexport function extractTextContent(\n\tcontent: Array<{ type: string; text?: string }>,\n\tseparator = \"\\n\",\n): string {\n\treturn content\n\t\t.filter((c): c is { type: \"text\"; text: string } => c.type === \"text\")\n\t\t.map((c) => c.text)\n\t\t.join(separator);\n}\n\n// ============================================================================\n// Summarization Message Construction\n// ============================================================================\n\n/**\n * Create a single-message array for summarization prompts.\n * Wraps promptText in the standard `[{ role: \"user\", content: [{ type: \"text\", text }], timestamp }]` shape.\n */\nexport function createSummarizationMessage(promptText: string): [{ role: \"user\"; content: [{ type: \"text\"; text: string }]; timestamp: number }] {\n\treturn [\n\t\t{\n\t\t\trole: \"user\" as const,\n\t\t\tcontent: [{ type: \"text\" as const, text: promptText }],\n\t\t\ttimestamp: Date.now(),\n\t\t},\n\t];\n}\n\n// ============================================================================\n// Message Serialization\n// ============================================================================\n\n// TOOL_RESULT_MAX_CHARS imported from ../constants.js\n\n/**\n * Truncate text to a maximum character length for summarization.\n * Keeps the beginning and appends a truncation marker.\n */\nfunction truncateForSummary(text: string, maxChars: number): string {\n\tif (text.length <= maxChars) return text;\n\tconst truncatedChars = text.length - maxChars;\n\treturn `${text.slice(0, maxChars)}\\n\\n[... ${truncatedChars} more characters truncated]`;\n}\n\n/**\n * Serialize LLM messages to text for summarization.\n * This prevents the model from treating it as a conversation to continue.\n * Call convertToLlm() first to handle custom message types.\n *\n * Tool results are truncated to keep the summarization request within\n * reasonable token budgets. Full content is not needed for summarization.\n */\nexport function serializeConversation(messages: Message[]): string {\n\tconst parts: string[] = [];\n\n\tfor (const msg of messages) {\n\t\tif (msg.role === \"user\") {\n\t\t\tconst content =\n\t\t\t\ttypeof msg.content === \"string\"\n\t\t\t\t\t? msg.content\n\t\t\t\t\t: msg.content\n\t\t\t\t\t\t\t.filter((c): c is { type: \"text\"; text: string } => c.type === \"text\")\n\t\t\t\t\t\t\t.map((c) => c.text)\n\t\t\t\t\t\t\t.join(\"\");\n\t\t\tif (content) parts.push(`[User]: ${content}`);\n\t\t} else if (msg.role === \"assistant\") {\n\t\t\tconst textParts: string[] = [];\n\t\t\tconst thinkingParts: string[] = [];\n\t\t\tconst toolCalls: string[] = [];\n\n\t\t\tfor (const block of msg.content) {\n\t\t\t\tif (block.type === \"text\") {\n\t\t\t\t\ttextParts.push(block.text);\n\t\t\t\t} else if (block.type === \"thinking\") {\n\t\t\t\t\tthinkingParts.push(block.thinking);\n\t\t\t\t} else if (block.type === \"toolCall\") {\n\t\t\t\t\tconst args = block.arguments as Record<string, unknown>;\n\t\t\t\t\tconst argsStr = Object.entries(args)\n\t\t\t\t\t\t.map(([k, v]) => `${k}=${JSON.stringify(v)}`)\n\t\t\t\t\t\t.join(\", \");\n\t\t\t\t\ttoolCalls.push(`${block.name}(${argsStr})`);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (thinkingParts.length > 0) {\n\t\t\t\tparts.push(`[Assistant thinking]: ${thinkingParts.join(\"\\n\")}`);\n\t\t\t}\n\t\t\tif (textParts.length > 0) {\n\t\t\t\tparts.push(`[Assistant]: ${textParts.join(\"\\n\")}`);\n\t\t\t}\n\t\t\tif (toolCalls.length > 0) {\n\t\t\t\tparts.push(`[Assistant tool calls]: ${toolCalls.join(\"; \")}`);\n\t\t\t}\n\t\t} else if (msg.role === \"toolResult\") {\n\t\t\tconst content = msg.content\n\t\t\t\t.filter((c): c is { type: \"text\"; text: string } => c.type === \"text\")\n\t\t\t\t.map((c) => c.text)\n\t\t\t\t.join(\"\");\n\t\t\tif (content) {\n\t\t\t\tparts.push(`[Tool result]: ${truncateForSummary(content, TOOL_RESULT_MAX_CHARS)}`);\n\t\t\t}\n\t\t}\n\t}\n\n\treturn parts.join(\"\\n\\n\");\n}\n\n// ============================================================================\n// Summarization System Prompt\n// ============================================================================\n\nexport const SUMMARIZATION_SYSTEM_PROMPT = `You are a context summarization assistant. Your task is to read a conversation between a user and an AI coding assistant, then produce a structured summary following the exact format specified.\n\nDo NOT continue the conversation. Do NOT respond to any questions in the conversation. ONLY output the structured summary.