open-multi-agent-kit 0.80.6 → 0.80.7

package/dist/core/headroom-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headroom-middleware.js","sourceRoot":"","sources":["../../src/core/headroom-middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAErE,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AAElD,MAAM,uBAAuB,GAAsB;IAClD,wCAAwC;IACxC,+IAA+I;IAC/I,yDAAyD;IACzD,sDAAsD;CACtD,CAAC;AAuCF,MAAM,UAAU,gCAAgC,CAC/C,OAA0C,EACb;IAC7B,IAAI,KAAK,GAAG,gBAAgB,EAAE,CAAC;IAE/B,OAAO;QACN,kBAAkB,CAAC,KAAK,EAAE;YACzB,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK;gBAAE,OAAO,SAAS,CAAC;YAChD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC/D,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YACrB,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAAA,CACnD;QACD,QAAQ,GAAG;YACV,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;QAAA,CACpB;QACD,KAAK,GAAG;YACP,KAAK,GAAG,gBAAgB,EAAE,CAAC;QAAA,CAC3B;KACD,CAAC;AAAA,CACF;AAQD,SAAS,gBAAgB,CACxB,OAAgB,EAChB,OAA0C,EAC1C,YAA6C,EACpB;IACzB,IAAI,SAAS,GAAG,YAAY,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,OAAO,CAAC;QAClD,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAChE,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;QACzB,OAAO,GAAG,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;QACpC,OAAO,MAAM,CAAC,OAAO,CAAC;IAAA,CACtB,CAAC,CAAC;IAEH,OAAO;QACN,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO;QACrD,KAAK,EAAE,SAAS;QAChB,OAAO;KACP,CAAC;AAAA,CACF;AAQD,SAAS,mBAAmB,CAC3B,OAAmC,EACnC,OAA0C,EAC1C,YAA6C,EACjB;IAC5B,IAAI,SAAS,GAAG,YAAY,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7E,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;QACzB,OAAO,GAAG,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;QACpC,OAAO,MAAM,CAAC,KAAK,CAAC;IAAA,CACpB,CAAC,CAAC;IAEH,OAAO;QACN,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO;QACpD,KAAK,EAAE,SAAS;QAChB,OAAO;KACP,CAAC;AAAA,CACF;AAQD,SAAS,kBAAkB,CAC1B,KAAkB,EAClB,OAAmC,EACnC,YAAoB,EACpB,OAA0C,EAC1C,YAA6C,EAClB;IAC3B,MAAM,eAAe,GAAG,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,KAAK,GAAG,cAAc,CAAC,YAAY,EAAE;QACxC,wBAAwB,EAAE,CAAC;QAC3B,WAAW,EAAE,eAAe;KAC5B,CAAC,CAAC;IAEH,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,EAAE,wBAAwB,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACjG,CAAC;IAED,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,eAAe,IAAI,eAAe,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,EAAE,2BAA2B,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACpG,CAAC;IAED,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACJ,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,eAAe;YACf,eAAe;YACf,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY;YACZ,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;SACxB,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzF,CAAC;IAED,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzF,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE;QAC7B,gBAAgB,EAAE,CAAC;QACnB,YAAY,EAAE,yBAAyB,CAAC,UAAU,CAAC;KACnD,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAAA,CACvE;AAED,SAAS,gBAAgB,GAAoC;IAC5D,OAAO;QACN,wBAAwB,EAAE,CAAC;QAC3B,gBAAgB,EAAE,CAAC;QACnB,2BAA2B,EAAE,CAAC;QAC9B,mBAAmB,EAAE,CAAC;QACtB,wBAAwB,EAAE,CAAC;QAC3B,gBAAgB,EAAE,CAAC;QACnB,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;KACf,CAAC;AAAA,CACF;AAED,SAAS,cAAc,CACtB,KAAsC,EACtC,KAAqE,EACnC;IAClC,OAAO;QACN,wBAAwB,EAAE,KAAK,CAAC,wBAAwB,GAAG,CAAC,KAAK,CAAC,wBAAwB,IAAI,CAAC,CAAC;QAChG,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;QACxE,2BAA2B,EAAE,KAAK,CAAC,2BAA2B,GAAG,CAAC,KAAK,CAAC,2BAA2B,IAAI,CAAC,CAAC;QACzG,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,GAAG,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,CAAC;QACjF,wBAAwB,EAAE,KAAK,CAAC,wBAAwB,GAAG,CAAC,KAAK,CAAC,wBAAwB,IAAI,CAAC,CAAC;QAChG,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;QACxE,WAAW,EAAE,KAAK,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;QACzD,YAAY,EAAE,KAAK,CAAC,YAAY,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;KAC5D,CAAC;AAAA,CACF;AAED,SAAS,kBAAkB,CAAC,OAA0C,EAAE,OAAmC,EAAU;IACpH,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC;QAC7C,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,IAAI,OAAO,CAAC,eAAe,CAAC;QAC1D,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAC3B,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,wBAAwB,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAAA,CAC5B;AAED,SAAS,mBAAmB,CAAC,OAAmC,EAAW;IAC1E,IAAI,iDAAiD,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1F,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,4CAA4C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAAA,CAC7F,CAAC,CAAC;AAAA,CACH;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAW;IACjD,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;AAAA,CAC7D;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAW;IACrD,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;AAAA,CACpF;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,IAAY,EAAW;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAAA,CACpD;AAED,SAAS,QAAQ,CAAC,KAAc,EAAuC;IACtE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1E,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAAA,CACb","sourcesContent":["import type { BeforeProviderSend, Context, TextContent, ToolResultMessage } from \"@earendil-works/omk-ai\";\nimport { estimateLeanContextTokens } from \"./lean-context-policy.ts\";\n\nconst DEFAULT_THRESHOLD_TOKENS = 2_048;\nconst LEAN_CONTEXT_STUB_PREFIX = \"[lean-context]\";\n\nconst DEFAULT_SECRET_PATTERNS: readonly RegExp[] = [\n\t/-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----/i,\n\t/\\b(?:api[_-]?key|access[_-]?token|auth[_-]?token|refresh[_-]?token|client[_-]?secret|secret|password|passwd|pwd)\\b\\s*[:=]\\s*[\"']?[^\\s\"']{8,}/i,\n\t/\\bauthorization\\s*:\\s*bearer\\s+[A-Za-z0-9._~+/=-]{10,}/i,\n\t/\\b(?:gh[pousr]_|sk-|xox[baprs]-)[A-Za-z0-9_=-]{10,}/i,\n];\n\nexport interface HeadroomCompressTextInput {\n\treadonly text: string;\n\treadonly estimatedTokens: number;\n\treadonly thresholdTokens: number;\n\treadonly toolCallId: string;\n\treadonly toolName: string;\n\treadonly contentIndex: number;\n\treadonly isError: boolean;\n\treadonly details?: unknown;\n}\n\nexport type HeadroomCompressText = (input: HeadroomCompressTextInput) => string | undefined;\n\nexport interface HeadroomBeforeProviderSendOptions {\n\treadonly compressText: HeadroomCompressText;\n\treadonly thresholdTokens?: number;\n\treadonly logsThresholdTokens?: number;\n\treadonly enabled?: boolean;\n}\n\nexport interface HeadroomBeforeProviderSendStats {\n\treadonly seenToolResultTextBlocks: number;\n\treadonly compressedBlocks: number;\n\treadonly skippedBelowThresholdBlocks: number;\n\treadonly skippedSecretBlocks: number;\n\treadonly skippedLeanContextBlocks: number;\n\treadonly failedOpenBlocks: number;\n\treadonly inputTokens: number;\n\treadonly outputTokens: number;\n}\n\nexport interface HeadroomBeforeProviderSend {\n\treadonly beforeProviderSend: BeforeProviderSend;\n\tgetStats(): HeadroomBeforeProviderSendStats;\n\treset(): void;\n}\n\nexport function createHeadroomBeforeProviderSend(\n\toptions: HeadroomBeforeProviderSendOptions,\n): HeadroomBeforeProviderSend {\n\tlet stats = createEmptyStats();\n\n\treturn {\n\t\tbeforeProviderSend(input) {\n\t\t\tif (options.enabled === false) return undefined;\n\t\t\tconst result = transformContext(input.context, options, stats);\n\t\t\tstats = result.stats;\n\t\t\treturn result.changed ? result.context : undefined;\n\t\t},\n\t\tgetStats() {\n\t\t\treturn { ...stats };\n\t\t},\n\t\treset() {\n\t\t\tstats = createEmptyStats();\n\t\t},\n\t};\n}\n\ninterface ContextTransformResult {\n\treadonly context: Context;\n\treadonly stats: HeadroomBeforeProviderSendStats;\n\treadonly changed: boolean;\n}\n\nfunction transformContext(\n\tcontext: Context,\n\toptions: HeadroomBeforeProviderSendOptions,\n\tinitialStats: HeadroomBeforeProviderSendStats,\n): ContextTransformResult {\n\tlet nextStats = initialStats;\n\tlet changed = false;\n\tconst messages = context.messages.map((message) => {\n\t\tif (message.role !