negotium 0.23.3 → 0.23.5

package/dist/{chunk-cez5m5hm.js → chunk-ztcj9grz.js}

@@ -8,7 +8,7 @@ import {
   logger,
   parseJsonlText,
   writeJsonlFile
-} from "./chunk-6cnpkzkb.js";
+} from "./chunk-n6crwk1s.js";
 
 // ../../packages/core/src/agents/rollout/claude.ts
 import { randomUUID } from "crypto";

package/dist/hosted-agent.js

@@ -25,6 +25,7 @@ import {
   RUNTIME_MCP_SECRET,
   RUN_DIR,
   SESSION_COMM_SERVER,
+  SESSION_HISTORY_SERVER,
   SESSION_WORKSPACE_DIR,
   SUPPORTED_AGENTS,
   SYSTEM_HEALTH_SERVER,
@@ -42,7 +43,7 @@ import {
   logger,
   resolveFallbackAgent,
   resolveTopicWorkspaceDir
-} from "./chunk-9zn0bkc9.js";
+} from "./chunk-mxxwx5mg.js";
 import {
   __require
 } from "./chunk-2mx7fq49.js";
@@ -52,6 +53,93 @@ import { spawn as spawn2 } from "child_process";
 import { existsSync, readFileSync as readFileSync2 } from "fs";
 import { query } from "@anthropic-ai/claude-agent-sdk";
 
+// ../../packages/core/src/agents/claude-notices.ts
+var API_ERROR_TEXT = {
+  overloaded: "Claude is overloaded",
+  rate_limit: "Claude rate limit hit",
+  server_error: "Claude API error",
+  unknown: "Claude request failed",
+  authentication_failed: "Claude sign-in failed",
+  oauth_org_not_allowed: "Organization not allowed for Claude",
+  account_on_hold: "Claude account is on hold",
+  verification_required: "Claude account needs verification",
+  billing_error: "Claude billing issue",
+  invalid_request: "Claude rejected the request",
+  model_not_found: "Claude model not found",
+  max_output_tokens: "Claude reply hit the length limit",
+  cloud_credential_error: "Cloud credentials failed"
+};
+var RATE_LIMIT_TEXT = {
+  five_hour: "5-hour",
+  seven_day: "weekly",
+  seven_day_opus: "weekly Opus",
+  seven_day_sonnet: "weekly Sonnet",
+  seven_day_overage_included: "weekly",
+  overage: "extra usage"
+};
+var DENIAL_TEXT = {
+  rule: "by a permission rule",
+  mode: "by the permission mode",
+  classifier: "by the safety check",
+  asyncAgent: "for a background agent"
+};
+function modelLabel(id) {
+  const match = /^claude-([a-z]+)-(\d+)-(\d+)/.exec(id);
+  if (!match)
+    return id;
+  const [, family = "", major, minor] = match;
+  return `${family.charAt(0).toUpperCase()}${family.slice(1)} ${major}.${minor}`;
+}
+var SYSTEM_NOTICES = {
+  api_retry: (m) => {
+    const reason = m.error_status === null ? "Lost connection to Claude" : API_ERROR_TEXT[m.error] ?? "Claude request failed";
+    const delay = Math.round(m.retry_delay_ms / 1000);
+    const when = delay > 0 ? `in ${delay}s` : "now";
+    return `${reason} \xB7 retrying ${when} (${m.attempt}/${m.max_retries})`;
+  },
+  model_refusal_fallback: (m) => m.direction === "retry" ? `${modelLabel(m.original_model)} declined \xB7 ${modelLabel(m.fallback_model)} is answering instead` : m.content || undefined,
+  model_refusal_no_fallback: (m) => `${modelLabel(m.original_model)} declined this request`,
+  permission_denied: (m) => {
+    const tool = m.tool_name.split("__").at(-1) || m.tool_name;
+    const why = m.decision_reason ? `: ${m.decision_reason}` : ` ${DENIAL_TEXT[m.decision_reason_type ?? ""] ?? ""}`.trimEnd();
+    return `${tool} was blocked${why}`;
+  },
+  informational: (m) => m.prevent_continuation || m.level === "warning" || m.level === "suggestion" ? m.content : undefined,
+  mirror_error: (m) => {
+    logger.warn({ error: m.error }, "claudeProvider: transcript mirror batch dropped");
+    return;
+  }
+};
+function rateLimitNotice(m) {
+  const { status, rateLimitType } = m.rate_limit_info;
+  const limit = rateLimitType ? `${RATE_LIMIT_TEXT[rateLimitType] ?? ""} `.trimStart() : "";
+  if (status === "allowed_warning")
+    return `Nearing your ${limit}Claude usage limit`;
+  if (status === "rejected")
+    return `Reached your ${limit}Claude usage limit`;
+  return;
+}
+function claudeNoticeStatus(message) {
+  try {
+    if (message.type === "rate_limit_event")
+      return rateLimitNotice(message);
+    if (message.type !== "system")
+      return;
+    const handler = SYSTEM_NOTICES[message.subtype];
+    if (!handler) {
+      logger.debug({ subtype: message.subtype, msg: message }, "claudeProvider: system message (unhandled subtype)");
+      return;
+    }
+    const status = handler(message);
+    if (status)
+      logger.warn({ subtype: message.subtype, status }, "claudeProvider: notice");
+    return status;
+  } catch (err) {
+    logger.debug({ err, msg: message }, "claudeProvider: notice mapping failed");
+    return;
+  }
+}
+
 // ../../packages/core/src/agents/rollout/shared.ts
 import { resolve as resolve2 } from "path";
 
