open-multi-agent-kit 0.80.5 → 0.80.7

package/dist/core/sdk.js.map

@@ -1 +1 @@
-{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../../src/core/sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAyC,MAAM,gCAAgC,CAAC;AAC9F,OAAO,EAAE,kBAAkB,EAA4B,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAE5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EACN,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,eAAe,EAEf,qBAAqB,GACrB,MAAM,kBAAkB,CAAC;AA+D1B,aAAa;AAEb,cAAc,4BAA4B,CAAC;AAc3C,OAAO,EACN,qBAAqB;AACrB,kCAAkC;AAClC,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,cAAc,EACd,YAAY,GACZ,CAAC;AAEF,mBAAmB;AAEnB,SAAS,kBAAkB,GAAW;IACrC,OAAO,WAAW,EAAE,CAAC;AAAA,CACrB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAO,GAA8B,EAAE,EAAqC;IACpH,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;IACzF,IAAI,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAE5C,uDAAuD;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAE7F,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzF,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEjH,IAAI,CAAC,cAAc,EAAE,CAAC;QACrB,cAAc,GAAG,IAAI,qBAAqB,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;QAC/E,MAAM,cAAc,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC/B,CAAC;IAED,gDAAgD;IAChD,MAAM,eAAe,GAAG,cAAc,CAAC,mBAAmB,EAAE,CAAC;IAC7D,MAAM,kBAAkB,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,cAAc,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC;IAE5G,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC1B,IAAI,oBAAwC,CAAC;IAE7C,oDAAoD;IACpD,IAAI,CAAC,KAAK,IAAI,kBAAkB,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;QAC3D,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxG,IAAI,aAAa,IAAI,aAAa,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC;YACrE,KAAK,GAAG,aAAa,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,oBAAoB,GAAG,2BAA2B,eAAe,CAAC,KAAK,CAAC,QAAQ,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACrH,CAAC;IACF,CAAC;IAED,4FAA4F;IAC5F,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;YACrC,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,kBAAkB;YAChC,eAAe,EAAE,eAAe,CAAC,kBAAkB,EAAE;YACrD,cAAc,EAAE,eAAe,CAAC,eAAe,EAAE;YACjD,oBAAoB,EAAE,eAAe,CAAC,uBAAuB,EAAE;YAC/D,aAAa;SACb,CAAC,CAAC;QACH,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QACrB,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,oBAAoB,GAAG,8BAA8B,EAAE,CAAC;QACzD,CAAC;aAAM,IAAI,oBAAoB,EAAE,CAAC;YACjC,oBAAoB,IAAI,WAAW,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QACjE,CAAC;IACF,CAAC;IAED,IAAI,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAE1C,sDAAsD;IACtD,IAAI,aAAa,KAAK,SAAS,IAAI,kBAAkB,EAAE,CAAC;QACvD,aAAa,GAAG,gBAAgB;YAC/B,CAAC,CAAE,eAAe,CAAC,aAA+B;YAClD,CAAC,CAAC,CAAC,eAAe,CAAC,uBAAuB,EAAE,IAAI,sBAAsB,CAAC,CAAC;IAC1E,CAAC;IAED,gCAAgC;IAChC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QACjC,aAAa,GAAG,eAAe,CAAC,uBAAuB,EAAE,IAAI,sBAAsB,CAAC;IACrF,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,aAAa,GAAG,KAAK,CAAC;IACvB,CAAC;SAAM,CAAC;QACP,aAAa,GAAG,kBAAkB,CAAC,KAAK,EAAE,aAAa,CAAkB,CAAC;IAC3E,CAAC;IAED,MAAM,sBAAsB,GAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACvF,MAAM,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IAC/C,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,MAAM,sBAAsB,GAAa,CACxC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAClF,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,mBAAmB,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAEpD,IAAI,KAAY,CAAC;IAEjB,+FAA+F;IAC/F,MAAM,2BAA2B,GAAG,CAAC,QAAwB,EAAa,EAAE,CAAC;QAC5E,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,+DAA+D;QAC/D,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,EAAE,CAAC;YACvC,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,6EAA6E;QAC7E,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACtD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;gBAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;oBAC1D,IAAI,SAAS,EAAE,CAAC;wBACf,MAAM,eAAe,GAAG,OAAO;6BAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACV,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC,CAAC,CACtF;6BACA,MAAM,CACN,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;wBACb,wDAAwD;wBACxD,CAAC,CACA,CAAC,CAAC,IAAI,KAAK,MAAM;4BACjB,CAAC,CAAC,IAAI,KAAK,4BAA4B;4BACvC,CAAC,GAAG,CAAC;4BACL,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM;4BACzB,GAAG,CAAC,CAAC,GAAG,CAAC,CAAoC,CAAC,IAAI,KAAK,4BAA4B,CACpF,CACF,CAAC;wBACH,OAAO,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;oBAC7C,CAAC;gBACF,CAAC;YACF,CAAC;YACD,OAAO,GAAG,CAAC;QAAA,CACX,CAAC,CAAC;IAAA,CACH,CAAC;IAEF,MAAM,kBAAkB,GAAkC,EAAE,CAAC;IAE7D,KAAK,GAAG,IAAI,KAAK,CAAC;QACjB,YAAY,EAAE;YACb,YAAY,EAAE,EAAE;YAChB,KAAK;YACL,aAAa;YACb,KAAK,EAAE,EAAE;SACT;QACD,YAAY,EAAE,2BAA2B;QACzC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YACD,MAAM,qBAAqB,GAAG,eAAe,CAAC,wBAAwB,EAAE,CAAC;YACzE,MAAM,iBAAiB,GAAG,eAAe,CAAC,oBAAoB,EAAE,CAAC;YACjE,qEAAqE;YACrE,oDAAoD;YACpD,MAAM,kBAAkB,GAAG,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC;YACpF,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,qBAAqB,CAAC,SAAS,IAAI,kBAAkB,CAAC;YAC9F,MAAM,yBAAyB,GAC9B,OAAO,EAAE,yBAAyB,IAAI,eAAe,CAAC,4BAA4B,EAAE,CAAC;YACtF,OAAO,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE;gBACnC,GAAG,OAAO;gBACV,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS;gBACT,yBAAyB;gBACzB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,qBAAqB,CAAC,UAAU;gBACnE,eAAe,EAAE,OAAO,EAAE,eAAe,IAAI,qBAAqB,CAAC,eAAe;gBAClF,OAAO,EAAE,+BAA+B,CACvC,KAAK,EACL,eAAe,EACf,OAAO,EAAE,SAAS,EAClB,IAAI,CAAC,OAAO,EACZ,OAAO,EAAE,OAAO,CAChB;aACD,CAAC,CAAC;QAAA,CACH;QACD,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBACrD,OAAO,OAAO,CAAC;YAChB,CAAC;YACD,OAAO,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;QAAA,CACjD;QACD,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBACrD,OAAO;YACR,CAAC;YACD,MAAM,MAAM,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,yBAAyB;gBAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;aACzB,CAAC,CAAC;QAAA,CACH;QACD,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;QACxC,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC;YAC1C,IAAI,CAAC,MAAM;gBAAE,OAAO,QAAQ,CAAC;YAC7B,OAAO,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAAA,CACpC;QACD,YAAY,EAAE,eAAe,CAAC,eAAe,EAAE;QAC/C,YAAY,EAAE,eAAe,CAAC,eAAe,EAAE;QAC/C,SAAS,EAAE,eAAe,CAAC,YAAY,EAAE;QACzC,eAAe,EAAE,eAAe,CAAC,kBAAkB,EAAE;QACrD,eAAe,EAAE,eAAe,CAAC,wBAAwB,EAAE,CAAC,eAAe;KAC3E,CAAC,CAAC;IAEH,gDAAgD;IAChD,IAAI,kBAAkB,EAAE,CAAC;QACxB,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC;QAChD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACvB,cAAc,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;SAAM,CAAC;QACP,2FAA2F;QAC3F,IAAI,KAAK,EAAE,CAAC;YACX,cAAc,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,cAAc,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC;QAChC,KAAK;QACL,cAAc;QACd,eAAe;QACf,GAAG;QACH,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,cAAc;QACd,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa;QACb,sBAAsB;QACtB,gBAAgB;QAChB,iBAAiB;QACjB,kBAAkB;QAClB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;KAC5C,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,cAAc,CAAC,aAAa,EAAE,CAAC;IAExD,OAAO;QACN,OAAO;QACP,gBAAgB;QAChB,oBAAoB;KACpB,CAAC;AAAA,CACF","sourcesContent":["import { join } from \"node:path\";\nimport { Agent, type AgentMessage, type ThinkingLevel } from \"@earendil-works/omk-agent-core\";\nimport { clampThinkingLevel, type Message, type Model, streamSimple } from \"@earendil-works/omk-ai\";\nimport { getAgentDir } from \"../config.ts\";\nimport { resolvePath } from \"../utils/paths.ts\";\nimport { AgentSession } from \"./agent-session.ts\";\nimport { formatNoModelsAvailableMessage } from \"./auth-guidance.ts\";\nimport { AuthStorage } from \"./auth-storage.ts\";\nimport { DEFAULT_THINKING_LEVEL } from \"./defaults.ts\";\nimport type { ExtensionRunner, LoadExtensionsResult, SessionStartEvent, ToolDefinition } from \"./extensions/index.ts\";\nimport { convertToLlm } from \"./messages.ts\";\nimport { ModelRegistry } from \"./model-registry.ts\";\nimport { findInitialModel } from \"./model-resolver.ts\";\nimport { mergeProviderAttributionHeaders } from \"./provider-attribution.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport { DefaultResourceLoader } from \"./resource-loader.ts\";\nimport { getDefaultSessionDir, SessionManager } from \"./session-manager.ts\";\nimport { SettingsManager } from \"./settings-manager.ts\";\nimport { time } from \"./timings.ts\";\nimport {\n\tcreateBashTool,\n\tcreateCodingTools,\n\tcreateEditTool,\n\tcreateFindTool,\n\tcreateGrepTool,\n\tcreateLsTool,\n\tcreateReadOnlyTools,\n\tcreateReadTool,\n\tcreateWriteTool,\n\ttype ToolName,\n\twithFileMutationQueue,\n} from \"./tools/index.ts\";\n\nexport interface CreateAgentSessionOptions {\n\t/** Working directory for project-local discovery. Default: process.cwd() */\n\tcwd?: string;\n\t/** Global config directory. Default: ~/.omk/agent */\n\tagentDir?: string;\n\n\t/** Auth storage for credentials. Default: AuthStorage.create(agentDir/auth.json) */\n\tauthStorage?: AuthStorage;\n\t/** Model registry. Default: ModelRegistry.create(authStorage, agentDir/models.json) */\n\tmodelRegistry?: ModelRegistry;\n\n\t/** Model to use. Default: from settings, else first available */\n\tmodel?: Model<any>;\n\t/** Thinking level. Default: from settings, else 'medium' (clamped to model capabilities) */\n\tthinkingLevel?: ThinkingLevel;\n\t/** Models available for cycling (Ctrl+P in interactive mode) */\n\tscopedModels?: Array<{ model: Model<any>; thinkingLevel?: ThinkingLevel }>;\n\n\t/**\n\t * Optional default tool suppression mode when no explicit allowlist is provided.\n\t *\n\t * - \"all\": start with no tools enabled\n\t * - \"builtin\": disable the default built-in tools (read, bash, edit, write)\n\t *   but keep extension/custom tools enabled\n\t */\n\tnoTools?: \"all\" | \"builtin\";\n\t/**\n\t * Optional allowlist of tool names.\n\t *\n\t * When omitted, pi enables the default built-in tools (read, bash, edit, write)\n\t * and leaves extension/custom tools enabled unless `noTools` changes that default.\n\t * When provided, only the listed tool names are enabled.\n\t */\n\ttools?: string[];\n\t/** Optional denylist of tool names to disable. Applies after `tools` when both are provided. */\n\texcludeTools?: string[];\n\t/** Custom tools to register (in addition to built-in tools). */\n\tcustomTools?: ToolDefinition[];\n\n\t/** Resource loader. When omitted, DefaultResourceLoader is used. */\n\tresourceLoader?: ResourceLoader;\n\n\t/** Session manager. Default: SessionManager.create(cwd) */\n\tsessionManager?: SessionManager;\n\n\t/** Settings manager. Default: SettingsManager.create(cwd, agentDir) */\n\tsettingsManager?: SettingsManager;\n\t/** Session start event metadata for extension runtime startup. */\n\tsessionStartEvent?: SessionStartEvent;\n}\n\n/** Result from createAgentSession */\nexport interface CreateAgentSessionResult {\n\t/** The created session */\n\tsession: AgentSession;\n\t/** Extensions result (for UI context setup in interactive mode) */\n\textensionsResult: LoadExtensionsResult;\n\t/** Warning if session was restored with a different model than saved */\n\tmodelFallbackMessage?: string;\n}\n\n// Re-exports\n\nexport * from \"./agent-session-runtime.ts\";\nexport type {\n\tExtensionAPI,\n\tExtensionCommandContext,\n\tExtensionContext,\n\tExtensionFactory,\n\tSlashCommandInfo,\n\tSlashCommandSource,\n\tToolDefinition,\n} from \"./extensions/index.ts\";\nexport type { PromptTemplate } from \"./prompt-templates.ts\";\nexport type { Skill } from \"./skills.ts\";\nexport type { Tool } from \"./tools/index.ts\";\n\nexport {\n\twithFileMutationQueue,\n\t// Tool factories (for custom cwd)\n\tcreateCodingTools,\n\tcreateReadOnlyTools,\n\tcreateReadTool,\n\tcreateBashTool,\n\tcreateEditTool,\n\tcreateWriteTool,\n\tcreateGrepTool,\n\tcreateFindTool,\n\tcreateLsTool,\n};\n\n// Helper Functions\n\nfunction getDefaultAgentDir(): string {\n\treturn getAgentDir();\n}\n\n/**\n * Create an AgentSession with the specified options.