`;\n"]}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/core/compaction/utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACN,0BAA0B,EAC1B,8BAA8B,EAC9B,mBAAmB,GACnB,MAAM,gBAAgB,CAAC;AAaxB,MAAM,UAAU,aAAa;IAC5B,OAAO;QACN,IAAI,EAAE,IAAI,GAAG,EAAE;QACf,OAAO,EAAE,IAAI,GAAG,EAAE;QAClB,MAAM,EAAE,IAAI,GAAG,EAAE;KACjB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAqB,EAAE,OAAuB;IACvF,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO;IACzC,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO;IAEvE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC1D,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS;QAC9D,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAAE,SAAS;QAE5D,MAAM,IAAI,GAAG,KAAK,CAAC,SAAgD,CAAC;QACpE,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,MAAM;gBACV,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvB,MAAM;YACP,KAAK,OAAO;gBACX,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC1B,MAAM;YACP,KAAK,MAAM;gBACV,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACzB,MAAM;QACR,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAuB;IACvD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,MAAM,aAAa,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAmB,EAAE,aAAuB;IAChF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC,iBAAiB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC,qBAAqB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAmB,EAAE,eAAe,GAAG,KAAK;IAC/E,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,SAAS;YACb,IAAI,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY;gBAAE,OAAO,SAAS,CAAC;YAC7E,OAAO,KAAK,CAAC,OAAO,CAAC;QAEtB,KAAK,gBAAgB;YACpB,OAAO,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAE5G,KAAK,gBAAgB;YACpB,OAAO,0BAA0B,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAEjF,KAAK,YAAY;YAChB,OAAO,8BAA8B,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAE3F,KAAK,uBAAuB,CAAC;QAC7B,KAAK,cAAc,CAAC;QACpB,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO;YACX,OAAO,SAAS,CAAC;IACnB,CAAC;AACF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC9B,OAAuB,EACvB,UAAkB,EAClB,QAAgB,EAChB,eAAe,GAAG,KAAK;IAEvB,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QAC7D,IAAI,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CACjC,OAA+C,EAC/C,SAAS,GAAG,IAAI;IAEhB,OAAO,OAAO;SACZ,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;SACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,IAAI,CAAC,SAAS,CAAC,CAAC;AACnB,CAAC;AAED,+EAA+E;AAC/E,qCAAqC;AACrC,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,UAAkB;IAC5D,OAAO;QACN;YACC,IAAI,EAAE,MAAe;YACrB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YACtD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB;KACD,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,sDAAsD;AAEtD;;;GAGG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,QAAgB;IACzD,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;IAC9C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,YAAY,cAAc,6BAA6B,CAAC;AAC1F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAmB;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,OAAO,GACZ,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;gBAC9B,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,GAAG,CAAC,OAAO;qBACV,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;qBACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;qBAClB,IAAI,CAAC,EAAE,CAAC,CAAC;YACd,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACrC,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,MAAM,aAAa,GAAa,EAAE,CAAC;YACnC,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC3B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACtC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpC,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAoC,CAAC;oBACxD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;yBAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC5C,IAAI,CAAC,IAAI,CAAC,CAAC;oBACb,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,CAAC;gBAC7C,CAAC;YACF,CAAC;YAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,yBAAyB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,gBAAgB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,2BAA2B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;QACF,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO;iBACzB,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;iBACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,CAAC,EAAE,CAAC,CAAC;YACX,IAAI,OAAO,EAAE,CAAC;gBACb,KAAK,CAAC,IAAI,CAAC,kBAAkB,kBAAkB,CAAC,OAAO,EAAE,qBAAqB,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,8BAA8B;AAC9B,+EAA+E;AAE/E,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;gJAIqG,CAAC","sourcesContent":["/**\n * Shared utilities for compaction and branch summarization.