@@ -876,7 +964,8 @@ var COMMON_RUNTIME_MCP_POLICY = {
   "background-bash": { scopes: ["forum"], forumRequired: true },
   "agent-health": { scopes: ["forum", "manager", "cron"], forumRequired: true },
   vault: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
-  "cua-rs": { scopes: ["dm", "forum", "fork"], forumRequired: false }
+  "cua-rs": { scopes: ["dm", "forum", "fork"], forumRequired: false },
+  "session-history": { scopes: ["dm", "forum", "manager"], forumRequired: false }
 };
 function classifyForumMcpServers(catalog) {
   const all = Object.entries(catalog).filter(([, entry]) => entry.scopes.includes("forum")).map(([name]) => name);
@@ -2331,6 +2420,28 @@ var MCP_CATALOG = {
       return buildBuiltinMcpServer("decision", ctx, () => buildStdioMcpServer(agent, DECISION_SERVER, args));
     }
   },
+  "session-history": {
+    ...commonRuntimeMcpPolicy("session-history"),
+    build(ctx) {
+      const { userId, session, topicId, queryId, agent, peerBridge } = ctx;
+      if (peerBridge) {
+        if (!topicId || !queryId)
+          return null;
+        const env = canonicalMcpBridgeEnv({
+          surface: "session-history",
+          userId,
+          topicId,
+          queryId,
+          peerBridge
+        });
+        return env ? buildStdioMcpServer(agent, CANONICAL_MCP_PROXY_SERVER, ["--surface=session-history"], env) : null;
+      }
+      const args = [`--user-id=${userId}`, `--topic=${session}`];
+      if (topicId)
+        args.push(`--topic-id=${topicId}`);
+      return buildBuiltinMcpServer("session-history", ctx, () => buildStdioMcpServer(agent, SESSION_HISTORY_SERVER, args));
+    }
+  },
   "session-comm": {
     ...commonRuntimeMcpPolicy("session-comm"),
     build(ctx) {
@@ -3459,12 +3570,13 @@ async function* claudeProvider(opts) {
         yield { type: "tool_use_summary", summary: m.summary };
         continue;
       }
-      if (message.type === "system") {
-        const m = message;
-        if (m.subtype === "init") {
-          yield { type: "session", sessionId: m.session_id };
+      if (message.type === "system" || message.type === "rate_limit_event") {
+        if (message.type === "system" && message.subtype === "init") {
+          yield { type: "session", sessionId: message.session_id };
         } else {
-          logger.debug({ subtype: m.subtype, msg: m }, "claudeProvider: system message (unhandled subtype)");
+          const status = claudeNoticeStatus(message);
+          if (status)
+            yield { type: "status", content: status };
         }
         continue;
       }
@@ -3600,7 +3712,7 @@ import { dirname as dirname5, join as join3 } from "path";
 import { fileURLToPath } from "url";
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.23.3";
+var NEGOTIUM_VERSION = "0.23.5";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 function findPackageJson(specifier, searchFromDir) {
@@ -4405,7 +4517,7 @@ async function createCodexVaultHookBridge(userId) {
     });
     restrictIpcEndpoint(socketPath);
     if (IS_WINDOWS2) {
-      const { BINARIES_DIR } = await import("./chunk-q5djsg78.js");
+      const { BINARIES_DIR } = await import("./chunk-ad7kxsaq.js");
       const cached = await ensureCodexWindowsWrapperExe(join5(BINARIES_DIR, "codex-hook-wrapper"));
       await copyFile(cached, wrapperPath);
       await writeFile2(join5(root, "codex-with-hooks.cfg"), [process.execPath, codexCliScriptPath(), socketPath, token].join(`
@@ -4657,6 +4769,49 @@ function extractCodexForkedFromId(jsonl) {
     return;
   }
 }
+function extractLatestCodexSystemInstructionsTurn(jsonl) {
+  const lines = jsonl.trimEnd().split(`
+`);
+  for (let index = lines.length - 1;index >= 0; index -= 1) {
+    const line = lines[index] ?? "";
+    if (!line.includes("[System Instructions]"))
+      continue;
+    try {
+      const entry = JSON.parse(line);
+      if (entry.type !== "response_item")
+        continue;
+      if (entry.payload?.type !== "message" || entry.payload.role !== "user")
+        continue;
+      const text = (entry.payload.content ?? []).map((part) => typeof part.text === "string" ? part.text : "").join("");
+      if (text.startsWith(`[System Instructions]
+`))
+        return text;
+    } catch {}
+  }
+  return;
+}
+function codexThreadHasSystemPrompt(threadId, systemPrompt, depth = 0) {
+  const path = latestCodexRolloutPath(threadId);
+  if (!path)
+    return false;
+  try {
+    const jsonl = readFileSync4(path, "utf8");
+    const latest = extractLatestCodexSystemInstructionsTurn(jsonl);
+    if (latest !== undefined) {
+      return latest.startsWith(`[System Instructions]
+${systemPrompt}
+
+`);
+    }
+    if (depth >= 8)
+      return false;
+    const parentId = extractCodexForkedFromId(jsonl);
+    return parentId && parentId !== threadId ? codexThreadHasSystemPrompt(parentId, systemPrompt, depth + 1) : false;
+  } catch (error) {
+    logger.debug({ error, threadId }, "codex system prompt: rollout read failed");
+    return false;
+  }
+}
 function readLatestCodexTokenTotals(threadId, depth = 0) {
   const path = latestCodexRolloutPath(threadId);
   if (!path)
@@ -4843,6 +4998,14 @@ function buildNumberedDiffSummary(before, after, startLine = 1) {
 