\n *\n * @example\n * ```typescript\n * // Minimal - uses defaults\n * const { session } = await createAgentSession();\n *\n * // With explicit model\n * import { getModel } from '@earendil-works/omk-ai';\n * const { session } = await createAgentSession({\n *   model: getModel('anthropic', 'claude-opus-4-5'),\n *   thinkingLevel: 'high',\n * });\n *\n * // Continue previous session\n * const { session, modelFallbackMessage } = await createAgentSession({\n *   continueSession: true,\n * });\n *\n * // Full control\n * const loader = new DefaultResourceLoader({\n *   cwd: process.cwd(),\n *   agentDir: getAgentDir(),\n *   settingsManager: SettingsManager.create(),\n * });\n * await loader.reload();\n * const { session } = await createAgentSession({\n *   model: myModel,\n *   tools: [\"read\", \"bash\"],\n *   resourceLoader: loader,\n *   sessionManager: SessionManager.inMemory(),\n * });\n * ```\n */\nexport async function createAgentSession(options: CreateAgentSessionOptions = {}): Promise<CreateAgentSessionResult> {\n\tconst cwd = resolvePath(options.cwd ?? options.sessionManager?.getCwd() ?? process.cwd());\n\tconst agentDir = options.agentDir ? resolvePath(options.agentDir) : getDefaultAgentDir();\n\tlet resourceLoader = options.resourceLoader;\n\n\t// Use provided or create AuthStorage and ModelRegistry\n\tconst authPath = options.agentDir ? join(agentDir, \"auth.json\") : undefined;\n\tconst modelsPath = options.agentDir ? join(agentDir, \"models.json\") : undefined;\n\tconst authStorage = options.authStorage ?? AuthStorage.create(authPath);\n\tconst modelRegistry = options.modelRegistry ?? ModelRegistry.create(authStorage, modelsPath);\n\n\tconst settingsManager = options.settingsManager ?? SettingsManager.create(cwd, agentDir);\n\tconst sessionManager = options.sessionManager ?? SessionManager.create(cwd, getDefaultSessionDir(cwd, agentDir));\n\n\tif (!resourceLoader) {\n\t\tresourceLoader = new DefaultResourceLoader({ cwd, agentDir, settingsManager });\n\t\tawait resourceLoader.reload();\n\t\ttime(\"resourceLoader.reload\");\n\t}\n\n\t// Check if session has existing data to restore\n\tconst existingSession = sessionManager.buildSessionContext();\n\tconst hasExistingSession = existingSession.messages.length > 0;\n\tconst hasThinkingEntry = sessionManager.getBranch().some((entry) => entry.type === \"thinking_level_change\");\n\n\tlet model = options.model;\n\tlet modelFallbackMessage: string | undefined;\n\n\t// If session has data, try to restore model from it\n\tif (!model && hasExistingSession && existingSession.model) {\n\t\tconst restoredModel = modelRegistry.find(existingSession.model.provider, existingSession.model.modelId);\n\t\tif (restoredModel && modelRegistry.hasConfiguredAuth(restoredModel)) {\n\t\t\tmodel = restoredModel;\n\t\t}\n\t\tif (!model) {\n\t\t\tmodelFallbackMessage = `Could not restore model ${existingSession.model.provider}/${existingSession.model.modelId}`;\n\t\t}\n\t}\n\n\t// If still no model, use findInitialModel (checks settings default, then provider defaults)\n\tif (!model) {\n\t\tconst result = await findInitialModel({\n\t\t\tscopedModels: [],\n\t\t\tisContinuing: hasExistingSession,\n\t\t\tdefaultProvider: settingsManager.getDefaultProvider(),\n\t\t\tdefaultModelId: settingsManager.getDefaultModel(),\n\t\t\tdefaultThinkingLevel: settingsManager.getDefaultThinkingLevel(),\n\t\t\tmodelRegistry,\n\t\t});\n\t\tmodel = result.model;\n\t\tif (!model) {\n\t\t\tmodelFallbackMessage = formatNoModelsAvailableMessage();\n\t\t} else if (modelFallbackMessage) {\n\t\t\tmodelFallbackMessage += `. Using ${model.provider}/${model.id}`;\n\t\t}\n\t}\n\n\tlet thinkingLevel = options.thinkingLevel;\n\n\t// If session has data, restore thinking level from it\n\tif (thinkingLevel === undefined && hasExistingSession) {\n\t\tthinkingLevel = hasThinkingEntry\n\t\t\t? (existingSession.thinkingLevel as ThinkingLevel)\n\t\t\t: (settingsManager.getDefaultThinkingLevel() ?? DEFAULT_THINKING_LEVEL);\n\t}\n\n\t// Fall back to settings default\n\tif (thinkingLevel === undefined) {\n\t\tthinkingLevel = settingsManager.getDefaultThinkingLevel() ?? DEFAULT_THINKING_LEVEL;\n\t}\n\n\t// Clamp to model capabilities\n\tif (!model) {\n\t\tthinkingLevel = \"off\";\n\t} else {\n\t\tthinkingLevel = clampThinkingLevel(model, thinkingLevel) as ThinkingLevel;\n\t}\n\n\tconst defaultActiveToolNames: ToolName[] = [\"read\", \"bash\", \"edit\", \"write\"];\n\tconst allowedToolNames = options.tools ?? (options.noTools === \"all\" ? [] : undefined);\n\tconst excludedToolNames = options.excludeTools;\n\tconst excludedToolNameSet = excludedToolNames ? new Set(excludedToolNames) : undefined;\n\tconst initialActiveToolNames: string[] = (\n\t\toptions.tools ? [...options.tools] : options.noTools ? [] : defaultActiveToolNames\n\t).filter((name) => !excludedToolNameSet?.has(name));\n\n\tlet agent: Agent;\n\n\t// Create convertToLlm wrapper that filters images if blockImages is enabled (defense-in-depth)\n\tconst convertToLlmWithBlockImages = (messages: AgentMessage[]): Message[] => {\n\t\tconst converted = convertToLlm(messages);\n\t\t// Check setting dynamically so mid-session changes take effect\n\t\tif (!settingsManager.getBlockImages()) {\n\t\t\treturn converted;\n\t\t}\n\t\t// Filter out ImageContent from all messages, replacing with text placeholder\n\t\treturn converted.map((msg) => {\n\t\t\tif (msg.role === \"user\" || msg.role === \"toolResult\") {\n\t\t\t\tconst content = msg.content;\n\t\t\t\tif (Array.isArray(content)) {\n\t\t\t\t\tconst hasImages = content.some((c) => c.type === \"image\");\n\t\t\t\t\tif (hasImages) {\n\t\t\t\t\t\tconst filteredContent = content\n\t\t\t\t\t\t\t.map((c) =>\n\t\t\t\t\t\t\t\tc.type === \"image\" ? { type: \"text\" as const, text: \"Image reading is disabled.\" } : c,\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t.filter(\n\t\t\t\t\t\t\t\t(c, i, arr) =>\n\t\t\t\t\t\t\t\t\t// Dedupe consecutive \"Image reading is disabled.\" texts\n\t\t\t\t\t\t\t\t\t!(\n\t\t\t\t\t\t\t\t\t\tc.type === \"text\" &&\n\t\t\t\t\t\t\t\t\t\tc.text === \"Image reading is disabled.\" &&\n\t\t\t\t\t\t\t\t\t\ti > 0 &&\n\t\t\t\t\t\t\t\t\t\tarr[i - 1].type === \"text\" &&\n\t\t\t\t\t\t\t\t\t\t(arr[i - 1] as { type: \"text\"; text: string }).text === \"Image reading is disabled.\"\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\treturn { ...msg, content: filteredContent };\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn msg;\n\t\t});\n\t};\n\n\tconst extensionRunnerRef: { current?: ExtensionRunner } = {};\n\n\tagent = new Agent({\n\t\tinitialState: {\n\t\t\tsystemPrompt: \"\",\n\t\t\tmodel,\n\t\t\tthinkingLevel,\n\t\t\ttools: [],\n\t\t},\n\t\tconvertToLlm: convertToLlmWithBlockImages,\n\t\tstreamFn: async (model, context, options) => {\n\t\t\tconst auth = await modelRegistry.getApiKeyAndHeaders(model);\n\t\t\tif (!auth.ok) {\n\t\t\t\tthrow new Error(auth.error);\n\t\t\t}\n\t\t\tconst providerRetrySettings = settingsManager.getProviderRetrySettings();\n\t\t\tconst httpIdleTimeoutMs = settingsManager.getHttpIdleTimeoutMs();\n\t\t\t// SDKs treat timeout=0 as 0ms (immediate timeout), not \"no timeout\".\n\t\t\t// Use max int32 to effectively disable the timeout.\n\t\t\tconst effectiveTimeoutMs = httpIdleTimeoutMs === 0 ? 2147483647 : httpIdleTimeoutMs;\n\t\t\tconst timeoutMs = options?.timeoutMs ?? providerRetrySettings.timeoutMs ?? effectiveTimeoutMs;\n\t\t\tconst websocketConnectTimeoutMs =\n\t\t\t\toptions?.websocketConnectTimeoutMs ?? settingsManager.getWebSocketConnectTimeoutMs();\n\t\t\treturn streamSimple(model, context, {\n\t\t\t\t...options,\n\t\t\t\tapiKey: auth.apiKey,\n\t\t\t\ttimeoutMs,\n\t\t\t\twebsocketConnectTimeoutMs,\n\t\t\t\tmaxRetries: options?.maxRetries ?? providerRetrySettings.maxRetries,\n\t\t\t\tmaxRetryDelayMs: options?.maxRetryDelayMs ?? providerRetrySettings.maxRetryDelayMs,\n\t\t\t\theaders: mergeProviderAttributionHeaders(\n\t\t\t\t\tmodel,\n\t\t\t\t\tsettingsManager,\n\t\t\t\t\toptions?.sessionId,\n\t\t\t\t\tauth.headers,\n\t\t\t\t\toptions?.headers,\n\t\t\t\t),\n\t\t\t});\n\t\t},\n\t\tonPayload: async (payload, _model) => {\n\t\t\tconst runner = extensionRunnerRef.current;\n\t\t\tif (!runner?.hasHandlers(\"before_provider_request\")) {\n\t\t\t\treturn payload;\n\t\t\t}\n\t\t\treturn runner.emitBeforeProviderRequest(payload);\n\t\t},\n\t\tonResponse: async (response, _model) => {\n\t\t\tconst runner = extensionRunnerRef.current;\n\t\t\tif (!runner?.hasHandlers(\"after_provider_response\")) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tawait runner.emit({\n\t\t\t\ttype: \"after_provider_response\",\n\t\t\t\tstatus: response.status,\n\t\t\t\theaders: response.headers,\n\t\t\t});\n\t\t},\n\t\tsessionId: sessionManager.getSessionId(),\n\t\ttransformContext: async (messages) => {\n\t\t\tconst runner = extensionRunnerRef.current;\n\t\t\tif (!runner) return messages;\n\t\t\treturn runner.emitContext(messages);\n\t\t},\n\t\tsteeringMode: settingsManager.getSteeringMode(),\n\t\tfollowUpMode: settingsManager.getFollowUpMode(),\n\t\ttransport: settingsManager.getTransport(),\n\t\tthinkingBudgets: settingsManager.getThinkingBudgets(),\n\t\tmaxRetryDelayMs: settingsManager.getProviderRetrySettings().maxRetryDelayMs,\n\t});\n\n\t// Restore messages if session has existing data\n\tif (hasExistingSession) {\n\t\tagent.state.messages = existingSession.messages;\n\t\tif (!hasThinkingEntry) {\n\t\t\tsessionManager.appendThinkingLevelChange(thinkingLevel);\n\t\t}\n\t} else {\n\t\t// Save initial model and thinking level for new sessions so they can be restored on resume\n\t\tif (model) {\n\t\t\tsessionManager.appendModelChange(model.provider, model.id);\n\t\t}\n\t\tsessionManager.appendThinkingLevelChange(thinkingLevel);\n\t}\n\n\tconst session = new AgentSession({\n\t\tagent,\n\t\tsessionManager,\n\t\tsettingsManager,\n\t\tcwd,\n\t\tscopedModels: options.scopedModels,\n\t\tresourceLoader,\n\t\tcustomTools: options.customTools,\n\t\tmodelRegistry,\n\t\tinitialActiveToolNames,\n\t\tallowedToolNames,\n\t\texcludedToolNames,\n\t\textensionRunnerRef,\n\t\tsessionStartEvent: options.sessionStartEvent,\n\t});\n\tconst extensionsResult = resourceLoader.getExtensions();\n\n\treturn {\n\t\tsession,\n\t\textensionsResult,\n\t\tmodelFallbackMessage,\n\t};\n}\n"]}
+{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../../src/core/sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAwD,MAAM,gCAAgC,CAAC;AAC7G,OAAO,EACN,mCAAmC,EAEnC,kBAAkB,EAClB,gCAAgC,EAKhC,YAAY,GACZ,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAIvD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAE5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAsB,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EAEN,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,eAAe,EAEf,qBAAqB,GACrB,MAAM,kBAAkB,CAAC;AAgF1B,aAAa;AAEb,cAAc,4BAA4B,CAAC;AAc3C,OAAO,EACN,qBAAqB;AACrB,kCAAkC;AAClC,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,cAAc,EACd,YAAY,GACZ,CAAC;AAEF,mBAAmB;AAEnB,SAAS,kBAAkB,GAAW;IACrC,OAAO,WAAW,EAAE,CAAC;AAAA,CACrB;AA0ED,SAAS,8BAA8B,CACtC,IAAyB,EACzB,OAAqC,EACrB;IAChB,OAAO;QACN,IAAI;QACJ,OAAO,EAAE,WAAW;QACpB,UAAU,EAAE;YACX,IAAI,EAAE,GAAG;YACT,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,KAAK;SACrB;QACD,OAAO;QACP,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE;KACrE,CAAC;AAAA,CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAC1C,MAAmC,EACnC,OAA+B,EACL;IAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO;YACN,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,sBAAsB;YAC5B,MAAM,EAAE,sCAAsC;YAC9C,IAAI,EAAE,KAAK;SACX,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,MAAM,eAAe,GAAG,mBAAmB,CAAC,8BAA8B,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;QACxG,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO;YACN,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,CAAC,eAAe,CAAC,OAAO;YACnC,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,MAAM,EAAE,eAAe,CAAC,MAAM;YAC9B,IAAI,EAAE,OAAO;SACb,CAAC;IACH,CAAC;IAED,OAAO;QACN,OAAO,EAAE,eAAe,CAAC,OAAO;QAChC,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,MAAM,EAAE,eAAe,CAAC,MAAM;QAC9B,IAAI,EAAE,SAAS;KACf,CAAC;AAAA,CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CACjD,MAAmC,EACnC,OAAkC,EACH;IAC/B,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,OAAO,EAAE,CAAC;YACT,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC7B,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAAA,CAChB,CAAC;AAAA,CACF;AAYD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAA6B,EAAY;IAClF,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,4BAA4B,EAAE,GAAG,IAAI,CAAC;IAC9E,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;QACzC,IAAI,4BAA4B,EAAE,CAAC;YAClC,IAAI,CAAC;gBACJ,MAAM,mCAAmC,CACxC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,EACtE,4BAA4B,CAC5B,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,gCAAgC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACvD,CAAC;QACF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,qBAAqB,GAAG,eAAe,CAAC,wBAAwB,EAAE,CAAC;QACzE,MAAM,iBAAiB,GAAG,eAAe,CAAC,oBAAoB,EAAE,CAAC;QACjE,qEAAqE;QACrE,oDAAoD;QACpD,MAAM,kBAAkB,GAAG,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC;QACpF,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,qBAAqB,CAAC,SAAS,IAAI,kBAAkB,CAAC;QAC9F,MAAM,yBAAyB,GAC9B,OAAO,EAAE,yBAAyB,IAAI,eAAe,CAAC,4BAA4B,EAAE,CAAC;QACtF,OAAO,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE;YACnC,GAAG,OAAO;YACV,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS;YACT,yBAAyB;YACzB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,qBAAqB,CAAC,UAAU;YACnE,eAAe,EAAE,OAAO,EAAE,eAAe,IAAI,qBAAqB,CAAC,eAAe;YAClF,OAAO,EAAE,+BAA+B,CACvC,KAAK,EACL,eAAe,EACf,OAAO,EAAE,SAAS,EAClB,IAAI,CAAC,OAAO,EACZ,OAAO,EAAE,OAAO,CAChB;YACD,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/F,CAAC,CAAC;IAAA,CACH,CAAC;AAAA,CACF;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAO,GAA8B,EAAE,EAAqC;IACpH,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;IACzF,IAAI,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAE5C,uDAAuD;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAE7F,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzF,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEjH,IAAI,CAAC,cAAc,EAAE,CAAC;QACrB,cAAc,GAAG,IAAI,qBAAqB,CAAC;YAC1C,GAAG;YACH,QAAQ;YACR,eAAe;YACf,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;YAClD,YAAY,EAAE,OAAO,CAAC,mBAAmB;SACzC,CAAC,CAAC;QACH,MAAM,cAAc,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC/B,CAAC;IAED,gDAAgD;IAChD,MAAM,eAAe,GAAG,cAAc,CAAC,mBAAmB,EAAE,CAAC;IAC7D,MAAM,kBAAkB,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,cAAc,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC;IAE5G,