\n */\n\nimport type { AgentMessage } from \"@gsd/pi-agent-core\";\nimport type { Message } from \"@gsd/pi-ai\";\nimport { TOOL_RESULT_MAX_CHARS } from \"../constants.js\";\nimport {\n\tcreateBranchSummaryMessage,\n\tcreateCompactionSummaryMessage,\n\tcreateCustomMessage,\n} from \"../messages.js\";\nimport type { SessionEntry } from \"../session-manager.js\";\n\n// ============================================================================\n// File Operation Tracking\n// ============================================================================\n\nexport interface FileOperations {\n\tread: Set<string>;\n\twritten: Set<string>;\n\tedited: Set<string>;\n}\n\nexport function createFileOps(): FileOperations {\n\treturn {\n\t\tread: new Set(),\n\t\twritten: new Set(),\n\t\tedited: new Set(),\n\t};\n}\n\n/**\n * Extract file operations from tool calls in an assistant message.\n */\nexport function extractFileOpsFromMessage(message: AgentMessage, fileOps: FileOperations): void {\n\tif (message.role !== \"assistant\") return;\n\tif (!(\"content\" in message) || !Array.isArray(message.content)) return;\n\n\tfor (const block of message.content) {\n\t\tif (typeof block !== \"object\" || block === null) continue;\n\t\tif (!(\"type\" in block) || block.type !== \"toolCall\") continue;\n\t\tif (!(\"arguments\" in block) || !(\"name\" in block)) continue;\n\n\t\tconst args = block.arguments as Record<string, unknown> | undefined;\n\t\tif (!args) continue;\n\n\t\tconst path = typeof args.path === \"string\" ? args.path : undefined;\n\t\tif (!path) continue;\n\n\t\tswitch (block.name) {\n\t\t\tcase \"read\":\n\t\t\t\tfileOps.read.add(path);\n\t\t\t\tbreak;\n\t\t\tcase \"write\":\n\t\t\t\tfileOps.written.add(path);\n\t\t\t\tbreak;\n\t\t\tcase \"edit\":\n\t\t\t\tfileOps.edited.add(path);\n\t\t\t\tbreak;\n\t\t}\n\t}\n}\n\n/**\n * Compute final file lists from file operations.\n * Returns readFiles (files only read, not modified) and modifiedFiles.\n */\nexport function computeFileLists(fileOps: FileOperations): { readFiles: string[]; modifiedFiles: string[] } {\n\tconst modified = new Set([...fileOps.edited, ...fileOps.written]);\n\tconst readOnly = [...fileOps.read].filter((f) => !modified.has(f)).sort();\n\tconst modifiedFiles = [...modified].sort();\n\treturn { readFiles: readOnly, modifiedFiles };\n}\n\n/**\n * Format file operations as XML tags for summary.\n */\nexport function formatFileOperations(readFiles: string[], modifiedFiles: string[]): string {\n\tconst sections: string[] = [];\n\tif (readFiles.length > 0) {\n\t\tsections.push(`<read-files>\\n${readFiles.join(\"\\n\")}\\n</read-files>`);\n\t}\n\tif (modifiedFiles.length > 0) {\n\t\tsections.push(`<modified-files>\\n${modifiedFiles.join(\"\\n\")}\\n</modified-files>`);\n\t}\n\tif (sections.length === 0) return \"\";\n\treturn `\\n\\n${sections.join(\"\\n\\n\")}`;\n}\n\n// ============================================================================\n// Message Extraction\n// ============================================================================\n\n/**\n * Extract AgentMessage from a session entry.\n *\n * Handles all entry types: message, custom_message, branch_summary, and compaction.\n * Returns undefined for entries that don't contribute to LLM context (e.g., settings changes).\n *\n * @param skipToolResults - If true, skips toolResult messages (used by branch summarization\n *   where tool call context is sufficient). Default false.\n */\nexport function getMessageFromEntry(entry: SessionEntry, skipToolResults = false): AgentMessage | undefined {\n\tswitch (entry.type) {\n\t\tcase \"message\":\n\t\t\tif (skipToolResults && entry.message.role === \"toolResult\") return undefined;\n\t\t\treturn entry.message;\n\n\t\tcase \"custom_message\":\n\t\t\treturn createCustomMessage(entry.customType, entry.content, entry.display, entry.details, entry.timestamp);\n\n\t\tcase \"branch_summary\":\n\t\t\treturn createBranchSummaryMessage(entry.summary, entry.fromId, entry.timestamp);\n\n\t\tcase \"compaction\":\n\t\t\treturn createCompactionSummaryMessage(entry.summary, entry.tokensBefore, entry.timestamp);\n\n\t\tcase \"thinking_level_change\":\n\t\tcase \"model_change\":\n\t\tcase \"custom\":\n\t\tcase \"label\":\n\t\t\treturn undefined;\n\t}\n}\n\n/**\n * Collect AgentMessages from a range of session entries.\n *\n * @param entries - Session entries array\n * @param startIndex - First index (inclusive)\n * @param endIndex - Last index (exclusive)\n * @param skipToolResults - If true, skips toolResult messages. Default false.\n */\nexport function collectMessages(\n\tentries: SessionEntry[],\n\tstartIndex: number,\n\tendIndex: number,\n\tskipToolResults = false,\n): AgentMessage[] {\n\tconst result: AgentMessage[] = [];\n\tfor (let i = startIndex; i < endIndex; i++) {\n\t\tconst msg = getMessageFromEntry(entries[i], skipToolResults);\n\t\tif (msg) result.push(msg);\n\t}\n\treturn result;\n}\n\n// ============================================================================\n// Text Content Extraction\n// ============================================================================\n\n/**\n * Extract text from an array of content blocks, filtering to text-type blocks.\n * Replaces the recurring `.filter(c => c.type === \"text\").map(c => c.text).join(sep)` pattern.\n */\nexport function extractTextContent(\n\tcontent: Array<{ type: string; text?: string }>,\n\tseparator = \"\\n\",\n): string {\n\treturn content\n\t\t.filter((c): c is { type: \"text\"; text: string } => c.type === \"text\")\n\t\t.map((c) => c.text)\n\t\t.join(separator);\n}\n\n// ============================================================================\n// Summarization Message Construction\n// ============================================================================\n\n/**\n * Create a single-message array for summarization prompts.\n * Wraps promptText in the standard `[{ role: \"user\", content: [{ type: \"text\", text }], timestamp }]` shape.\n */\nexport function createSummarizationMessage(promptText: string): [{ role: \"user\"; content: [{ type: \"text\"; text: string }]; timestamp: number }] {\n\treturn [\n\t\t{\n\t\t\trole: \"user\" as const,\n\t\t\tcontent: [{ type: \"text\" as const, text: promptText }],\n\t\t\ttimestamp: Date.now(),\n\t\t},\n\t];\n}\n\n// ============================================================================\n// Message Serialization\n// ============================================================================\n\n// TOOL_RESULT_MAX_CHARS imported from ../constants.js\n\n/**\n * Truncate text to a maximum character length for summarization.\n * Keeps the beginning and appends a truncation marker.\n */\nfunction truncateForSummary(text: string, maxChars: number): string {\n\tif (text.length <= maxChars) return text;\n\tconst truncatedChars = text.length - maxChars;\n\treturn `${text.slice(0, maxChars)}\\n\\n[... ${truncatedChars} more characters truncated]`;\n}\n\n/**\n * Serialize LLM messages to text for summarization.\n * This prevents the model from treating it as a conversation to continue.\n * Call convertToLlm() first to handle custom message types.\n *\n * Tool results are truncated to keep the summarization request within\n * reasonable token budgets. Full content is not needed for summarization.\n */\nexport function serializeConversation(messages: Message[]): string {\n\tconst parts: string[] = [];\n\n\tfor (const msg of messages) {\n\t\tif (msg.role === \"user\") {\n\t\t\tconst content =\n\t\t\t\ttypeof msg.content === \"string\"\n\t\t\t\t\t? msg.content\n\t\t\t\t\t: msg.content\n\t\t\t\t\t\t\t.filter((c): c is { type: \"text\"; text: string } => c.type === \"text\")\n\t\t\t\t\t\t\t.map((c) => c.text)\n\t\t\t\t\t\t\t.join(\"\");\n\t\t\tif (content) parts.push(`[User]: ${content}`);\n\t\t} else if (msg.role === \"assistant\") {\n\t\t\tconst textParts: string[] = [];\n\t\t\tconst thinkingParts: string[] = [];\n\t\t\tconst toolCalls: string[] = [];\n\n\t\t\tfor (const block of msg.content) {\n\t\t\t\tif (block.type === \"text\") {\n\t\t\t\t\ttextParts.push(block.text);\n\t\t\t\t} else if (block.type === \"thinking\") {\n\t\t\t\t\tthinkingParts.push(block.thinking);\n\t\t\t\t} else if (block.type === \"toolCall\") {\n\t\t\t\t\tconst args = block.arguments as Record<string, unknown>;\n\t\t\t\t\tconst argsStr = Object.entries(args)\n\t\t\t\t\t\t.map(([k, v]) => `${k}=${JSON.stringify(v)}`)\n\t\t\t\t\t\t.join(\", \");\n\t\t\t\t\ttoolCalls.push(`${block.name}(${argsStr})`);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (thinkingParts.length > 0) {\n\t\t\t\tparts.push(`[Assistant thinking]: ${thinkingParts.join(\"\\n\")}`);\n\t\t\t}\n\t\t\tif (textParts.length > 0) {\n\t\t\t\tparts.push(`[Assistant]: ${textParts.join(\"\\n\")}`);\n\t\t\t}\n\t\t\tif (toolCalls.length > 0) {\n\t\t\t\tparts.push(`[Assistant tool calls]: ${toolCalls.join(\"; \")}`);\n\t\t\t}\n\t\t} else if (msg.role === \"toolResult\") {\n\t\t\tconst content = msg.content\n\t\t\t\t.filter((c): c is { type: \"text\"; text: string } => c.type === \"text\")\n\t\t\t\t.map((c) => c.text)\n\t\t\t\t.join(\"\");\n\t\t\tif (content) {\n\t\t\t\tparts.push(`[Tool result]: ${truncateForSummary(content, TOOL_RESULT_MAX_CHARS)}`);\n\t\t\t}\n\t\t}\n\t}\n\n\treturn parts.join(\"\\n\\n\");\n}\n\n// ============================================================================\n// Summarization System Prompt\n// ============================================================================\n\nexport const SUMMARIZATION_SYSTEM_PROMPT = `You are a context summarization assistant. Your task is to read a conversation between a user and an AI coding assistant, then produce a structured summary following the exact format specified.