 // ../../packages/core/src/agents/codex-provider.ts
 var CODEX_HOOK_TRUST_BYPASS_NOTICE = "`--dangerously-bypass-hook-trust` is enabled. Enabled hooks may run without review for this invocation.";
+function codexNoticeStatus(message) {
+  const firstLine = message.trim().split(`
+`)[0]?.trim() ?? "";
+  const sentence = /^.*?[.!?](?=\s|$)/.exec(firstLine)?.[0] ?? firstLine;
+  if (!sentence)
+    return "Codex notice";
+  return /^codex\b/i.test(sentence) ? sentence : `Codex: ${sentence}`;
+}
 function sameCodexUsage(usage, total) {
   return usage.input_tokens === total.inputTokens && usage.output_tokens === total.outputTokens && (usage.cached_input_tokens ?? 0) === total.cachedInputTokens && (usage.cache_write_input_tokens ?? 0) === total.cacheWriteInputTokens;
 }
@@ -5268,8 +5431,7 @@ async function* codexProvider(opts) {
       },
       hooks: vaultHook.hooks,
       model_catalog_json: codexModelCatalogPath,
-      mcp_servers: codexMcpServers,
-      ...opts.toolPolicy ? { sandbox_permissions: [] } : {}
+      mcp_servers: codexMcpServers
     }
   });
   const threadOptions = {
@@ -5290,7 +5452,7 @@ async function* codexProvider(opts) {
   let currentSessionId = opts.sessionId;
   let usageBaseline = currentSessionId ? readLatestCodexTokenTotals(currentSessionId) : undefined;
   let thread = currentSessionId ? codex.resumeThread(currentSessionId, threadOptions) : codex.startThread(threadOptions);
-  let prompt = promptForThread(opts, true);
+  let prompt = promptForThread(opts, !currentSessionId || !opts.systemPrompt || !codexThreadHasSystemPrompt(currentSessionId, opts.systemPrompt));
   let agentTextSoFar = "";
   let currentAgentMessageId;
   let finalText = "";
@@ -5318,6 +5480,8 @@ async function* codexProvider(opts) {
       trackedPids.pids = [];
       let heartbeatTriggered = false;
       let attemptCompleted = false;
+      let turnFailed = false;
+      let streamError;
       let heartbeatTimer = null;
       const scheduleHeartbeat = () => {
         if (heartbeatTimer !== null)
@@ -5446,7 +5610,8 @@ async function* codexProvider(opts) {
               } else if (item.type === "error") {
                 const message = String(item.message ?? "");
                 if (message !== CODEX_HOOK_TRUST_BYPASS_NOTICE) {
-                  yield { type: "error", content: message };
+                  logger.warn({ message }, "codexProvider: codex non-fatal error item");
+                  yield { type: "status", content: codexNoticeStatus(message) };
                 }
               }
               break;
@@ -5474,7 +5639,15 @@ async function* codexProvider(opts) {
                 yield* extractFileEvents(finalText, "result");
               break;
             }
+            case "error": {
+              const message = event.message || "Codex stream error";
+              logger.warn({ message }, "codexProvider: codex stream error event");
+              streamError = message;
+              yield { type: "status", content: codexNoticeStatus(message) };
+              break;
+            }
             case "turn.failed": {
+              turnFailed = true;
               stopReason = "error";
               yield {
                 type: "error",
@@ -5486,6 +5659,10 @@ async function* codexProvider(opts) {
               break;
           }
         }
+        if (!attemptCompleted && !turnFailed && streamError) {
+          stopReason = "error";
+          yield { type: "error", content: streamError };
+        }
       } catch (err) {
         if (abortSignal?.aborted)
           return;
@@ -5738,4 +5915,4 @@ export {
   buildClaudeDisallowedTools
 };
 
-//# debugId=E09EB735E1E552E264756E2164756E21
+//# debugId=D6F835535EA14E1564756E2164756E21