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC1B,IAAI,oBAAwC,CAAC;IAE7C,oDAAoD;IACpD,IAAI,CAAC,KAAK,IAAI,kBAAkB,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;QAC3D,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxG,IAAI,aAAa,IAAI,aAAa,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC;YACrE,KAAK,GAAG,aAAa,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,oBAAoB,GAAG,2BAA2B,eAAe,CAAC,KAAK,CAAC,QAAQ,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACrH,CAAC;IACF,CAAC;IAED,4FAA4F;IAC5F,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;YACrC,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,kBAAkB;YAChC,eAAe,EAAE,eAAe,CAAC,kBAAkB,EAAE;YACrD,cAAc,EAAE,eAAe,CAAC,eAAe,EAAE;YACjD,oBAAoB,EAAE,eAAe,CAAC,uBAAuB,EAAE;YAC/D,aAAa;SACb,CAAC,CAAC;QACH,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QACrB,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,oBAAoB,GAAG,8BAA8B,EAAE,CAAC;QACzD,CAAC;aAAM,IAAI,oBAAoB,EAAE,CAAC;YACjC,oBAAoB,IAAI,WAAW,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QACjE,CAAC;IACF,CAAC;IAED,IAAI,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAE1C,sDAAsD;IACtD,IAAI,aAAa,KAAK,SAAS,IAAI,kBAAkB,EAAE,CAAC;QACvD,aAAa,GAAG,gBAAgB;YAC/B,CAAC,CAAE,eAAe,CAAC,aAA+B;YAClD,CAAC,CAAC,CAAC,eAAe,CAAC,uBAAuB,EAAE,IAAI,sBAAsB,CAAC,CAAC;IAC1E,CAAC;IAED,gCAAgC;IAChC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QACjC,aAAa,GAAG,eAAe,CAAC,uBAAuB,EAAE,IAAI,sBAAsB,CAAC;IACrF,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,aAAa,GAAG,KAAK,CAAC;IACvB,CAAC;SAAM,CAAC;QACP,aAAa,GAAG,kBAAkB,CAAC,KAAK,EAAE,aAAa,CAAkB,CAAC;IAC3E,CAAC;IAED,MAAM,sBAAsB,GAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACvF,MAAM,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IAC/C,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,MAAM,sBAAsB,GAAa,CACxC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAClF,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,mBAAmB,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAEpD,IAAI,KAAY,CAAC;IAEjB,+FAA+F;IAC/F,MAAM,2BAA2B,GAAG,CAAC,QAAwB,EAAa,EAAE,CAAC;QAC5E,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,+DAA+D;QAC/D,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,EAAE,CAAC;YACvC,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,6EAA6E;QAC7E,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACtD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;gBAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;oBAC1D,IAAI,SAAS,EAAE,CAAC;wBACf,MAAM,eAAe,GAAG,OAAO;6BAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACV,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC,CAAC,CACtF;6BACA,MAAM,CACN,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;wBACb,wDAAwD;wBACxD,CAAC,CACA,CAAC,CAAC,IAAI,KAAK,MAAM;4BACjB,CAAC,CAAC,IAAI,KAAK,4BAA4B;4BACvC,CAAC,GAAG,CAAC;4BACL,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM;4BACzB,GAAG,CAAC,CAAC,GAAG,CAAC,CAAoC,CAAC,IAAI,KAAK,4BAA4B,CACpF,CACF,CAAC;wBACH,OAAO,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;oBAC7C,CAAC;gBACF,CAAC;YACF,CAAC;YACD,OAAO,GAAG,CAAC;QAAA,CACX,CAAC,CAAC;IAAA,CACH,CAAC;IAEF,MAAM,kBAAkB,GAAkC,EAAE,CAAC;IAC7D,MAAM,4BAA4B,GAAG,OAAO,CAAC,qBAAqB;QACjE,CAAC,CAAC,kCAAkC,CAAC,OAAO,CAAC,qBAAqB,EAAE,OAAO,CAAC,sBAAsB,CAAC;QACnG,CAAC,CAAC,SAAS,CAAC;IAEb,KAAK,GAAG,IAAI,KAAK,CAAC;QACjB,YAAY,EAAE;YACb,YAAY,EAAE,EAAE;YAChB,KAAK;YACL,aAAa;YACb,KAAK,EAAE,EAAE;SACT;QACD,YAAY,EAAE,2BAA2B;QACzC,QAAQ,EAAE,yBAAyB,CAAC;YACnC,aAAa;YACb,eAAe;YACf,4BAA4B;SAC5B,CAAC;QACF,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBACrD,OAAO,OAAO,CAAC;YAChB,CAAC;YACD,OAAO,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;QAAA,CACjD;QACD,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBACrD,OAAO;YACR,CAAC;YACD,MAAM,MAAM,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,yBAAyB;gBAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;aACzB,CAAC,CAAC;QAAA,CACH;QACD,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;QACxC,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC;YAC1C,IAAI,CAAC,MAAM;gBAAE,OAAO,QAAQ,CAAC;YAC7B,OAAO,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAAA,CACpC;QACD,YAAY,EAAE,eAAe,CAAC,eAAe,EAAE;QAC/C,YAAY,EAAE,eAAe,CAAC,eAAe,EAAE;QAC/C,SAAS,EAAE,eAAe,CAAC,YAAY,EAAE;QACzC,eAAe,EAAE,eAAe,CAAC,kBAAkB,EAAE;QACrD,eAAe,EAAE,eAAe,CAAC,wBAAwB,EAAE,CAAC,eAAe;KAC3E,CAAC,CAAC;IAEH,gDAAgD;IAChD,IAAI,kBAAkB,EAAE,CAAC;QACxB,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC;QAChD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACvB,cAAc,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;SAAM,CAAC;QACP,2FAA2F;QAC3F,IAAI,KAAK,EAAE,CAAC;YACX,cAAc,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,cAAc,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC;QAChC,KAAK;QACL,cAAc;QACd,eAAe;QACf,GAAG;QACH,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,cAAc;QACd,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa;QACb,sBAAsB;QACtB,gBAAgB;QAChB,iBAAiB;QACjB,kBAAkB;QAClB,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;QAClD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;KAC5C,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,cAAc,CAAC,aAAa,EAAE,CAAC;IAExD,OAAO;QACN,OAAO;QACP,gBAAgB;QAChB,oBAAoB;KACpB,CAAC;AAAA,CACF","sourcesContent":["import { join } from \"node:path\";\nimport { Agent, type AgentMessage, type StreamFn, type ThinkingLevel } from \"@earendil-works/omk-agent-core\";\nimport {\n\tassertProviderNetworkRequestAllowed,\n\ttype BeforeProviderNetworkRequest,\n\tclampThinkingLevel,\n\tcreateProviderNetworkErrorStream,\n\ttype Message,\n\ttype Model,\n\ttype ProviderNetworkDecision,\n\ttype ProviderNetworkRequest,\n\tstreamSimple,\n} from \"@earendil-works/omk-ai\";\nimport { getAgentDir } from \"../config.ts\";\nimport { resolvePath } from \"../utils/paths.ts\";\nimport { AgentSession } from \"./agent-session.ts\";\nimport { formatNoModelsAvailableMessage } from \"./auth-guidance.ts\";\nimport { AuthStorage } from \"./auth-storage.ts\";\nimport { DEFAULT_THINKING_LEVEL } from \"./defaults.ts\";\nimport type { ExtensionRunner, LoadExtensionsResult, SessionStartEvent, ToolDefinition } from \"./extensions/index.ts\";\nimport type { ExtensionExecSandbox } from \"./extensions/types.ts\";\nimport type { LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport { convertToLlm } from \"./messages.ts\";\nimport { ModelRegistry } from \"./model-registry.ts\";\nimport { findInitialModel } from \"./model-resolver.ts\";\nimport type { PackageTrialRuntimeOptions } from \"./package-manager.ts\";\nimport { mergeProviderAttributionHeaders } from \"./provider-attribution.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport { DefaultResourceLoader } from \"./resource-loader.ts\";\nimport { decideNetworkAccess, type SandboxPolicy } from \"./sandbox/policy.ts\";\nimport { getDefaultSessionDir, SessionManager } from \"./session-manager.ts\";\nimport { SettingsManager } from \"./settings-manager.ts\";\nimport { time } from \"./timings.ts\";\nimport {\n\ttype BashSandboxPreflight,\n\tcreateBashTool,\n\tcreateCodingTools,\n\tcreateEditTool,\n\tcreateFindTool,\n\tcreateGrepTool,\n\tcreateLsTool,\n\tcreateReadOnlyTools,\n\tcreateReadTool,\n\tcreateWriteTool,\n\ttype ToolName,\n\twithFileMutationQueue,\n} from \"./tools/index.ts\";\n\nexport interface CreateAgentSessionOptions {\n\t/** Working directory for project-local discovery. Default: process.cwd() */\n\tcwd?: string;\n\t/** Global config directory. Default: ~/.omk/agent */\n\tagentDir?: string;\n\n\t/** Auth storage for credentials. Default: AuthStorage.create(agentDir/auth.json) */\n\tauthStorage?: AuthStorage;\n\t/** Model registry. Default: ModelRegistry.create(authStorage, agentDir/models.json) */\n\tmodelRegistry?: ModelRegistry;\n\n\t/** Model to use. Default: from settings, else first available */\n\tmodel?: Model<any>;\n\t/** Thinking level. Default: from settings, else 'medium' (clamped to model capabilities) */\n\tthinkingLevel?: ThinkingLevel;\n\t/** Models available for cycling (Ctrl+P in interactive mode) */\n\tscopedModels?: Array<{ model: Model<any>; thinkingLevel?: ThinkingLevel }>;\n\n\t/**\n\t * Optional default tool suppression mode when no explicit allowlist is provided.\n\t *\n\t * - \"all\": start with no tools enabled\n\t * - \"builtin\": disable the default built-in tools (read, bash, edit, write)\n\t *   but keep extension/custom tools enabled\n\t */\n\tnoTools?: \"all\" | \"builtin\";\n\t/**\n\t * Optional allowlist of tool names.\n\t *\n\t * When omitted, omk enables the default built-in tools (read, bash, edit, write)\n\t * and leaves extension/custom tools enabled unless `noTools` changes that default.\n\t * When provided, only the listed tool names are enabled.\n\t */\n\ttools?: string[];\n\t/** Optional denylist of tool names to disable. Applies after `tools` when both are provided. */\n\texcludeTools?: string[];\n\t/** Custom tools to register (in addition to built-in tools). */\n\tcustomTools?: ToolDefinition[];\n\n\t/** Resource loader. When omitted, DefaultResourceLoader is used. */\n\tresourceLoader?: ResourceLoader;\n\n\t/** Session manager. Default: SessionManager.create(cwd) */\n\tsessionManager?: SessionManager;\n\n\t/** Settings manager. Default: SettingsManager.create(cwd, agentDir) */\n\tsettingsManager?: SettingsManager;\n\t/** Session start event metadata for extension runtime startup. */\n\tsessionStartEvent?: SessionStartEvent;\n\t/**\n\t * Optional provider network policy. When omitted, no provider network\n\t * preflight is installed (current behavior preserved). When set, a\n\t * sanitized preflight runs before API key/header resolution and is\n\t * forwarded to `streamSimple` for deeper provider-derived URL checks.\n\t */\n\tproviderNetworkPolicy?: ProviderNetworkPolicyConfig;\n\t/** Optional sanitized audit sink for provider network policy decisions. */\n\tonProviderNetworkAudit?: ProviderNetworkAuditSink;\n\t/** Optional loadout enforcement policy for SDK-created sessions. */\n\tloadoutAccessPolicy?: LoadoutAccessPolicy;\n\t/** Optional bash sandbox preflight policy for SDK-created sessions and RPC bash. */\n\tbashSandboxPreflight?: BashSandboxPreflight;\n\t/** Optional sandbox policy for extension `omk.exec` loaded through the default resource loader. */\n\textensionExecSandbox?: ExtensionExecSandbox;\n\t/** Optional sandboxed temporary package trial runtime for CLI/SDK supplied package sources. */\n\tpackageTrialRuntime?: PackageTrialRuntimeOptions;\n}\n\n/** Result from createAgentSession */\nexport interface CreateAgentSessionResult {\n\t/** The created session */\n\tsession: AgentSession;\n\t/** Extensions result (for UI context setup in interactive mode) */\n\textensionsResult: LoadExtensionsResult;\n\t/** Warning if session was restored with a different model than saved */\n\tmodelFallbackMessage?: string;\n}\n\n// Re-exports\n\nexport * from \"./agent-session-runtime.ts\";\nexport type {\n\tExtensionAPI,\n\tExtensionCommandContext,\n\tExtensionContext,\n\tExtensionFactory,\n\tSlashCommandInfo,\n\tSlashCommandSource,\n\tToolDefinition,\n} from \"./extensions/index.ts\";\nexport type { PromptTemplate } from \"./prompt-templates.ts\";\nexport type { Skill } from \"./skills.ts\";\nexport type { Tool } from \"./tools/index.ts\";\n\nexport {\n\twithFileMutationQueue,\n\t// Tool factories (for custom cwd)\n\tcreateCodingTools,\n\tcreateReadOnlyTools,\n\tcreateReadTool,\n\tcreateBashTool,\n\tcreateEditTool,\n\tcreateWriteTool,\n\tcreateGrepTool,\n\tcreateFindTool,\n\tcreateLsTool,\n};\n\n// Helper Functions\n\nfunction getDefaultAgentDir(): string {\n\treturn getAgentDir();\n}\n\n/**\n * Create an AgentSession with the specified options.\n *\n * @example\n * ```typescript\n * // Minimal - uses defaults\n * const { session } = await createAgentSession();\n *\n * // With explicit model\n * import { getModel } from '@earendil-works/omk-ai';\n * const { session } = await createAgentSession({\n *   model: getModel('anthropic', 'claude-opus-4-5'),\n *   thinkingLevel: 'high',\n * });\n *\n * // Continue previous session\n * const { session, modelFallbackMessage } = await createAgentSession({\n *   continueSession: true,\n * });\n *\n * // Full control\n * const loader = new DefaultResourceLoader({\n *   cwd: process.cwd(),\n *   agentDir: getAgentDir(),\n *   settingsManager: SettingsManager.create(),\n * });\n * await loader.reload();\n * const { session } = await createAgentSession({\n *   model: myModel,\n *   tools: [\"read\", \"bash\"],\n *   resourceLoader: loader,\n *   sessionManager: SessionManager.inMemory(),\n * });\n * ```\n */\n// ---------------------------------------------------------------------------\n// Provider network policy\n//\n// Sanitized preflight for provider/API network access. The request metadata\n// is origin-only (no credentials, query, fragment, path, headers, API keys,\n// request bodies, prompts, or responses). Enforce mode blocks denied hosts\n// before any provider network I/O and before API key/header resolution; audit\n// mode records `wouldDeny` without blocking; off mode disables the preflight.\n// The pure host/loopback/deny/allow logic reuses `decideNetworkAccess`.