\n\nDo NOT continue the conversation. Do NOT respond to any questions in the conversation. ONLY output the structured summary.\n\nCRITICAL: Never reproduce secrets, API keys, tokens, passwords, or credentials in the summary. If you encounter any, redact them as [REDACTED].`;\n"]}

package/packages/pi-coding-agent/dist/core/resource-loader-lsd-md.test.js

@@ -5,7 +5,7 @@ import { join } from "node:path";
 import test from "node:test";
 import { DefaultResourceLoader } from "./resource-loader.js";
 import { SettingsManager } from "./settings-manager.js";
-test("resource loader reads global lsd.md from the app root", async (t) => {
+test("resource loader reads global LSD.md from the app root", async (t) => {
     const tmp = mkdtempSync(join(tmpdir(), "resource-loader-lsd-md-"));
     t.after(() => rmSync(tmp, { recursive: true, force: true }));
     const appRoot = join(tmp, ".lsd");
@@ -13,7 +13,7 @@ test("resource loader reads global lsd.md from the app root", async (t) => {
     const cwd = join(tmp, "project");
     mkdirSync(agentDir, { recursive: true });
     mkdirSync(cwd, { recursive: true });
-    writeFileSync(join(appRoot, "lsd.md"), "# global lsd\n", "utf-8");
+    writeFileSync(join(appRoot, "LSD.md"), "# global lsd\n", "utf-8");
     const loader = new DefaultResourceLoader({
         cwd,
         agentDir,
@@ -26,10 +26,10 @@ test("resource loader reads global lsd.md from the app root", async (t) => {
     await loader.reload();
     const contextFiles = loader.getAgentsFiles().agentsFiles;
     assert.equal(contextFiles.length, 1);
-    assert.equal(contextFiles[0]?.path, join(appRoot, "lsd.md"));
+    assert.equal(contextFiles[0]?.path, join(appRoot, "LSD.md"));
     assert.equal(contextFiles[0]?.content, "# global lsd\n");
 });
-test("resource loader reads ancestor .lsd/lsd.md before AGENTS.md in the same directory", async (t) => {
+test("resource loader uses project LSD.md before CLAUDE.md or AGENTS.md in the same directory", async (t) => {
     const tmp = mkdtempSync(join(tmpdir(), "resource-loader-lsd-md-"));
     t.after(() => rmSync(tmp, { recursive: true, force: true }));
     const appRoot = join(tmp, ".lsd");
@@ -37,9 +37,9 @@ test("resource loader reads ancestor .lsd/lsd.md before AGENTS.md in the same di
     const projectRoot = join(tmp, "project");
     const cwd = join(projectRoot, "src", "feature");
     mkdirSync(agentDir, { recursive: true });
-    mkdirSync(join(projectRoot, ".lsd"), { recursive: true });
     mkdirSync(cwd, { recursive: true });
-    writeFileSync(join(projectRoot, ".lsd", "lsd.md"), "# project lsd\n", "utf-8");
+    writeFileSync(join(projectRoot, "LSD.md"), "# project lsd\n", "utf-8");
+    writeFileSync(join(projectRoot, "CLAUDE.md"), "# claude fallback\n", "utf-8");
     writeFileSync(join(projectRoot, "AGENTS.md"), "# agents fallback\n", "utf-8");
     const loader = new DefaultResourceLoader({
         cwd,
@@ -53,7 +53,59 @@ test("resource loader reads ancestor .lsd/lsd.md before AGENTS.md in the same di
     await loader.reload();
     const contextFiles = loader.getAgentsFiles().agentsFiles;
     assert.equal(contextFiles.length, 1);
-    assert.equal(contextFiles[0]?.path, join(projectRoot, ".lsd", "lsd.md"));
+    assert.equal(contextFiles[0]?.path, join(projectRoot, "LSD.md"));
     assert.equal(contextFiles[0]?.content, "# project lsd\n");
 });
+test("resource loader loads both global and project LSD.md files", async (t) => {
+    const tmp = mkdtempSync(join(tmpdir(), "resource-loader-lsd-md-"));
+    t.after(() => rmSync(tmp, { recursive: true, force: true }));
+    const appRoot = join(tmp, ".lsd");
+    const agentDir = join(appRoot, "agent");
+    const projectRoot = join(tmp, "project");
+    const cwd = join(projectRoot, "src", "feature");
+    mkdirSync(agentDir, { recursive: true });
+    mkdirSync(cwd, { recursive: true });
+    writeFileSync(join(appRoot, "LSD.md"), "# global lsd\n", "utf-8");
+    writeFileSync(join(projectRoot, "LSD.md"), "# project lsd\n", "utf-8");
+    const loader = new DefaultResourceLoader({
+        cwd,
+        agentDir,
+        settingsManager: SettingsManager.inMemory(),