\n// ---------------------------------------------------------------------------\n\nexport type ProviderNetworkPolicyMode = \"off\" | \"audit\" | \"enforce\";\n\nexport type ProviderNetworkPolicyNetwork = SandboxPolicy[\"network\"];\n\nexport interface ProviderNetworkPolicyConfig {\n\tmode: ProviderNetworkPolicyMode;\n\tnetwork: ProviderNetworkPolicyNetwork;\n}\n\nexport interface ProviderNetworkAuditEvent {\n\tprovider: string;\n\tapi: string;\n\tmodelId: string;\n\thost?: string;\n\tprotocol: ProviderNetworkRequest[\"protocol\"];\n\tport?: string;\n\ttransport: ProviderNetworkRequest[\"transport\"];\n\tpurpose: ProviderNetworkRequest[\"purpose\"];\n\tmode: ProviderNetworkPolicyMode;\n\trule: string;\n\tallowed: boolean;\n\twouldDeny?: boolean;\n}\n\nexport type ProviderNetworkAuditSink = (event: ProviderNetworkAuditEvent) => void;\n\nfunction syntheticProviderSandboxPolicy(\n\tmode: \"audit\" | \"enforce\",\n\tnetwork: ProviderNetworkPolicyNetwork,\n): SandboxPolicy {\n\treturn {\n\t\tmode,\n\t\tprofile: \"networked\",\n\t\tfilesystem: {\n\t\t\troot: \"/\",\n\t\t\treadAllow: [],\n\t\t\treadDeny: [],\n\t\t\twriteAllow: [],\n\t\t\tdenyWrite: [],\n\t\t\ttempWrite: [],\n\t\t\tfollowSymlinks: false,\n\t\t},\n\t\tnetwork,\n\t\tprocess: { allowExec: true, allowShell: true, allowPrivilege: false },\n\t};\n}\n\n/**\n * Map a sanitized provider network request to a provider-neutral decision.\n * Reuses the pure sandbox network decision logic (`decideNetworkAccess`) so\n * allow/deny/loopback semantics stay consistent with the rest of the sandbox.\n */\nexport function decideProviderNetworkAccess(\n\tconfig: ProviderNetworkPolicyConfig,\n\trequest: ProviderNetworkRequest,\n): ProviderNetworkDecision {\n\tif (config.mode === \"off\") {\n\t\treturn {\n\t\t\tallowed: true,\n\t\t\trule: \"provider-network.off\",\n\t\t\treason: \"Provider network policy is disabled.\",\n\t\t\tmode: \"off\",\n\t\t};\n\t}\n\n\tconst sandboxMode = config.mode === \"audit\" ? \"audit\" : \"enforce\";\n\tconst sandboxDecision = decideNetworkAccess(syntheticProviderSandboxPolicy(sandboxMode, config.network), {\n\t\thost: request.host,\n\t\turl: request.url,\n\t\tloopback: request.loopback,\n\t\tbrowser: false,\n\t});\n\n\tif (config.mode === \"audit\") {\n\t\treturn {\n\t\t\tallowed: true,\n\t\t\twouldDeny: !sandboxDecision.allowed,\n\t\t\trule: sandboxDecision.rule,\n\t\t\treason: sandboxDecision.reason,\n\t\t\tmode: \"audit\",\n\t\t};\n\t}\n\n\treturn {\n\t\tallowed: sandboxDecision.allowed,\n\t\trule: sandboxDecision.rule,\n\t\treason: sandboxDecision.reason,\n\t\tmode: \"enforce\",\n\t};\n}\n\n/**\n * Create the `beforeNetworkRequest` hook installed on the agent stream\n * function. The optional audit sink receives only sanitized metadata\n * (provider, api, model id, host, protocol, port, transport, purpose, mode,\n * rule, allowed/wouldDeny) and never headers, API keys, or request bodies.\n */\nexport function createBeforeProviderNetworkRequest(\n\tconfig: ProviderNetworkPolicyConfig,\n\tonAudit?: ProviderNetworkAuditSink,\n): BeforeProviderNetworkRequest {\n\treturn (request) => {\n\t\tconst decision = decideProviderNetworkAccess(config, request);\n\t\tonAudit?.({\n\t\t\tprovider: request.provider,\n\t\t\tapi: String(request.api),\n\t\t\tmodelId: request.modelId,\n\t\t\thost: request.host,\n\t\t\tprotocol: request.protocol,\n\t\t\tport: request.port,\n\t\t\ttransport: request.transport,\n\t\t\tpurpose: request.purpose,\n\t\t\tmode: decision.mode,\n\t\t\trule: decision.rule,\n\t\t\tallowed: decision.allowed,\n\t\t\twouldDeny: decision.wouldDeny,\n\t\t});\n\t\treturn decision;\n\t};\n}\n\n/**\n * Dependencies for the agent stream function factory.\n */\nexport interface AgentStreamFunctionDeps {\n\tmodelRegistry: ModelRegistry;\n\tsettingsManager: SettingsManager;\n\t/** When set, a sanitized preflight runs before auth resolution and is forwarded to `streamSimple`. */\n\tproviderNetworkBeforeRequest?: BeforeProviderNetworkRequest;\n}\n\n/**\n * Build the Agent `streamFn` used by `createAgentSession`.\n *\n * Contract preserved from the previous inline implementation:\n * - resolves API key/headers via the model registry,\n * - applies provider retry/timeout settings,\n * - merges provider attribution headers.\n *\n * Added behavior: when `providerNetworkBeforeRequest` is set, a sanitized\n * preflight runs BEFORE auth resolution. A deny returns a sanitized error\n * stream (no headers/API keys/bodies/prompts/responses are exposed) and skips\n * auth + provider invocation entirely. The hook is also forwarded to\n * `streamSimple` so provider-derived endpoints can be checked deeper.\n */\nexport function createAgentStreamFunction(deps: AgentStreamFunctionDeps): StreamFn {\n\tconst { modelRegistry, settingsManager, providerNetworkBeforeRequest } = deps;\n\treturn async (model, context, options) => {\n\t\tif (providerNetworkBeforeRequest) {\n\t\t\ttry {\n\t\t\t\tawait assertProviderNetworkRequestAllowed(\n\t\t\t\t\t{ model, purpose: \"chat\", transport: \"http\", source: \"model.baseUrl\" },\n\t\t\t\t\tproviderNetworkBeforeRequest,\n\t\t\t\t);\n\t\t\t} catch (error) {\n\t\t\t\treturn createProviderNetworkErrorStream(model, error);\n\t\t\t}\n\t\t}\n\t\tconst auth = await modelRegistry.getApiKeyAndHeaders(model);\n\t\tif (!auth.ok) {\n\t\t\tthrow new Error(auth.error);\n\t\t}\n\t\tconst providerRetrySettings = settingsManager.getProviderRetrySettings();\n\t\tconst httpIdleTimeoutMs = settingsManager.getHttpIdleTimeoutMs();\n\t\t// SDKs treat timeout=0 as 0ms (immediate timeout), not \"no timeout\".\n\t\t// Use max int32 to effectively disable the timeout.\n\t\tconst effectiveTimeoutMs = httpIdleTimeoutMs === 0 ? 2147483647 : httpIdleTimeoutMs;\n\t\tconst timeoutMs = options?.timeoutMs ?? providerRetrySettings.timeoutMs ?? effectiveTimeoutMs;\n\t\tconst websocketConnectTimeoutMs =\n\t\t\toptions?.websocketConnectTimeoutMs ?? settingsManager.getWebSocketConnectTimeoutMs();\n\t\treturn streamSimple(model, context, {\n\t\t\t...options,\n\t\t\tapiKey: auth.apiKey,\n\t\t\ttimeoutMs,\n\t\t\twebsocketConnectTimeoutMs,\n\t\t\tmaxRetries: options?.maxRetries ?? providerRetrySettings.maxRetries,\n\t\t\tmaxRetryDelayMs: options?.maxRetryDelayMs ?? providerRetrySettings.maxRetryDelayMs,\n\t\t\theaders: mergeProviderAttributionHeaders(\n\t\t\t\tmodel,\n\t\t\t\tsettingsManager,\n\t\t\t\toptions?.sessionId,\n\t\t\t\tauth.headers,\n\t\t\t\toptions?.headers,\n\t\t\t),\n\t\t\t...(providerNetworkBeforeRequest ? { beforeNetworkRequest: providerNetworkBeforeRequest } : {}),\n\t\t});\n\t};\n}\n\nexport async function createAgentSession(options: CreateAgentSessionOptions = {}): Promise<CreateAgentSessionResult> {\n\tconst cwd = resolvePath(options.cwd ?? options.sessionManager?.getCwd() ?? process.cwd());\n\tconst agentDir = options.agentDir ? resolvePath(options.agentDir) : getDefaultAgentDir();\n\tlet resourceLoader = options.resourceLoader;\n\n\t// Use provided or create AuthStorage and ModelRegistry\n\tconst authPath = options.agentDir ? join(agentDir, \"auth.json\") : undefined;\n\tconst modelsPath = options.agentDir ? join(agentDir, \"models.json\") : undefined;\n\tconst authStorage = options.authStorage ?? AuthStorage.create(authPath);\n\tconst modelRegistry = options.modelRegistry ?? ModelRegistry.create(authStorage, modelsPath);\n\n\tconst settingsManager = options.settingsManager ?? SettingsManager.create(cwd, agentDir);\n\tconst sessionManager = options.sessionManager ?? SessionManager.create(cwd, getDefaultSessionDir(cwd, agentDir));\n\n\tif (!resourceLoader) {\n\t\tresourceLoader = new DefaultResourceLoader({\n\t\t\tcwd,\n\t\t\tagentDir,\n\t\t\tsettingsManager,\n\t\t\textensionExecSandbox: options.extensionExecSandbox,\n\t\t\ttrialRuntime: options.packageTrialRuntime,\n\t\t});\n\t\tawait resourceLoader.reload();\n\t\ttime(\"resourceLoader.reload\");\n\t}\n\n\t// Check if session has existing data to restore\n\tconst existingSession = sessionManager.buildSessionContext();\n\tconst hasExistingSession = existingSession.messages.length > 0;\n\tconst hasThinkingEntry = sessionManager.getBranch().some((entry) => entry.type === \"thinking_level_change\");\n\n\tlet model = options.model;\n\tlet modelFallbackMessage: string | undefined;\n\n\t// If session has data, try to restore model from it\n\tif (!model && hasExistingSession && existingSession.model) {\n\t\tconst restoredModel = modelRegistry.find(existingSession.model.provider, existingSession.model.modelId);\n\t\tif (restoredModel && modelRegistry.hasConfiguredAuth(restoredModel)) {\n\t\t\tmodel = restoredModel;\n\t\t}\n\t\tif (!model) {\n\t\t\tmodelFallbackMessage = `Could not restore model ${existingSession.model.provider}/${existingSession.model.modelId}`;\n\t\t}\n\t}\n\n\t// If still no model, use findInitialModel (checks settings default, then provider defaults)\n\tif (!model) {\n\t\tconst result = await findInitialModel({\n\t\t\tscopedModels: [],\n\t\t\tisContinuing: hasExistingSession,\n\t\t\tdefaultProvider: settingsManager.getDefaultProvider(),\n\t\t\tdefaultModelId: settingsManager.getDefaultModel(),\n\t\t\tdefaultThinkingLevel: settingsManager.getDefaultThinkingLevel(),\n\t\t\tmodelRegistry,\n\t\t});\n\t\tmodel = result.model;\n\t\tif (!model) {\n\t\t\tmodelFallbackMessage = formatNoModelsAvailableMessage();\n\t\t} else if (modelFallbackMessage) {\n\t\t\tmodelFallbackMessage += `. Using ${model.provider}/${model.id}`;\n\t\t}\n\t}\n\n\tlet thinkingLevel = options.thinkingLevel;\n\n\t// If session has data, restore thinking level from it\n\tif (thinkingLevel === undefined && hasExistingSession) {\n\t\tthinkingLevel = hasThinkingEntry\n\t\t\t? (existingSession.thinkingLevel as ThinkingLevel)\n\t\t\t: (settingsManager.getDefaultThinkingLevel() ?? DEFAULT_THINKING_LEVEL);\n\t}\n\n\t// Fall back to settings default\n\tif (thinkingLevel === undefined) {\n\t\tthinkingLevel = settingsManager.getDefaultThinkingLevel() ?? DEFAULT_THINKING_LEVEL;\n\t}\n\n\t// Clamp to model capabilities\n\tif (!model) {\n\t\tthinkingLevel = \"off\";\n\t} else {\n\t\tthinkingLevel = clampThinkingLevel(model, thinkingLevel) as ThinkingLevel;\n\t}\n\n\tconst defaultActiveToolNames: ToolName[] = [\"read\", \"bash\", \"edit\", \"write\"];\n\tconst allowedToolNames = options.tools ?? (options.noTools === \"all\" ? [] : undefined);\n\tconst excludedToolNames = options.excludeTools;\n\tconst excludedToolNameSet = excludedToolNames ? new Set(excludedToolNames) : undefined;\n\tconst initialActiveToolNames: string[] = (\n\t\toptions.tools ? [...options.tools] : options.noTools ? [] : defaultActiveToolNames\n\t).filter((name) => !excludedToolNameSet?.has(name));\n\n\tlet agent: Agent;\n\n\t// Create convertToLlm wrapper that filters images if blockImages is enabled (defense-in-depth)\n\tconst convertToLlmWithBlockImages = (messages: AgentMessage[]): Message[] => {\n\t\tconst converted = convertToLlm(messages);\n\t\t// Check setting dynamically so mid-session changes take effect\n\t\tif (!settingsManager.getBlockImages()) {\n\t\t\treturn converted;\n\t\t}\n\t\t// Filter out ImageContent from all messages, replacing with text placeholder\n\t\treturn converted.map((msg) => {\n\t\t\tif (msg.role === \"user\" || msg.role === \"toolResult\") {\n\t\t\t\tconst content = msg.content;\n\t\t\t\tif (Array.isArray(content)) {\n\t\t\t\t\tconst hasImages = content.some((c) => c.type === \"image\");\n\t\t\t\t\tif (hasImages) {\n\t\t\t\t\t\tconst filteredContent = content\n\t\t\t\t\t\t\t.map((c) =>\n\t\t\t\t\t\t\t\tc.type === \"image\" ? { type: \"text\" as const, text: \"Image reading is disabled.\" } : c,\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t.filter(\n\t\t\t\t\t\t\t\t(c, i, arr) =>\n\t\t\t\t\t\t\t\t\t// Dedupe consecutive \"Image reading is disabled.\" texts\n\t\t\t\t\t\t\t\t\t!(\n\t\t\t\t\t\t\t\t\t\tc.type === \"text\" &&\n\t\t\t\t\t\t\t\t\t\tc.text === \"Image reading is disabled.\" &&\n\t\t\t\t\t\t\t\t\t\ti > 0 &&\n\t\t\t\t\t\t\t\t\t\tarr[i - 1].type === \"text\" &&\n\t\t\t\t\t\t\t\t\t\t(arr[i - 1] as { type: \"text\"; text: string }).text === \"Image reading is disabled.\"\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\treturn { ...msg, content: filteredContent };\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn msg;\n\t\t});\n\t};\n\n\tconst extensionRunnerRef: { current?: ExtensionRunner } = {};\n\tconst providerNetworkBeforeRequest = options.providerNetworkPolicy\n\t\t? createBeforeProviderNetworkRequest(options.providerNetworkPolicy, options.onProviderNetworkAudit)\n\t\t: undefined;\n\n\tagent = new Agent({\n\t\tinitialState: {\n\t\t\tsystemPrompt: \"\",\n\t\t\tmodel,\n\t\t\tthinkingLevel,\n\t\t\ttools: [],\n\t\t},\n\t\tconvertToLlm: convertToLlmWithBlockImages,\n\t\tstreamFn: createAgentStreamFunction({\n\t\t\tmodelRegistry,\n\t\t\tsettingsManager,\n\t\t\tproviderNetworkBeforeRequest,\n\t\t}),\n\t\tonPayload: async (payload, _model) => {\n\t\t\tconst runner = extensionRunnerRef.current;\n\t\t\tif (!runner?.hasHandlers(\"before_provider_request\")) {\n\t\t\t\treturn payload;\n\t\t\t}\n\t\t\treturn runner.emitBeforeProviderRequest(payload);\n\t\t},\n\t\tonResponse: async (response, _model) => {\n\t\t\tconst runner = extensionRunnerRef.current;\n\t\t\tif (!runner?.hasHandlers(\"after_provider_response\")) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tawait runner.emit({\n\t\t\t\ttype: \"after_provider_response\",\n\t\t\t\tstatus: response.status,\n\t\t\t\theaders: response.headers,\n\t\t\t});\n\t\t},\n\t\tsessionId: sessionManager.getSessionId(),\n\t\ttransformContext: async (messages) => {\n\t\t\tconst runner = extensionRunnerRef.current;\n\t\t\tif (!runner) return messages;\n\t\t\treturn runner.emitContext(messages);\n\t\t},\n\t\tsteeringMode: settingsManager.getSteeringMode(),\n\t\tfollowUpMode: settingsManager.getFollowUpMode(),\n\t\ttransport: settingsManager.getTransport(),\n\t\tthinkingBudgets: settingsManager.getThinkingBudgets(),\n\t\tmaxRetryDelayMs: settingsManager.getProviderRetrySettings().maxRetryDelayMs,\n\t});\n\n\t// Restore messages if session has existing data\n\tif (hasExistingSession) {\n\t\tagent.state.messages = existingSession.messages;\n\t\tif (!hasThinkingEntry) {\n\t\t\tsessionManager.appendThinkingLevelChange(thinkingLevel);\n\t\t}\n\t} else {\n\t\t// Save initial model and thinking level for new sessions so they can be restored on resume\n\t\tif (model) {\n\t\t\tsessionManager.appendModelChange(model.provider, model.id);\n\t\t}\n\t\tsessionManager.appendThinkingLevelChange(thinkingLevel);\n\t}\n\n\tconst session = new AgentSession({\n\t\tagent,\n\t\tsessionManager,\n\t\tsettingsManager,\n\t\tcwd,\n\t\tscopedModels: options.scopedModels,\n\t\tresourceLoader,\n\t\tcustomTools: options.customTools,\n\t\tmodelRegistry,\n\t\tinitialActiveToolNames,\n\t\tallowedToolNames,\n\t\texcludedToolNames,\n\t\textensionRunnerRef,\n\t\tloadoutAccessPolicy: options.loadoutAccessPolicy,\n\t\tbashSandboxPreflight: options.bashSandboxPreflight,\n\t\tsessionStartEvent: options.sessionStartEvent,\n\t});\n\tconst extensionsResult = resourceLoader.getExtensions();\n\n\treturn {\n\t\tsession,\n\t\textensionsResult,\n\t\tmodelFallbackMessage,\n\t};\n}\n"]}

package/dist/core/semantic-cache-policy.d.ts

@@ -0,0 +1,45 @@
+export declare const ALLOWED_SEMANTIC_CACHE_TASK_CLASSES: readonly ["faq", "read_only_analysis", "documentation_lookup", "code_explanation", "conceptual_explanation"];
+export declare const FORBIDDEN_SEMANTIC_CACHE_TASK_CLASS_TERMS: readonly ["mutation", "mutating", "write", "edit", "create", "update", "delete", "deploy", "deployment", "release", "publish", "auth", "authentication", "authorization", "security", "secret", "credential", "token", "time", "clock", "date", "external", "network", "database", "stateful"];
+export declare const FORBIDDEN_SEMANTIC_CACHE_ACTION_TERMS: readonly ["mutation", "mutate", "write", "edit", "create", "update", "delete", "patch", "modify", "commit", "merge", "rebase", "push", "deploy", "release", "publish", "login", "logout", "auth", "authorize", "token", "secret", "credential", "security", "scan", "audit", "time", "now", "today", "current", "latest", "fetch", "request", "web", "network", "api", "database", "external"];
+export type SemanticCacheTaskClass = (typeof ALLOWED_SEMANTIC_CACHE_TASK_CLASSES)[number];
+export type SemanticCacheResponseKind = "final" | "draft" | "tool_call" | "tool_result";
+export interface SemanticCacheContextAttributes {
+    branch?: string;
+    worktree?: string;
+    repoSha?: string;
+}
+export interface SemanticCacheDependencyFlags {
+    mutation?: boolean;
+    deploy?: boolean;
+    auth?: boolean;
+    security?: boolean;
+    time?: boolean;
+    externalState?: boolean;
+}
+export interface SemanticCacheCandidate {
+    enabled?: boolean;
+    responseKind?: SemanticCacheResponseKind;
+    responseReadOnly?: boolean;
+    pendingToolCallCount?: number;
+    taskClass?: string;
+    action?: string;
+    actions?: readonly string[];
+    dependencies?: SemanticCacheDependencyFlags;
+    cacheAttributes?: SemanticCacheContextAttributes;
+    currentAttributes?: SemanticCacheContextAttributes;
+}
+export type SemanticCachePolicyReason = "eligible" | "disabled" | "response.not_final" | "response.not_read_only" | "tool_calls.unknown" | "tool_calls.pending" | "dependence.mutation" | "dependence.deploy" | "dependence.auth" | "dependence.security" | "dependence.time" | "dependence.external_state" | "task_class.missing" | "task_class.forbidden_term" | "task_class.not_allowed" | "action.forbidden_term" | SemanticCacheAttributePolicyReason;
+export type SemanticCacheAttributePolicyReason = "attributes.ok" | "attributes.missing_branch" | "attributes.missing_worktree" | "attributes.missing_repo_sha" | "attributes.missing_current_branch" | "attributes.missing_current_worktree" | "attributes.missing_current_repo_sha" | "attributes.branch_mismatch" | "attributes.worktree_mismatch" | "attributes.repo_sha_mismatch";
+export interface SemanticCachePolicyDecision {
+    eligible: boolean;
+    reason: SemanticCachePolicyReason;
+    detail?: string;
+}
+export interface SemanticCacheAttributeValidation {
+    valid: boolean;
+    reason: SemanticCacheAttributePolicyReason;
+    attribute?: keyof SemanticCacheContextAttributes;
+}
+export declare function classifySemanticCacheEligibility(candidate: SemanticCacheCandidate): SemanticCachePolicyDecision;
+export declare function validateSemanticCacheAttributes(cacheAttributes: SemanticCacheContextAttributes | undefined, currentAttributes: SemanticCacheContextAttributes | undefined): SemanticCacheAttributeValidation;
+//# sourceMappingURL=semantic-cache-policy.d.ts.map

package/dist/core/semantic-cache-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semantic-cache-policy.d.ts","sourceRoot":"","sources":["../../src/core/semantic-cache-policy.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mCAAmC,8GAMtC,CAAC;AAEX,eAAO,MAAM,yCAAyC,gSA0B5C,CAAC;AAEX,eAAO,MAAM,qCAAqC,gYAuCxC,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,mCAAmC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1F,MAAM,MAAM,yBAAyB,GAAG,OAAO,GAAG,OAAO,GAAG,WAAW,GAAG,aAAa,CAAC;AAExF,MAAM,WAAW,8BAA8B;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,yBAAyB,CAAC;IACzC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,YAAY,CAAC,EAAE,4BAA4B,CAAC;IAC5C,eAAe,CAAC,EAAE,8BAA8B,CAAC;IACjD,iBAAiB,CAAC,EAAE,8BAA8B,CAAC;CACnD;AAED,MAAM,MAAM,yBAAyB,GAClC,UAAU,GACV,UAAU,GACV,oBAAoB,GACpB,wBAAwB,GACxB,oBAAoB,GACpB,oBAAoB,GACpB,qBAAqB,GACrB,mBAAmB,GACnB,iBAAiB,GACjB,qBAAqB,GACrB,iBAAiB,GACjB,2BAA2B,GAC3B,oBAAoB,GACpB,2BAA2B,GAC3B,wBAAwB,GACxB,uBAAuB,GACvB,kCAAkC,CAAC;AAEtC,MAAM,MAAM,kCAAkC,GAC3C,eAAe,GACf,2BAA2B,GAC3B,6BAA6B,GAC7B,6BAA6B,GAC7B,mCAAmC,GACnC,qCAAqC,GACrC,qCAAqC,GACrC,4BAA4B,GAC5B,8BAA8B,GAC9B,8BAA8B,CAAC;AAElC,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,yBAAyB,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gCAAgC;IAChD,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,kCAAkC,CAAC;IAC3C,SAAS,CAAC,EAAE,MAAM,8BAA8B,CAAC;CACjD;AAwBD,wBAAgB,gCAAgC,CAAC,SAAS,EAAE,sBAAsB,GAAG,2BAA2B,CAkD/G;AAED,wBAAgB,+BAA+B,CAC9C,eAAe,EAAE,8BAA8B,GAAG,SAAS,EAC3D,iBAAiB,EAAE,8BAA8B,GAAG,SAAS,GAC3D,gCAAgC,CAsBlC","sourcesContent":["export const ALLOWED_SEMANTIC_CACHE_TASK_CLASSES = [\n\t\"faq\",\n\t\"read_only_analysis\",\n\t\"documentation_lookup\",\n\t\"code_explanation\",\n\t\"conceptual_explanation\",\n] as const;\n\nexport const FORBIDDEN_SEMANTIC_CACHE_TASK_CLASS_TERMS = [\n\t\"mutation\",\n\t\"mutating\",\n\t\"write\",\n\t\"edit\",\n\t\"create\",\n\t\"update\",\n\t\"delete\",\n\t\"deploy\",\n\t\"deployment\",\n\t\"release\",\n\t\"publish\",\n\t\"auth\",\n\t\"authentication\",\n\t\"authorization\",\n\t\"security\",\n\t\"secret\",\n\t\"credential\",\n\t\"token\",\n\t\"time\",\n\t\"clock\",\n\t\"date\",\n\t\"external\",\n\t\"network\",\n\t\"database\",\n\t\"stateful\",\n] as const;\n\nexport const FORBIDDEN_SEMANTIC_CACHE_ACTION_TERMS = [\n\t\"mutation\",\n\t\"mutate\",\n\t\"write\",\n\t\"edit\",\n\t\"create\",\n\t\"update\",\n\t\"delete\",\n\t\"patch\",\n\t\"modify\",\n\t\"commit\",\n\t\"merge\",\n\t\"rebase\",\n\t\"push\",\n\t\"deploy\",\n\t\"release\",\n\t\"publish\",\n\t\"login\",\n\t\"logout\",\n\t\"auth\",\n\t\"authorize\",\n\t\"token\",\n\t\"secret\",\n\t\"credential\",\n\t\"security\",\n\t\"scan\",\n\t\"audit\",\n\t\"time\",\n\t\"now\",\n\t\"today\",\n\t\"current\",\n\t\"latest\",\n\t\"fetch\",\n\t\"request\",\n\t\"web\",\n\t\"network\",\n\t\"api\",\n\t\"database\",\n\t\"external\",\n] as const;\n\nexport type SemanticCacheTaskClass = (typeof ALLOWED_SEMANTIC_CACHE_TASK_CLASSES)[number];\n\nexport type SemanticCacheResponseKind = \"final\" | \"draft\" | \"tool_call\" | \"tool_result\";\n\nexport interface SemanticCacheContextAttributes {\n\tbranch?: string;\n\tworktree?: string;\n\trepoSha?: string;\n}\n\nexport interface SemanticCacheDependencyFlags {\n\tmutation?: boolean;\n\tdeploy?: boolean;\n\tauth?: boolean;\n\tsecurity?: boolean;\n\ttime?: boolean;\n\texternalState?: boolean;\n}\n\nexport interface SemanticCacheCandidate {\n\tenabled?: boolean;\n\tresponseKind?: SemanticCacheResponseKind;\n\tresponseReadOnly?: boolean;\n\tpendingToolCallCount?: number;\n\ttaskClass?: string;\n\taction?: string;\n\tactions?: readonly string[];\n\tdependencies?: SemanticCacheDependencyFlags;\n\tcacheAttributes?: SemanticCacheContextAttributes;\n\tcurrentAttributes?: SemanticCacheContextAttributes;\n}\n\nexport type SemanticCachePolicyReason =\n\t| \"eligible\"\n\t| \"disabled\"\n\t| \"response.not_final\"\n\t| \"response.not_read_only\"\n\t| \"tool_calls.unknown\"\n\t| \"tool_calls.pending\"\n\t| \"dependence.mutation\"\n\t| \"dependence.deploy\"\n\t| \"dependence.auth\"\n\t| \"dependence.security\"\n\t| \"dependence.time\"\n\t| \"dependence.external_state\"\n\t| \"task_class.missing\"\n\t| \"task_class.forbidden_term\"\n\t| \"task_class.not_allowed\"\n\t| \"action.forbidden_term\"\n\t| SemanticCacheAttributePolicyReason;\n\nexport type SemanticCacheAttributePolicyReason =\n\t| \"attributes.ok\"\n\t| \"attributes.missing_branch\"\n\t| \"attributes.missing_worktree\"\n\t| \"attributes.missing_repo_sha\"\n\t| \"attributes.missing_current_branch\"\n\t| \"attributes.missing_current_worktree\"\n\t| \"attributes.missing_current_repo_sha\"\n\t| \"attributes.branch_mismatch\"\n\t| \"attributes.worktree_mismatch\"\n\t| \"attributes.repo_sha_mismatch\";\n\nexport interface SemanticCachePolicyDecision {\n\teligible: boolean;\n\treason: SemanticCachePolicyReason;\n\tdetail?: string;\n}\n\nexport interface SemanticCacheAttributeValidation {\n\tvalid: boolean;\n\treason: SemanticCacheAttributePolicyReason;\n\tattribute?: keyof SemanticCacheContextAttributes;\n}\n\ntype RequiredAttribute = keyof SemanticCacheContextAttributes;\n\nconst REQUIRED_ATTRIBUTES: readonly RequiredAttribute[] = [\"branch\", \"worktree\", \"repoSha\"];\n\nconst MISSING_CACHE_ATTRIBUTE_REASONS: Record<RequiredAttribute, SemanticCacheAttributePolicyReason> = {\n\tbranch: \"attributes.missing_branch\",\n\tworktree: \"attributes.missing_worktree\",\n\trepoSha: \"attributes.missing_repo_sha\",\n};\n\nconst MISSING_CURRENT_ATTRIBUTE_REASONS: Record<RequiredAttribute, SemanticCacheAttributePolicyReason> = {\n\tbranch: \"attributes.missing_current_branch\",\n\tworktree: \"attributes.missing_current_worktree\",\n\trepoSha: \"attributes.missing_current_repo_sha\",\n};\n\nconst ATTRIBUTE_MISMATCH_REASONS: Record<RequiredAttribute, SemanticCacheAttributePolicyReason> = {\n\tbranch: \"attributes.branch_mismatch\",\n\tworktree: \"attributes.worktree_mismatch\",\n\trepoSha: \"attributes.repo_sha_mismatch\",\n};\n\nexport function classifySemanticCacheEligibility(candidate: SemanticCacheCandidate): SemanticCachePolicyDecision {\n\tif (candidate.enabled !== true) {\n\t\treturn deny(\"disabled\");\n\t}\n\n\tif (candidate.responseKind !== \"final\") {\n\t\treturn deny(\"response.not_final\");\n\t}\n\n\tif (candidate.responseReadOnly !== true) {\n\t\treturn deny(\"response.not_read_only\");\n\t}\n\n\tif (candidate.pendingToolCallCount === undefined) {\n\t\treturn deny(\"tool_calls.unknown\");\n\t}\n\n\tif (candidate.pendingToolCallCount !== 0) {\n\t\treturn deny(\"tool_calls.pending\");\n\t}\n\n\tconst dependencyReason = classifyForbiddenDependence(candidate.dependencies);\n\tif (dependencyReason !== undefined) {\n\t\treturn deny(dependencyReason);\n\t}\n\n\tif (candidate.taskClass === undefined || candidate.taskClass.trim().length === 0) {\n\t\treturn deny(\"task_class.missing\");\n\t}\n\n\tif (containsForbiddenTerm(candidate.taskClass, FORBIDDEN_SEMANTIC_CACHE_TASK_CLASS_TERMS)) {\n\t\treturn deny(\"task_class.forbidden_term\", candidate.taskClass);\n\t}\n\n\tconst normalizedTaskClass = normalizeTaskClass(candidate.taskClass);\n\tif (!isAllowedTaskClass(normalizedTaskClass)) {\n\t\treturn deny(\"task_class.not_allowed\", candidate.taskClass);\n\t}\n\n\tconst actions = collectActions(candidate);\n\tif (actions.some((action) => containsForbiddenTerm(action, FORBIDDEN_SEMANTIC_CACHE_ACTION_TERMS))) {\n\t\treturn deny(\"action.forbidden_term\", actions.join(\", \"));\n\t}\n\n\tconst attributeValidation = validateSemanticCacheAttributes(candidate.cacheAttributes, candidate.currentAttributes);\n\tif (!attributeValidation.valid) {\n\t\treturn deny(attributeValidation.reason, attributeValidation.attribute);\n\t}\n\n\treturn { eligible: true, reason: \"eligible\" };\n}\n\nexport function validateSemanticCacheAttributes(\n\tcacheAttributes: SemanticCacheContextAttributes | undefined,\n\tcurrentAttributes: SemanticCacheContextAttributes | undefined,\n): SemanticCacheAttributeValidation {\n\tfor (const attribute of REQUIRED_ATTRIBUTES) {\n\t\tif (!hasUsableAttribute(cacheAttributes, attribute)) {\n\t\t\treturn { valid: false, reason: MISSING_CACHE_ATTRIBUTE_REASONS[attribute], attribute };\n\t\t}\n\t}\n\n\tfor (const attribute of REQUIRED_ATTRIBUTES) {\n\t\tif (!hasUsableAttribute(currentAttributes, attribute)) {\n\t\t\treturn { valid: false, reason: MISSING_CURRENT_ATTRIBUTE_REASONS[attribute], attribute };\n\t\t}\n\t}\n\n\tfor (const attribute of REQUIRED_ATTRIBUTES) {\n\t\tconst cacheAttribute = cacheAttributes?.