+        noExtensions: true,
+        noSkills: true,
+        noPromptTemplates: true,
+        noThemes: true,
+    });
+    await loader.reload();
+    const contextFiles = loader.getAgentsFiles().agentsFiles;
+    assert.equal(contextFiles.length, 2);
+    assert.equal(contextFiles[0]?.path, join(appRoot, "LSD.md"));
+    assert.equal(contextFiles[1]?.path, join(projectRoot, "LSD.md"));
+});
+test("resource loader falls back to CLAUDE.md when no LSD.md exists", async (t) => {
+    const tmp = mkdtempSync(join(tmpdir(), "resource-loader-lsd-md-"));
+    t.after(() => rmSync(tmp, { recursive: true, force: true }));
+    const appRoot = join(tmp, ".lsd");
+    const agentDir = join(appRoot, "agent");
+    const projectRoot = join(tmp, "project");
+    const cwd = join(projectRoot, "src", "feature");
+    mkdirSync(agentDir, { recursive: true });
+    mkdirSync(cwd, { recursive: true });
+    writeFileSync(join(projectRoot, "CLAUDE.md"), "# claude fallback\n", "utf-8");
+    writeFileSync(join(projectRoot, "AGENTS.md"), "# agents fallback\n", "utf-8");
+    const loader = new DefaultResourceLoader({
+        cwd,
+        agentDir,
+        settingsManager: SettingsManager.inMemory(),
+        noExtensions: true,
+        noSkills: true,
+        noPromptTemplates: true,
+        noThemes: true,
+    });
+    await loader.reload();
+    const contextFiles = loader.getAgentsFiles().agentsFiles;
+    assert.equal(contextFiles.length, 1);
+    assert.equal(contextFiles[0]?.path, join(projectRoot, "CLAUDE.md"));
+    assert.equal(contextFiles[0]?.content, "# claude fallback\n");
+});
 //# sourceMappingURL=resource-loader-lsd-md.test.js.map

package/packages/pi-coding-agent/dist/core/resource-loader-lsd-md.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"resource-loader-lsd-md.test.js","sourceRoot":"","sources":["../../src/core/resource-loader-lsd-md.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,IAAI,CAAC,uDAAuD,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACzE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACjC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAElE,MAAM,MAAM,GAAG,IAAI,qBAAqB,CAAC;QACxC,GAAG;QACH,QAAQ;QACR,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE;QAC3C,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;QACd,iBAAiB,EAAE,IAAI;QACvB,QAAQ,EAAE,IAAI;KACd,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IAEtB,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,WAAW,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mFAAmF,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACrG,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAC/E,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC;IAE9E,MAAM,MAAM,GAAG,IAAI,qBAAqB,CAAC;QACxC,GAAG;QACH,QAAQ;QACR,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE;QAC3C,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;QACd,iBAAiB,EAAE,IAAI;QACvB,QAAQ,EAAE,IAAI;KACd,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IAEtB,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,WAAW,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC","sourcesContent":["import assert from \"node:assert/strict\";\nimport { mkdirSync, mkdtempSync, rmSync, writeFileSync } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport test from \"node:test\";\n\nimport { DefaultResourceLoader } from \"./resource-loader.js\";\nimport { SettingsManager } from \"./settings-manager.js\";\n\ntest(\"resource loader reads global lsd.md from the app root\", async (t) => {\n\tconst tmp = mkdtempSync(join(tmpdir(), \"resource-loader-lsd-md-\"));\n\tt.after(() => rmSync(tmp, { recursive: true, force: true }));\n\n\tconst appRoot = join(tmp, \".lsd\");\n\tconst agentDir = join(appRoot, \"agent\");\n\tconst cwd = join(tmp, \"project\");\n\tmkdirSync(agentDir, { recursive: true });\n\tmkdirSync(cwd, { recursive: true });\n\twriteFileSync(join(appRoot, \"lsd.md\"), \"# global lsd\\n\", \"utf-8\");\n\n\tconst loader = new DefaultResourceLoader({\n\t\tcwd,\n\t\tagentDir,\n\t\tsettingsManager: SettingsManager.inMemory(),\n\t\tnoExtensions: true,\n\t\tnoSkills: true,\n\t\tnoPromptTemplates: true,\n\t\tnoThemes: true,\n\t});\n\tawait loader.reload();\n\n\tconst contextFiles = loader.getAgentsFiles().agentsFiles;\n\tassert.equal(contextFiles.length, 1);\n\tassert.equal(contextFiles[0]?.path, join(appRoot, \"lsd.md\"));\n\tassert.equal(contextFiles[0]?.content, \"# global lsd\\n\");\n});\n\ntest(\"resource loader reads ancestor .lsd/lsd.md before AGENTS.md in the same directory\", async (t) => {\n\tconst tmp = mkdtempSync(join(tmpdir(), \"resource-loader-lsd-md-\"));\n\tt.after(() => rmSync(tmp, { recursive: true, force: true }));\n\n\tconst appRoot = join(tmp, \".lsd\");\n\tconst agentDir = join(appRoot, \"agent\");\n\tconst projectRoot = join(tmp, \"project\");\n\tconst cwd = join(projectRoot, \"src\", \"feature\");\n\tmkdirSync(agentDir, { recursive: true });\n\tmkdirSync(join(projectRoot, \".lsd\"), { recursive: true });\n\tmkdirSync(cwd, { recursive: true });\n\twriteFileSync(join(projectRoot, \".lsd\", \"lsd.md\"), \"# project lsd\\n\", \"utf-8\");\n\twriteFileSync(join(projectRoot, \"AGENTS.md\"), \"# agents fallback\\n\", \"utf-8\");\n\n\tconst loader = new DefaultResourceLoader({\n\t\tcwd,\n\t\tagentDir,\n\t\tsettingsManager: SettingsManager.inMemory(),\n\t\tnoExtensions: true,\n\t\tnoSkills: true,\n\t\tnoPromptTemplates: true,\n\t\tnoThemes: true,\n\t});\n\tawait loader.reload();\n\n\tconst contextFiles = loader.getAgentsFiles().agentsFiles;\n\tassert.equal(contextFiles.length, 1);\n\tassert.equal(contextFiles[0]?.path, join(projectRoot, \".lsd\", \"lsd.md\"));\n\tassert.equal(contextFiles[0]?.content, \"# project lsd\\n\");\n});\n"]}
+{"version":3,"file":"resource-loader-lsd-md.test.js","sourceRoot":"","sources":["../../src/core/resource-loader-lsd-md.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,IAAI,CAAC,uDAAuD,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACzE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACjC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAElE,MAAM,MAAM,GAAG,IAAI,qBAAqB,CAAC;QACxC,GAAG;QACH,QAAQ;QACR,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE;QAC3C,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;QACd,iBAAiB,EAAE,IAAI;QACvB,QAAQ,EAAE,IAAI;KACd,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IAEtB,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,WAAW,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yFAAyF,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC3G,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;IACvE,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC;IAC9E,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC;IAE9E,MAAM,MAAM,GAAG,IAAI,qBAAqB,CAAC;QACxC,GAAG;QACH,QAAQ;QACR,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE;QAC3C,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;QACd,iBAAiB,EAAE,IAAI;QACvB,QAAQ,EAAE,IAAI;KACd,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IAEtB,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,WAAW,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC9E,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAClE,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAG,IAAI,qBAAqB,CAAC;QACxC,GAAG;QACH,QAAQ;QACR,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE;QAC3C,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;QACd,iBAAiB,EAAE,IAAI;QACvB,QAAQ,EAAE,IAAI;KACd,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IAEtB,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,WAAW,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACjF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC;IAC9E,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC;IAE9E,MAAM,MAAM,GAAG,IAAI,qBAAqB,CAAC;QACxC,GAAG;QACH,QAAQ;QACR,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE;QAC3C,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;QACd,iBAAiB,EAAE,IAAI;QACvB,QAAQ,EAAE,IAAI;KACd,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IAEtB,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,WAAW,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IACpE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC","sourcesContent":["import assert from \"node:assert/strict\";\nimport { mkdirSync, mkdtempSync, rmSync, writeFileSync } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport test from \"node:test\";\n\nimport { DefaultResourceLoader } from \"./resource-loader.js\";\nimport { SettingsManager } from \"./settings-manager.js\";\n\ntest(\"resource loader reads global LSD.md from the app root\", async (t) => {\n\tconst tmp = mkdtempSync(join(tmpdir(), \"resource-loader-lsd-md-\"));\n\tt.after(() => rmSync(tmp, { recursive: true, force: true }));\n\n\tconst appRoot = join(tmp, \".lsd\");\n\tconst agentDir = join(appRoot, \"agent\");\n\tconst cwd = join(tmp, \"project\");\n\tmkdirSync(agentDir, { recursive: true });\n\tmkdirSync(cwd, { recursive: true });\n\twriteFileSync(join(appRoot, \"LSD.md\"), \"# global lsd\\n\", \"utf-8\");\n\n\tconst loader = new DefaultResourceLoader({\n\t\tcwd,\n\t\tagentDir,\n\t\tsettingsManager: SettingsManager.inMemory(),\n\t\tnoExtensions: true,\n\t\tnoSkills: true,\n\t\tnoPromptTemplates: true,\n\t\tnoThemes: true,\n\t});\n\tawait loader.reload();\n\n\tconst