[attribute];\n\t\tconst currentAttribute = currentAttributes?.[attribute];\n\t\tif (cacheAttribute !== currentAttribute) {\n\t\t\treturn { valid: false, reason: ATTRIBUTE_MISMATCH_REASONS[attribute], attribute };\n\t\t}\n\t}\n\n\treturn { valid: true, reason: \"attributes.ok\" };\n}\n\nfunction classifyForbiddenDependence(\n\tdependencies: SemanticCacheDependencyFlags | undefined,\n): SemanticCachePolicyReason | undefined {\n\tif (dependencies?.mutation === true) {\n\t\treturn \"dependence.mutation\";\n\t}\n\tif (dependencies?.deploy === true) {\n\t\treturn \"dependence.deploy\";\n\t}\n\tif (dependencies?.auth === true) {\n\t\treturn \"dependence.auth\";\n\t}\n\tif (dependencies?.security === true) {\n\t\treturn \"dependence.security\";\n\t}\n\tif (dependencies?.time === true) {\n\t\treturn \"dependence.time\";\n\t}\n\tif (dependencies?.externalState === true) {\n\t\treturn \"dependence.external_state\";\n\t}\n\treturn undefined;\n}\n\nfunction collectActions(candidate: SemanticCacheCandidate): readonly string[] {\n\tconst actions: string[] = [];\n\tif (candidate.action !== undefined) {\n\t\tactions.push(candidate.action);\n\t}\n\tif (candidate.actions !== undefined) {\n\t\tactions.push(...candidate.actions);\n\t}\n\treturn actions;\n}\n\nfunction isAllowedTaskClass(taskClass: string): taskClass is SemanticCacheTaskClass {\n\treturn ALLOWED_SEMANTIC_CACHE_TASK_CLASSES.some((allowedTaskClass) => allowedTaskClass === taskClass);\n}\n\nfunction containsForbiddenTerm(text: string, terms: readonly string[]): boolean {\n\tconst textTerms = splitSearchTerms(text);\n\tconst textTermSet = new Set(textTerms);\n\tconst normalizedText = ` ${textTerms.join(\" \")} `;\n\n\treturn terms.some((term) => {\n\t\tconst normalizedTerm = splitSearchTerms(term).join(\" \");\n\t\tif (normalizedTerm.length === 0) {\n\t\t\treturn false;\n\t\t}\n\t\tif (normalizedTerm.includes(\" \")) {\n\t\t\treturn normalizedText.includes(` ${normalizedTerm} `);\n\t\t}\n\t\treturn textTermSet.has(normalizedTerm);\n\t});\n}\n\nfunction normalizeTaskClass(taskClass: string): string {\n\treturn taskClass\n\t\t.trim()\n\t\t.toLowerCase()\n\t\t.replace(/[^a-z0-9]+/g, \"_\")\n\t\t.replace(/^_+|_+$/g, \"\");\n}\n\nfunction splitSearchTerms(text: string): string[] {\n\treturn text\n\t\t.trim()\n\t\t.toLowerCase()\n\t\t.split(/[^a-z0-9]+/g)\n\t\t.filter((term) => term.length > 0);\n}\n\nfunction hasUsableAttribute(\n\tattributes: SemanticCacheContextAttributes | undefined,\n\tattribute: RequiredAttribute,\n): boolean {\n\treturn typeof attributes?.[attribute] === \"string\" && attributes[attribute].trim().length > 0;\n}\n\nfunction deny(\n\treason: SemanticCachePolicyReason,\n\tdetail?: string | keyof SemanticCacheContextAttributes,\n): SemanticCachePolicyDecision {\n\treturn detail === undefined ? { eligible: false, reason } : { eligible: false, reason, detail };\n}\n"]}

package/dist/core/semantic-cache-policy.js

@@ -0,0 +1,220 @@
+export const ALLOWED_SEMANTIC_CACHE_TASK_CLASSES = [
+    "faq",
+    "read_only_analysis",
+    "documentation_lookup",
+    "code_explanation",
+    "conceptual_explanation",
+];
+export const FORBIDDEN_SEMANTIC_CACHE_TASK_CLASS_TERMS = [
+    "mutation",
+    "mutating",
+    "write",
+    "edit",
+    "create",
+    "update",
+    "delete",
+    "deploy",
+    "deployment",
+    "release",
+    "publish",
+    "auth",
+    "authentication",
+    "authorization",
+    "security",
+    "secret",
+    "credential",
+    "token",
+    "time",
+    "clock",
+    "date",
+    "external",
+    "network",
+    "database",
+    "stateful",
+];
+export const FORBIDDEN_SEMANTIC_CACHE_ACTION_TERMS = [
+    "mutation",
+    "mutate",
+    "write",
+    "edit",
+    "create",
+    "update",
+    "delete",
+    "patch",
+    "modify",
+    "commit",
+    "merge",
+    "rebase",
+    "push",
+    "deploy",
+    "release",
+    "publish",
+    "login",
+    "logout",
+    "auth",
+    "authorize",
+    "token",
+    "secret",
+    "credential",
+    "security",
+    "scan",
+    "audit",
+    "time",
+    "now",
+    "today",
+    "current",
+    "latest",
+    "fetch",
+    "request",
+    "web",
+    "network",
+    "api",
+    "database",
+    "external",
+];
+const REQUIRED_ATTRIBUTES = ["branch", "worktree", "repoSha"];
+const MISSING_CACHE_ATTRIBUTE_REASONS = {
+    branch: "attributes.missing_branch",
+    worktree: "attributes.missing_worktree",
+    repoSha: "attributes.missing_repo_sha",
+};
+const MISSING_CURRENT_ATTRIBUTE_REASONS = {
+    branch: "attributes.missing_current_branch",
+    worktree: "attributes.missing_current_worktree",
+    repoSha: "attributes.missing_current_repo_sha",
+};
+const ATTRIBUTE_MISMATCH_REASONS = {
+    branch: "attributes.branch_mismatch",
+    worktree: "attributes.worktree_mismatch",
+    repoSha: "attributes.repo_sha_mismatch",
+};
+export function classifySemanticCacheEligibility(candidate) {
+    if (candidate.enabled !== true) {
+        return deny("disabled");
+    }
+    if (candidate.responseKind !== "final") {
+        return deny("response.not_final");
+    }
+    if (candidate.responseReadOnly !== true) {
+        return deny("response.not_read_only");
+    }
+    if (candidate.pendingToolCallCount === undefined) {
+        return deny("tool_calls.unknown");
+    }
+    if (candidate.pendingToolCallCount !== 0) {
+        return deny("tool_calls.pending");
+    }
+    const dependencyReason = classifyForbiddenDependence(candidate.dependencies);
+    if (dependencyReason !== undefined) {
+        return deny(dependencyReason);
+    }
+    if (candidate.taskClass === undefined || candidate.taskClass.trim().length === 0) {
+        return deny("task_class.missing");
+    }
+    if (containsForbiddenTerm(candidate.taskClass, FORBIDDEN_SEMANTIC_CACHE_TASK_CLASS_TERMS)) {
+        return deny("task_class.forbidden_term", candidate.taskClass);
+    }
+    const normalizedTaskClass = normalizeTaskClass(candidate.taskClass);
+    if (!isAllowedTaskClass(normalizedTaskClass)) {
+        return deny("task_class.not_allowed", candidate.taskClass);
+    }
+    const actions = collectActions(candidate);
+    if (actions.some((action) => containsForbiddenTerm(action, FORBIDDEN_SEMANTIC_CACHE_ACTION_TERMS))) {
+        return deny("action.forbidden_term", actions.join(", "));
+    }
+    const attributeValidation = validateSemanticCacheAttributes(candidate.cacheAttributes, candidate.currentAttributes);
+    if (!attributeValidation.valid) {
+        return deny(attributeValidation.reason, attributeValidation.attribute);
+    }
+    return { eligible: true, reason: "eligible" };
+}
+export function validateSemanticCacheAttributes(cacheAttributes, currentAttributes) {
+    for (const attribute of REQUIRED_ATTRIBUTES) {
+        if (!hasUsableAttribute(cacheAttributes, attribute)) {
+            return { valid: false, reason: MISSING_CACHE_ATTRIBUTE_REASONS[attribute], attribute };
+        }
+    }
+    for (const attribute of REQUIRED_ATTRIBUTES) {
+        if (!hasUsableAttribute(currentAttributes, attribute)) {
+            return { valid: false, reason: MISSING_CURRENT_ATTRIBUTE_REASONS[attribute], attribute };
+        }
+    }
+    for (const attribute of REQUIRED_ATTRIBUTES) {
+        const cacheAttribute = cacheAttributes?.[attribute];
+        const currentAttribute = currentAttributes?.[attribute];
+        if (cacheAttribute !== currentAttribute) {
+            return { valid: false, reason: ATTRIBUTE_MISMATCH_REASONS[attribute], attribute };
+        }
+    }
+    return { valid: true, reason: "attributes.ok" };
+}
+function classifyForbiddenDependence(dependencies) {
+    if (dependencies?.mutation === true) {
+        return "dependence.mutation";
+    }
+    if (dependencies?.deploy === true) {
+        return "dependence.deploy";
+    }
+    if (dependencies?.auth === true) {
+        return "dependence.auth";
+    }
+    if (dependencies?.security === true) {
+        return "dependence.security";
+    }
+    if (dependencies?.time === true) {
+        return "dependence.time";
+    }
+    if (dependencies?.externalState === true) {
+        return "dependence.external_state";
+    }
+    return undefined;
+}
+function collectActions(candidate) {
+    const actions = [];
+    if (candidate.action !== undefined) {
+        actions.push(candidate.action);
+    }
+    if (candidate.actions !== undefined) {
+        actions.push(...candidate.actions);
+    }
+    return actions;
+}
+function isAllowedTaskClass(taskClass) {
+    return ALLOWED_SEMANTIC_CACHE_TASK_CLASSES.some((allowedTaskClass) => allowedTaskClass === taskClass);
+}
+function containsForbiddenTerm(text, terms) {
+    const textTerms = splitSearchTerms(text);
+    const textTermSet = new Set(textTerms);
+    const normalizedText = ` ${textTerms.join(" ")} `;
+    return terms.some((term) => {
+        const normalizedTerm = splitSearchTerms(term).join(" ");
+        if (normalizedTerm.length === 0) {
+            return false;
+        }
+        if (normalizedTerm.includes(" ")) {
+            return normalizedText.includes(` ${normalizedTerm} `);
+        }
+        return textTermSet.has(normalizedTerm);
+    });
+}
+function normalizeTaskClass(taskClass) {
+    return taskClass
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "_")
+        .replace(/^_+|_+$/g, "");
+}
+function splitSearchTerms(text) {
+    return text
+        .trim()
+        .toLowerCase()
+        .split(/[^a-z0-9]+/g)
+        .filter((term) => term.length > 0);
+}
+function hasUsableAttribute(attributes, attribute) {
+    return typeof attributes?.[attribute] === "string" && attributes[attribute].trim().length > 0;
+}
+function deny(reason, detail) {
+    return detail === undefined ? { eligible: false, reason } : { eligible: false, reason, detail };
+}
+//# sourceMappingURL=semantic-cache-policy.js.map

package/dist/core/semantic-cache-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semantic-cache-policy.js","sourceRoot":"","sources":["../../src/core/semantic-cache-policy.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mCAAmC,GAAG;IAClD,KAAK;IACL,oBAAoB;IACpB,sBAAsB;IACtB,kBAAkB;IAClB,wBAAwB;CACf,CAAC;AAEX,MAAM,CAAC,MAAM,yCAAyC,GAAG;IACxD,UAAU;IACV,UAAU;IACV,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,SAAS;IACT,SAAS;IACT,MAAM;IACN,gBAAgB;IAChB,eAAe;IACf,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,UAAU;IACV,SAAS;IACT,UAAU;IACV,UAAU;CACD,CAAC;AAEX,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACpD,UAAU;IACV,QAAQ;IACR,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;IACT,SAAS;IACT,OAAO;IACP,QAAQ;IACR,MAAM;IACN,WAAW;IACX,OAAO;IACP,QAAQ;IACR,YAAY;IACZ,UAAU;IACV,MAAM;IACN,OAAO;IACP,MAAM;IACN,KAAK;IACL,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;IACP,SAAS;IACT,KAAK;IACL,SAAS;IACT,KAAK;IACL,UAAU;IACV,UAAU;CACD,CAAC;AA+EX,MAAM,mBAAmB,GAAiC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;AAE5F,MAAM,+BAA+B,GAAkE;IACtG,MAAM,EAAE,2BAA2B;IACnC,QAAQ,EAAE,6BAA6B;IACvC,OAAO,EAAE,6BAA6B;CACtC,CAAC;AAEF,MAAM,iCAAiC,GAAkE;IACxG,MAAM,EAAE,mCAAmC;IAC3C,QAAQ,EAAE,qCAAqC;IAC/C,OAAO,EAAE,qCAAqC;CAC9C,CAAC;AAEF,MAAM,0BAA0B,GAAkE;IACjG,MAAM,EAAE,4BAA4B;IACpC,QAAQ,EAAE,8BAA8B;IACxC,OAAO,EAAE,8BAA8B;CACvC,CAAC;AAEF,MAAM,UAAU,gCAAgC,CAAC,SAAiC,EAA+B;IAChH,IAAI,SAAS,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,SAAS,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,SAAS,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,SAAS,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,SAAS,CAAC,oBAAoB,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC7E,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,qBAAqB,CAAC,SAAS,CAAC,SAAS,EAAE,yCAAyC,CAAC,EAAE,CAAC;QAC3F,OAAO,IAAI,CAAC,2BAA2B,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACpE,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,wBAAwB,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC,EAAE,CAAC;QACpG,OAAO,IAAI,CAAC,uBAAuB,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,mBAAmB,GAAG,+BAA+B,CAAC,SAAS,CAAC,eAAe,EAAE,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACpH,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAAA,CAC9C;AAED,MAAM,UAAU,+BAA+B,CAC9C,eAA2D,EAC3D,iBAA6D,EAC1B;IACnC,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;QAC7C,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,SAAS,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;QACxF,CAAC;IACF,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;QAC7C,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,CAAC;YACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;QAC1F,CAAC;IACF,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,eAAe,EAAE,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,gBAAgB,GAAG,iBAAiB,EAAE,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,cAAc,KAAK,gBAAgB,EAAE,CAAC;YACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;QACnF,CAAC;IACF,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AAAA,CAChD;AAED,SAAS,2BAA2B,CACnC,YAAsD,EACd;IACxC,IAAI,YAAY,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO,qBAAqB,CAAC;IAC9B,CAAC;IACD,IAAI,YAAY,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;QACnC,OAAO,mBAAmB,CAAC;IAC5B,CAAC;IACD,IAAI,YAAY,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;QACjC,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IACD,IAAI,YAAY,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO,qBAAqB,CAAC;IAC9B,CAAC;IACD,IAAI,YAAY,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;QACjC,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IACD,IAAI,YAAY,EAAE,aAAa,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,2BAA2B,CAAC;IACpC,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,cAAc,CAAC,SAAiC,EAAqB;IAC7E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,SAAS,kBAAkB,CAAC,SAAiB,EAAuC;IACnF,OAAO,mCAAmC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC;AAAA,CACtG;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,KAAwB,EAAW;IAC/E,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAElD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,cAAc,CAAC,QAAQ,CAAC,IAAI,cAAc,GAAG,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAAA,CACvC,CAAC,CAAC;AAAA,CACH;AAED,SAAS,kBAAkB,CAAC,SAAiB,EAAU;IACtD,OAAO,SAAS;SACd,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAAA,CAC1B;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAY;IACjD,OAAO,IAAI;SACT,IAAI,EAAE;SACN,WAAW,EAAE;SACb,KAAK,CAAC,aAAa,CAAC;SACpB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAAA,CACpC;AAED,SAAS,kBAAkB,CAC1B,UAAsD,EACtD,SAA4B,EAClB;IACV,OAAO,OAAO,UAAU,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAAA,CAC9F;AAED,SAAS,IAAI,CACZ,MAAiC,EACjC,MAAsD,EACxB;IAC9B,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAAA,CAChG","sourcesContent":["export const ALLOWED_SEMANTIC_CACHE_TASK_CLASSES = [\n\t\"faq\",\n\t\"read_only_analysis\",\n\t\"documentation_lookup\",\n\t\"code_explanation\",\n\t\"conceptual_explanation\",\n] as const;\n\nexport const FORBIDDEN_SEMANTIC_CACHE_TASK_CLASS_TERMS = [\n\t\"mutation\",\n\t\"mutating\",\n\t\"write\",\n\t\"edit\",\n\t\"create\",\n\t\"update\",\n\t\"delete\",\n\t\"deploy\",\n\t\"deployment\",\n\t\"release\",\n\t\"publish\",\n\t\"auth\",\n\t\"authentication\",\n\t\"authorization\",\n\t\"security\",\n\t\"secret\",\n\t\"credential\",\n\t\"token\",\n\t\"time\",\n\t\"clock\",\n\t\"date\",\n\t\"external\",\n\t\"network\",\n\t\"database\",\n\t\"stateful\",\n] as const;\n\nexport const FORBIDDEN_SEMANTIC_CACHE_ACTION_TERMS = [\n\t\"mutation\",\n\t\"mutate\",\n\t\"write\",\n\t\"edit\",\n\t\"create\",\n\t\"update\",\n\t\"delete\",\n\t\"patch\",\n\t\"modify\",\n\t\"commit\",\n\t\"merge\",\n\t\"rebase\",\n\t\"push\",\n\t\"deploy\",\n\t\"release\",\n\t\"publish\",\n\t\"login\",\n\t\"logout\",\n\t\"auth\",\n\t\"authorize\",\n\t\"token\",\n\t\"secret\",\n\t\"credential\",\n\t\"security\",\n\t\"scan\",\n\t\"audit\",\n\t\"time\",\n\t\"now\",\n\t\"today\",\n\t\"current\",\n\t\"latest\",\n\t\"fetch\",\n\t\"request\",\n\t\"web\",\n\t\"network\",\n\t\"api\",\n\t\"database\",\n\t\"external\",\n] as const;\n\nexport type SemanticCacheTaskClass = (typeof ALLOWED_SEMANTIC_CACHE_TASK_CLASSES)[number];\n\nexport type SemanticCacheResponseKind = \"final\" | \"draft\" | \"tool_call\" | \"tool_result\";\n\nexport interface SemanticCacheContextAttributes {\n\tbranch?: string;\n\tworktree?: string;\n\trepoSha?: string;\n}\n\nexport interface SemanticCacheDependencyFlags {\n\tmutation?: boolean;\n\tdeploy?: boolean;\n\tauth?: boolean;\n\tsecurity?: boolean;\n\ttime?: boolean;\n\texternalState?: boolean;\n}\n\nexport interface SemanticCacheCandidate {\n\tenabled?: boolean;\n\tresponseKind?: SemanticCacheResponseKind;\n\tresponseReadOnly?: boolean;\n\tpendingToolCallCount?: number;\n\ttaskClass?: string;\n\taction?: string;\n\tactions?: readonly string[];\n\tdependencies?: SemanticCacheDependencyFlags;\n\tcacheAttributes?: SemanticCacheContextAttributes;\n\tcurrentAttributes?: SemanticCacheContextAttributes;\n}\n\nexport type SemanticCachePolicyReason =\n\t| \"eligible\"\n\t| \"disabled\"\n\t| \"response.not_final\"\n\t| \"response.not_read_only\"\n\t| \"tool_calls.unknown\"\n\t| \"tool_calls.pending\"\n\t| \"dependence.mutation\"\n\t| \"dependence.deploy\"\n\t| \"dependence.auth\"\n\t| \"dependence.security\"\n\t| \"dependence.time\"\n\t| \"dependence.external_state\"\n\t| \"task_class.missing\"\n\t| \"task_class.forbidden_term\"\n\t| \"task_class.not_allowed\"\n\t| \"action.forbidden_term\"\n\t| SemanticCacheAttributePolicyReason;\n\nexport type SemanticCacheAttributePolicyReason =\n\t| \"attributes.ok\"\n\t| \"attributes.missing_branch\"\n\t| \"attributes.missing_worktree\"\n\t| \"attributes.missing_repo_sha\"\n\t| \"attributes.missing_current_branch\"\n\t| \"attributes.missing_current_worktree\"\n\t| \"attributes.missing_current_repo_sha\"\n\t| \"attributes.branch_mismatch\"\n\t| \"attributes.worktree_mismatch\"\n\t| \"attributes.repo_sha_mismatch\";\n\nexport interface SemanticCachePolicyDecision {\n\teligible: boolean;\n\treason: SemanticCachePolicyReason;\n\tdetail?: string;\n}\n\nexport interface SemanticCacheAttributeValidation {\n\tvalid: boolean;\n\treason: SemanticCacheAttributePolicyReason;\n\tattribute?: keyof SemanticCacheContextAttributes;\n}\n\ntype RequiredAttribute = keyof SemanticCacheContextAttributes;\n\nconst REQUIRED_ATTRIBUTES: readonly RequiredAttribute[] = [\"branch\", \"worktree\", \"repoSha\"];\n\nconst MISSING_CACHE_ATTRIBUTE_REASONS: Record<RequiredAttribute, SemanticCacheAttributePolicyReason> = {\n\tbranch: \"attributes.missing_branch\",\n\tworktree: \"attributes.missing_worktree\",\n\trepoSha: \"attributes.missing_repo_sha\",\n};\n\nconst MISSING_CURRENT_ATTRIBUTE_REASONS: Record<RequiredAttribute, SemanticCacheAttributePolicyReason> = {\n\tbranch: \"attributes.missing_current_branch\",\n\tworktree: \"attributes.missing_current_worktree\",\n\trepoSha: \"attributes.missing_current_repo_sha\",\n};\n\nconst ATTRIBUTE_MISMATCH_REASONS: Record<RequiredAttribute, SemanticCacheAttributePolicyReason> = {\n\tbranch: \"attributes.branch_mismatch\",\n\tworktree: \"attributes.worktree_mismatch\",\n\trepoSha: \"attributes.repo_sha_mismatch\",\n};\n\nexport function classifySemanticCacheEligibility(candidate: SemanticCacheCandidate): SemanticCachePolicyDecision {\n\tif (candidate.enabled !== true) {\n\t\treturn deny(\"disabled\");\n\t}\n\n\tif (candidate.responseKind !== \"final\") {\n\t\treturn deny(\"response.not_final\");\n\t}\n\n\tif (candidate.responseReadOnly !== true) {\n\t\treturn deny(\"response.not_read_only\");\n\t}\n\n\tif (candidate.pendingToolCallCount === undefined) {\n\t\treturn deny(\"tool_calls.unknown\");\n\t}\n\n\tif (candidate.pendingToolCallCount !== 0) {\n\t\treturn deny(\"tool_calls.pending\");\n\t}\n\n\tconst dependencyReason = classifyForbiddenDependence(candidate.dependencies);\n\tif (dependencyReason !== undefined) {\n\t\treturn deny(dependencyReason);\n\t}\n\n\tif (candidate.taskClass === undefined || candidate.taskClass.trim().length === 0) {\n\t\treturn deny(\"task_class.missing\");\n\t}\n\n\tif (containsForbiddenTerm(candidate.taskClass, FORBIDDEN_SEMANTIC_CACHE_TASK_CLASS_TERMS)) {\n\t\treturn deny(\"task_class.forbidden_term\", candidate.taskClass);\n\t}\n\n\tconst normalizedTaskClass = normalizeTaskClass(candidate.taskClass);\n\tif (!isAllowedTaskClass(normalizedTaskClass)) {\n\t\treturn deny(\"task_class.not_allowed\", candidate.taskClass);\n\t}\n\n\tconst actions = collectActions(candidate);\n\tif (actions.some((action) => containsForbiddenTerm(action, FORBIDDEN_SEMANTIC_CACHE_ACTION_TERMS))) {\n\t\treturn deny(\"action.forbidden_term\", actions.join(\", \"));\n\t}\n\n\tconst attributeValidation = validateSemanticCacheAttributes(candidate.cacheAttributes, candidate.currentAttributes);\n\tif (!attributeValidation.valid) {\n\t\treturn deny(attributeValidation.reason, attributeValidation.attribute);\n\t}\n\n\treturn { eligible: true, reason: \"eligible\" };\n}\n\nexport function validateSemanticCacheAttributes(\n\tcacheAttributes: SemanticCacheContextAttributes | undefined,\n\tcurrentAttributes: SemanticCacheContextAttributes | undefined,\n): SemanticCacheAttributeValidation {\n\tfor (const attribute of REQUIRED_ATTRIBUTES) {\n\t\tif (!hasUsableAttribute(cacheAttributes, attribute)) {\n\t\t\treturn { valid: false, reason: MISSING_CACHE_ATTRIBUTE_REASONS[attribute], attribute };\n\t\t}\n\t}\n\n\tfor (const attribute of REQUIRED_ATTRIBUTES) {\n\t\tif (!hasUsableAttribute(currentAttributes, attribute)) {\n\t\t\treturn { valid: false, reason: MISSING_CURRENT_ATTRIBUTE_REASONS[attribute], attribute };\n\t\t}\n\t}\n\n\tfor (const attribute of REQUIRED_ATTRIBUTES) {\n\t\tconst cacheAttribute = cacheAttributes?.[attribute];\n\t\tconst currentAttribute = currentAttributes?.[attribute];\n\t\tif (cacheAttribute !== currentAttribute) {\n\t\t\treturn { valid: false, reason: ATTRIBUTE_MISMATCH_REASONS[attribute], attribute };\n\t\t}\n\t}\n\n\treturn { valid: true, reason: \"attributes.ok\" };\n}\n\nfunction classifyForbiddenDependence(\n\tdependencies: SemanticCacheDependencyFlags | undefined,\n): SemanticCachePolicyReason | undefined {\n\tif (dependencies?.mutation === true) {\n\t\treturn \"dependence.mutation\";\n\t}\n\tif (dependencies?.deploy === true) {\n\t\treturn \"dependence.deploy\";\n\t}\n\tif (dependencies?.auth === true) {\n\t\treturn \"dependence.auth\";\n\t}\n\tif (dependencies?.security === true) {\n\t\treturn \"dependence.security\";\n\t}\n\tif (dependencies?.time === true) {\n\t\treturn \"dependence.time\";\n\t}\n\tif (dependencies?.externalState === true) {\n\t\treturn \"dependence.external_state\";\n\t}\n\treturn undefined;\n}\n\nfunction collectActions(candidate: SemanticCacheCandidate): readonly string[] {\n\tconst actions: string[] = [];\n\tif (candidate.action !== undefined) {\n\t\tactions.push(candidate.action);\n\t}\n\tif (candidate.actions !== undefined) {\n\t\tactions.push(...candidate.actions);\n\t}\n\treturn actions;\n}\n\nfunction isAllowedTaskClass(taskClass: string): taskClass is SemanticCacheTaskClass {\n\treturn ALLOWED_SEMANTIC_CACHE_TASK_CLASSES.some((allowedTaskClass) => allowedTaskClass === taskClass);\n}\n\nfunction containsForbiddenTerm(text: string, terms: readonly string[]): boolean {\n\tconst textTerms = splitSearchTerms(text);\n\tconst textTermSet = new Set(textTerms);\n\tconst normalizedText = ` ${textTerms.join(\" \")} `;\n\n\treturn terms.some((term) => {\n\t\tconst normalizedTerm = splitSearchTerms(term).join(\" \");\n\t\tif (normalizedTerm.length === 0) {\n\t\t\treturn false;\n\t\t}\n\t\tif (normalizedTerm.includes(\" \")) {\n\t\t\treturn normalizedText.includes(` ${normalizedTerm} `);\n\t\t}\n\t\treturn textTermSet.has(normalizedTerm);\n\t});\n}\n\nfunction normalizeTaskClass(taskClass: string): string {\n\treturn taskClass\n\t\t.trim()\n\t\t.toLowerCase()\n\t\t.replace(/[^a-z0-9]+/g, \"_\")\n\t\t.replace(/^_+|_+$/g, \"\");\n}\n\nfunction splitSearchTerms(text: string): string[] {\n\treturn text\n\t\t.trim()\n\t\t.toLowerCase()\n\t\t.split(/[^a-z0-9]+/g)\n\t\t.filter((term) => term.length > 0);\n}\n\nfunction hasUsableAttribute(\n\tattributes: SemanticCacheContextAttributes | undefined,\n\tattribute: RequiredAttribute,\n): boolean {\n\treturn typeof attributes?.[attribute] === \"string\" && attributes[attribute].trim().length > 0;\n}\n\nfunction deny(\n\treason: SemanticCachePolicyReason,\n\tdetail?: string | keyof SemanticCacheContextAttributes,\n): SemanticCachePolicyDecision {\n\treturn detail === undefined ? { eligible: false, reason } : { eligible: false, reason, detail };\n}\n"]}

package/dist/core/session-digest.d.ts

@@ -0,0 +1,57 @@
+import { type SanitizerFindingSummary } from "./policy-overlays-runtime.ts";
+export interface BoundedDigestOptions {
+    /** Hard ceiling on output character length. */
+    maxChars: number;
+    /** Fraction of retained content reserved for the beginning of the stream. */
+    headRatio?: number;
+    /** Separator inserted between pushed segments. */
+    separator?: string;
+    /** Marker inserted between retained head and tail when content is omitted. */
+    marker?: string;
+    /** Redact memory-sensitive text before it enters the digest. Defaults to true for runtime session paths. */
+    sanitize?: boolean;
+}
+export interface BoundedDigestResult {
+    text: string;
+    truncated: boolean;
+    originalChars: number;
+    keptChars: number;
+}
+export declare const DEFAULT_SESSION_DIGEST_MAX_CHARS = 16000;
+export declare const DEFAULT_SESSION_FIRST_MESSAGE_MAX_CHARS = 2000;
+export declare const DEFAULT_DIGEST_HEAD_RATIO = 0.6;
+export declare const DEFAULT_DIGEST_MARKER = " \u2026[omk-digest:truncated]\u2026 ";
+export declare class BoundedDigestAccumulator {
+    private readonly options;
+    private head;
+    private tail;
+    private originalChars;
+    private wroteAny;
+    private overflowed;
+    constructor(options: BoundedDigestOptions);
+    push(segment: string): void;
+    result(): BoundedDigestResult;
+    private appendToHead;
+    private appendToTail;
+}
+export declare function buildBoundedDigest(segments: readonly string[], options: BoundedDigestOptions): BoundedDigestResult;
+export declare function boundConversationTextForSummary(text: string, maxChars: number): string;
+export declare function boundSessionFirstMessage(text: string, maxChars?: number, sanitize?: boolean): string;
+export interface SanitizedDigestResult extends BoundedDigestResult {
+    findings: SanitizerFindingSummary;
+}
+/**
+ * Bound a digest of session-derived text segments while redacting secrets, auth
+ * tokens, PII-like values, and home paths via the shared memory sanitizer.