contextFiles = loader.getAgentsFiles().agentsFiles;\n\tassert.equal(contextFiles.length, 1);\n\tassert.equal(contextFiles[0]?.path, join(appRoot, \"LSD.md\"));\n\tassert.equal(contextFiles[0]?.content, \"# global lsd\\n\");\n});\n\ntest(\"resource loader uses project LSD.md before CLAUDE.md or AGENTS.md in the same directory\", async (t) => {\n\tconst tmp = mkdtempSync(join(tmpdir(), \"resource-loader-lsd-md-\"));\n\tt.after(() => rmSync(tmp, { recursive: true, force: true }));\n\n\tconst appRoot = join(tmp, \".lsd\");\n\tconst agentDir = join(appRoot, \"agent\");\n\tconst projectRoot = join(tmp, \"project\");\n\tconst cwd = join(projectRoot, \"src\", \"feature\");\n\tmkdirSync(agentDir, { recursive: true });\n\tmkdirSync(cwd, { recursive: true });\n\twriteFileSync(join(projectRoot, \"LSD.md\"), \"# project lsd\\n\", \"utf-8\");\n\twriteFileSync(join(projectRoot, \"CLAUDE.md\"), \"# claude fallback\\n\", \"utf-8\");\n\twriteFileSync(join(projectRoot, \"AGENTS.md\"), \"# agents fallback\\n\", \"utf-8\");\n\n\tconst loader = new DefaultResourceLoader({\n\t\tcwd,\n\t\tagentDir,\n\t\tsettingsManager: SettingsManager.inMemory(),\n\t\tnoExtensions: true,\n\t\tnoSkills: true,\n\t\tnoPromptTemplates: true,\n\t\tnoThemes: true,\n\t});\n\tawait loader.reload();\n\n\tconst contextFiles = loader.getAgentsFiles().agentsFiles;\n\tassert.equal(contextFiles.length, 1);\n\tassert.equal(contextFiles[0]?.path, join(projectRoot, \"LSD.md\"));\n\tassert.equal(contextFiles[0]?.content, \"# project lsd\\n\");\n});\n\ntest(\"resource loader loads both global and project LSD.md files\", async (t) => {\n\tconst tmp = mkdtempSync(join(tmpdir(), \"resource-loader-lsd-md-\"));\n\tt.after(() => rmSync(tmp, { recursive: true, force: true }));\n\n\tconst appRoot = join(tmp, \".lsd\");\n\tconst agentDir = join(appRoot, \"agent\");\n\tconst projectRoot = join(tmp, \"project\");\n\tconst cwd = join(projectRoot, \"src\", \"feature\");\n\tmkdirSync(agentDir, { recursive: true });\n\tmkdirSync(cwd, { recursive: true });\n\twriteFileSync(join(appRoot, \"LSD.md\"), \"# global lsd\\n\", \"utf-8\");\n\twriteFileSync(join(projectRoot, \"LSD.md\"), \"# project lsd\\n\", \"utf-8\");\n\n\tconst loader = new DefaultResourceLoader({\n\t\tcwd,\n\t\tagentDir,\n\t\tsettingsManager: SettingsManager.inMemory(),\n\t\tnoExtensions: true,\n\t\tnoSkills: true,\n\t\tnoPromptTemplates: true,\n\t\tnoThemes: true,\n\t});\n\tawait loader.reload();\n\n\tconst contextFiles = loader.getAgentsFiles().agentsFiles;\n\tassert.equal(contextFiles.length, 2);\n\tassert.equal(contextFiles[0]?.path, join(appRoot, \"LSD.md\"));\n\tassert.equal(contextFiles[1]?.path, join(projectRoot, \"LSD.md\"));\n});\n\ntest(\"resource loader falls back to CLAUDE.md when no LSD.md exists\", async (t) => {\n\tconst tmp = mkdtempSync(join(tmpdir(), \"resource-loader-lsd-md-\"));\n\tt.after(() => rmSync(tmp, { recursive: true, force: true }));\n\n\tconst appRoot = join(tmp, \".lsd\");\n\tconst agentDir = join(appRoot, \"agent\");\n\tconst projectRoot = join(tmp, \"project\");\n\tconst cwd = join(projectRoot, \"src\", \"feature\");\n\tmkdirSync(agentDir, { recursive: true });\n\tmkdirSync(cwd, { recursive: true });\n\twriteFileSync(join(projectRoot, \"CLAUDE.md\"), \"# claude fallback\\n\", \"utf-8\");\n\twriteFileSync(join(projectRoot, \"AGENTS.md\"), \"# agents fallback\\n\", \"utf-8\");\n\n\tconst loader = new DefaultResourceLoader({\n\t\tcwd,\n\t\tagentDir,\n\t\tsettingsManager: SettingsManager.inMemory(),\n\t\tnoExtensions: true,\n\t\tnoSkills: true,\n\t\tnoPromptTemplates: true,\n\t\tnoThemes: true,\n\t});\n\tawait loader.reload();\n\n\tconst contextFiles = loader.getAgentsFiles().agentsFiles;\n\tassert.equal(contextFiles.length, 1);\n\tassert.equal(contextFiles[0]?.path, join(projectRoot, \"CLAUDE.md\"));\n\tassert.equal(contextFiles[0]?.content, \"# claude fallback\\n\");\n});\n"]}

package/packages/pi-coding-agent/dist/core/resource-loader.js

@@ -42,14 +42,14 @@ function tryReadContextFile(filePath) {
 }
 function loadContextFileFromDir(dir) {
     const candidates = [
-        join(dir, "lsd.md"),
-        join(dir, ".lsd", "lsd.md"),
-        join(dir, CONFIG_DIR_NAME, "lsd.md"),
         join(dir, "LSD.md"),
         join(dir, ".lsd", "LSD.md"),
         join(dir, CONFIG_DIR_NAME, "LSD.md"),
-        join(dir, "AGENTS.md"),
+        join(dir, "lsd.md"),
+        join(dir, ".lsd", "lsd.md"),
+        join(dir, CONFIG_DIR_NAME, "lsd.md"),
         join(dir, "CLAUDE.md"),
+        join(dir, "AGENTS.md"),
     ];
     for (const filePath of new Set(candidates)) {
         const loaded = tryReadContextFile(filePath);