+ *
+ * Sanitization (redaction) is applied per segment with a generous budget so only
+ * redaction happens; the configured maxChars ceiling is then enforced by the
+ * BoundedDigestAccumulator, preserving head/tail retention semantics.
+ */
+export declare function boundAndSanitizeSessionDigest(segments: readonly string[], options: BoundedDigestOptions): SanitizedDigestResult;
+/**
+ * Bound the first session message while redacting sanitizer-sensitive values.
+ * Mirrors boundSessionFirstMessage() but sanitizes the source first.
+ */
+export declare function boundAndSanitizeFirstMessage(text: string, maxChars?: number): SanitizedDigestResult;
+//# sourceMappingURL=session-digest.d.ts.map

package/dist/core/session-digest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-digest.d.ts","sourceRoot":"","sources":["../../src/core/session-digest.ts"],"names":[],"mappings":"AACA,OAAO,EAEN,KAAK,uBAAuB,EAE5B,MAAM,8BAA8B,CAAC;AAEtC,MAAM,WAAW,oBAAoB;IACpC,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4GAA4G;IAC5G,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,gCAAgC,QAAS,CAAC;AACvD,eAAO,MAAM,uCAAuC,OAAQ,CAAC;AAC7D,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,eAAO,MAAM,qBAAqB,yCAA+B,CAAC;AAyClE,qBAAa,wBAAwB;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,OAAO,CAAC,IAAI,CAAM;IAClB,OAAO,CAAC,IAAI,CAAM;IAClB,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,UAAU,CAAS;IAE3B,YAAY,OAAO,EAAE,oBAAoB,EAExC;IAED,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAW1B;IAED,MAAM,IAAI,mBAAmB,CAa5B;IAED,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,YAAY;CAYpB;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,oBAAoB,GAAG,mBAAmB,CAMlH;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKtF;AAED,wBAAgB,wBAAwB,CACvC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,MAAgD,EAC1D,QAAQ,UAAO,GACb,MAAM,CAOR;AAYD,MAAM,WAAW,qBAAsB,SAAQ,mBAAmB;IACjE,QAAQ,EAAE,uBAAuB,CAAC;CAClC;AAaD;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC5C,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,OAAO,EAAE,oBAAoB,GAC3B,qBAAqB,CAgCvB;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC3C,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,MAAgD,GACxD,qBAAqB,CAgBvB","sourcesContent":["import { createHash } from \"node:crypto\";\nimport {\n\ttype MemorySanitizerCategory,\n\ttype SanitizerFindingSummary,\n\tsanitizeMemoryPayload,\n} from \"./policy-overlays-runtime.ts\";\n\nexport interface BoundedDigestOptions {\n\t/** Hard ceiling on output character length. */\n\tmaxChars: number;\n\t/** Fraction of retained content reserved for the beginning of the stream. */\n\theadRatio?: number;\n\t/** Separator inserted between pushed segments. */\n\tseparator?: string;\n\t/** Marker inserted between retained head and tail when content is omitted. */\n\tmarker?: string;\n\t/** Redact memory-sensitive text before it enters the digest. Defaults to true for runtime session paths. */\n\tsanitize?: boolean;\n}\n\nexport interface BoundedDigestResult {\n\ttext: string;\n\ttruncated: boolean;\n\toriginalChars: number;\n\tkeptChars: number;\n}\n\nexport const DEFAULT_SESSION_DIGEST_MAX_CHARS = 16_000;\nexport const DEFAULT_SESSION_FIRST_MESSAGE_MAX_CHARS = 2_000;\nexport const DEFAULT_DIGEST_HEAD_RATIO = 0.6;\nexport const DEFAULT_DIGEST_MARKER = \" …[omk-digest:truncated]… \";\nconst FIRST_MESSAGE_TRUNCATION_MARKER = \" …[omk-first-message:truncated]\";\n\ninterface NormalizedDigestOptions {\n\tmaxChars: number;\n\theadRatio: number;\n\theadBudget: number;\n\ttailBudget: number;\n\tseparator: string;\n\tmarker: string;\n\tsanitize: boolean;\n}\n\nfunction fitTruncationMarker(marker: string, maxChars: number): string {\n\tif (maxChars <= 0) return \"\";\n\tif (marker.length < maxChars) return marker;\n\treturn maxChars >= 3 ? \"…\" : \"\";\n}\n\nfunction normalizeDigestOptions(options: BoundedDigestOptions): NormalizedDigestOptions {\n\tconst maxChars = Number.isFinite(options.maxChars) ? Math.max(0, Math.floor(options.maxChars)) : 0;\n\tconst ratioValue = options.headRatio ?? DEFAULT_DIGEST_HEAD_RATIO;\n\tconst headRatio = Number.isFinite(ratioValue) ? Math.min(1, Math.max(0, ratioValue)) : DEFAULT_DIGEST_HEAD_RATIO;\n\tconst separator = options.separator ?? \" \";\n\tconst marker = fitTruncationMarker(options.marker ?? DEFAULT_DIGEST_MARKER, maxChars);\n\tconst sanitize = options.sanitize ?? true;\n\tconst headBudget = Math.floor(maxChars * headRatio);\n\tconst tailBudget = Math.max(0, maxChars - headBudget);\n\treturn { maxChars, headRatio, headBudget, tailBudget, separator, marker, sanitize };\n}\n\nfunction sanitizeSessionDigestText(text: string): string {\n\tconst sanitized = sanitizeMemoryPayload(text, {\n\t\tsource: \"session-digest\",\n\t\tcontentTier: \"summary\",\n\t\tmaxChars: DIGEST_SANITIZER_MAX_CHARS,\n\t\texternal: false,\n\t});\n\treturn typeof sanitized.payload === \"string\" ? sanitized.payload : \"\";\n}\n\nexport class BoundedDigestAccumulator {\n\tprivate readonly options: NormalizedDigestOptions;\n\tprivate head = \"\";\n\tprivate tail = \"\";\n\tprivate originalChars = 0;\n\tprivate wroteAny = false;\n\tprivate overflowed = false;\n\n\tconstructor(options: BoundedDigestOptions) {\n\t\tthis.options = normalizeDigestOptions(options);\n\t}\n\n\tpush(segment: string): void {\n\t\tif (segment.length === 0 || this.options.maxChars <= 0) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst safeSegment = this.options.sanitize ? sanitizeSessionDigestText(segment) : segment;\n\t\tif (safeSegment.length === 0) return;\n\t\tconst piece = this.wroteAny ? `${this.options.separator}${safeSegment}` : safeSegment;\n\t\tthis.wroteAny = true;\n\t\tthis.originalChars += piece.length;\n\t\tthis.appendToHead(piece);\n\t}\n\n\tresult(): BoundedDigestResult {\n\t\tif (!this.overflowed) {\n\t\t\tconst text = this.head + this.tail;\n\t\t\treturn { text, truncated: false, originalChars: this.originalChars, keptChars: text.length };\n\t\t}\n\n\t\tconst contentBudget = Math.max(0, this.options.maxChars - this.options.marker.length);\n\t\tconst headBudget = Math.floor(contentBudget * this.options.headRatio);\n\t\tconst tailBudget = Math.max(0, contentBudget - headBudget);\n\t\tconst text = `${this.head.slice(0, headBudget)}${this.options.marker}${this.tail.slice(\n\t\t\tMath.max(0, this.tail.length - tailBudget),\n\t\t)}`;\n\t\treturn { text, truncated: true, originalChars: this.originalChars, keptChars: text.length };\n\t}\n\n\tprivate appendToHead(piece: string): void {\n\t\tconst headRemaining = this.options.headBudget - this.head.length;\n\t\tif (headRemaining > 0) {\n\t\t\tconst headPiece = piece.slice(0, headRemaining);\n\t\t\tthis.head += headPiece;\n\t\t\tconst rest = piece.slice(headPiece.length);\n\t\t\tif (rest.length > 0) {\n\t\t\t\tthis.appendToTail(rest);\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\n\t\tthis.appendToTail(piece);\n\t}\n\n\tprivate appendToTail(piece: string): void {\n\t\tif (this.options.tailBudget <= 0) {\n\t\t\tthis.overflowed = true;\n\t\t\treturn;\n\t\t}\n\n\t\tthis.tail += piece;\n\t\tif (this.tail.length > this.options.tailBudget) {\n\t\t\tthis.tail = this.tail.slice(this.tail.length - this.options.tailBudget);\n\t\t\tthis.overflowed = true;\n\t\t}\n\t}\n}\n\nexport function buildBoundedDigest(segments: readonly string[], options: BoundedDigestOptions): BoundedDigestResult {\n\tconst accumulator = new BoundedDigestAccumulator(options);\n\tfor (const segment of segments) {\n\t\taccumulator.push(segment);\n\t}\n\treturn accumulator.result();\n}\n\nexport function boundConversationTextForSummary(text: string, maxChars: number): string {\n\tif (!Number.isFinite(maxChars) || maxChars <= 0 || text.length <= maxChars) {\n\t\treturn text;\n\t}\n\treturn buildBoundedDigest([text], { maxChars, headRatio: 0.5 }).text;\n}\n\nexport function boundSessionFirstMessage(\n\ttext: string,\n\tmaxChars: number = DEFAULT_SESSION_FIRST_MESSAGE_MAX_CHARS,\n\tsanitize = true,\n): string {\n\tif (!Number.isFinite(maxChars) || maxChars <= 0) return \"\";\n\tconst safeText = sanitize ? sanitizeSessionDigestText(text) : text;\n\tif (safeText.length <= maxChars) return safeText;\n\tconst marker = fitTruncationMarker(FIRST_MESSAGE_TRUNCATION_MARKER, maxChars);\n\tconst contentBudget = Math.max(0, maxChars - marker.length);\n\treturn `${safeText.slice(0, contentBudget)}${marker}`;\n}\n\n// ---------------------------------------------------------------------------\n// Sanitized digest helpers (memory-policy runtime wiring)\n// ---------------------------------------------------------------------------\n\n/**\n * Generous per-segment sanitizer budget: redaction only, never truncates.\n * The real output budget is enforced by BoundedDigestAccumulator afterwards.\n */\nconst DIGEST_SANITIZER_MAX_CHARS = 2_000_000;\n\nexport interface SanitizedDigestResult extends BoundedDigestResult {\n\tfindings: SanitizerFindingSummary;\n}\n\nfunction mergeMemoryCategories(\n\ttarget: Partial<Record<MemorySanitizerCategory, number>>,\n\tsource: Partial<Record<MemorySanitizerCategory, number>>,\n): void {\n\tfor (const category of Object.keys(source) as MemorySanitizerCategory[]) {\n\t\tconst count = source[category];\n\t\tif (count === undefined) continue;\n\t\ttarget[category] = (target[category] ?? 0) + count;\n\t}\n}\n\n/**\n * Bound a digest of session-derived text segments while redacting secrets, auth\n * tokens, PII-like values, and home paths via the shared memory sanitizer.\n *\n * Sanitization (redaction) is applied per segment with a generous budget so only\n * redaction happens; the configured maxChars ceiling is then enforced by the\n * BoundedDigestAccumulator, preserving head/tail retention semantics.\n */\nexport function boundAndSanitizeSessionDigest(\n\tsegments: readonly string[],\n\toptions: BoundedDigestOptions,\n): SanitizedDigestResult {\n\tconst accumulator = new BoundedDigestAccumulator({ ...options, sanitize: false });\n\tconst categories: Partial<Record<MemorySanitizerCategory, number>> = {};\n\tlet redactionCount = 0;\n\tlet originalInputChars = 0;\n\n\tfor (const segment of segments) {\n\t\tif (segment.length === 0) continue;\n\t\toriginalInputChars += segment.length;\n\t\tconst sanitized = sanitizeMemoryPayload(segment, {\n\t\t\tsource: \"session-digest\",\n\t\t\tcontentTier: \"summary\",\n\t\t\tmaxChars: DIGEST_SANITIZER_MAX_CHARS,\n\t\t\texternal: false,\n\t\t});\n\t\tmergeMemoryCategories(categories, sanitized.findings.categories);\n\t\tredactionCount += sanitized.findings.redactionCount;\n\t\tconst payload = typeof sanitized.payload === \"string\" ? sanitized.payload : \"\";\n\t\taccumulator.push(payload);\n\t}\n\n\tconst result = accumulator.result();\n\tconst findings: SanitizerFindingSummary = {\n\t\tsanitized: redactionCount > 0,\n\t\tdenied: false,\n\t\tcategories,\n\t\tredactionCount,\n\t\toriginalChars: originalInputChars,\n\t\tkeptChars: result.keptChars,\n\t\tdigest: createHash(\"sha256\").update(result.text).digest(\"hex\"),\n\t};\n\treturn { ...result, findings };\n}\n\n/**\n * Bound the first session message while redacting sanitizer-sensitive values.\n * Mirrors boundSessionFirstMessage() but sanitizes the source first.\n */\nexport function boundAndSanitizeFirstMessage(\n\ttext: string,\n\tmaxChars: number = DEFAULT_SESSION_FIRST_MESSAGE_MAX_CHARS,\n): SanitizedDigestResult {\n\tconst sanitized = sanitizeMemoryPayload(text, {\n\t\tsource: \"session-digest\",\n\t\tcontentTier: \"summary\",\n\t\tmaxChars: DIGEST_SANITIZER_MAX_CHARS,\n\t\texternal: false,\n\t});\n\tconst payload = typeof sanitized.payload === \"string\" ? sanitized.payload : \"\";\n\tconst bounded = boundSessionFirstMessage(payload, maxChars, false);\n\treturn {\n\t\ttext: bounded,\n\t\ttruncated: bounded.length < payload.length,\n\t\toriginalChars: text.length,\n\t\tkeptChars: bounded.length,\n\t\tfindings: { ...sanitized.findings, keptChars: bounded.length },\n\t};\n}\n"]}