== \"toolResult\") return message;\n\t\tconst result = transformToolResult(message, options, nextStats);\n\t\tnextStats = result.stats;\n\t\tchanged = changed || result.changed;\n\t\treturn result.message;\n\t});\n\n\treturn {\n\t\tcontext: changed ? { ...context, messages } : context,\n\t\tstats: nextStats,\n\t\tchanged,\n\t};\n}\n\ninterface ToolResultTransformResult {\n\treadonly message: ToolResultMessage<unknown>;\n\treadonly stats: HeadroomBeforeProviderSendStats;\n\treadonly changed: boolean;\n}\n\nfunction transformToolResult(\n\tmessage: ToolResultMessage<unknown>,\n\toptions: HeadroomBeforeProviderSendOptions,\n\tinitialStats: HeadroomBeforeProviderSendStats,\n): ToolResultTransformResult {\n\tlet nextStats = initialStats;\n\tlet changed = false;\n\tconst content = message.content.map((block, index) => {\n\t\tif (block.type !== \"text\") return block;\n\t\tconst result = transformTextBlock(block, message, index, options, nextStats);\n\t\tnextStats = result.stats;\n\t\tchanged = changed || result.changed;\n\t\treturn result.block;\n\t});\n\n\treturn {\n\t\tmessage: changed ? { ...message, content } : message,\n\t\tstats: nextStats,\n\t\tchanged,\n\t};\n}\n\ninterface TextBlockTransformResult {\n\treadonly block: TextContent;\n\treadonly stats: HeadroomBeforeProviderSendStats;\n\treadonly changed: boolean;\n}\n\nfunction transformTextBlock(\n\tblock: TextContent,\n\tmessage: ToolResultMessage<unknown>,\n\tcontentIndex: number,\n\toptions: HeadroomBeforeProviderSendOptions,\n\tinitialStats: HeadroomBeforeProviderSendStats,\n): TextBlockTransformResult {\n\tconst estimatedTokens = estimateLeanContextTokens(block.text);\n\tlet stats = incrementStats(initialStats, {\n\t\tseenToolResultTextBlocks: 1,\n\t\tinputTokens: estimatedTokens,\n\t});\n\n\tif (isLeanContextStub(block.text)) {\n\t\treturn { block, stats: incrementStats(stats, { skippedLeanContextBlocks: 1 }), changed: false };\n\t}\n\n\tif (containsSecretPattern(block.text)) {\n\t\treturn { block, stats: incrementStats(stats, { skippedSecretBlocks: 1 }), changed: false };\n\t}\n\n\tconst thresholdTokens = getThresholdTokens(options, message);\n\tif (estimatedTokens <= thresholdTokens) {\n\t\treturn { block, stats: incrementStats(stats, { skippedBelowThresholdBlocks: 1 }), changed: false };\n\t}\n\n\tlet compressed: string | undefined;\n\ttry {\n\t\tcompressed = options.compressText({\n\t\t\ttext: block.text,\n\t\t\testimatedTokens,\n\t\t\tthresholdTokens,\n\t\t\ttoolCallId: message.toolCallId,\n\t\t\ttoolName: message.toolName,\n\t\t\tcontentIndex,\n\t\t\tisError: message.isError,\n\t\t\tdetails: message.details,\n\t\t});\n\t} catch {\n\t\treturn { block, stats: incrementStats(stats, { failedOpenBlocks: 1 }), changed: false };\n\t}\n\n\tif (compressed === undefined) {\n\t\treturn { block, stats: incrementStats(stats, { failedOpenBlocks: 1 }), changed: false };\n\t}\n\n\tif (compressed === block.text) {\n\t\treturn { block, stats, changed: false };\n\t}\n\n\tstats = incrementStats(stats, {\n\t\tcompressedBlocks: 1,\n\t\toutputTokens: estimateLeanContextTokens(compressed),\n\t});\n\treturn { block: { ...block, text: compressed }, stats, changed: true };\n}\n\nfunction createEmptyStats(): HeadroomBeforeProviderSendStats {\n\treturn {\n\t\tseenToolResultTextBlocks: 0,\n\t\tcompressedBlocks: 0,\n\t\tskippedBelowThresholdBlocks: 0,\n\t\tskippedSecretBlocks: 0,\n\t\tskippedLeanContextBlocks: 0,\n\t\tfailedOpenBlocks: 0,\n\t\tinputTokens: 0,\n\t\toutputTokens: 0,\n\t};\n}\n\nfunction incrementStats(\n\tstats: HeadroomBeforeProviderSendStats,\n\tdelta: Partial<Record<keyof HeadroomBeforeProviderSendStats, number>>,\n): HeadroomBeforeProviderSendStats {\n\treturn {\n\t\tseenToolResultTextBlocks: stats.seenToolResultTextBlocks + (delta.seenToolResultTextBlocks ?? 0),\n\t\tcompressedBlocks: stats.compressedBlocks + (delta.compressedBlocks ?? 0),\n\t\tskippedBelowThresholdBlocks: stats.skippedBelowThresholdBlocks + (delta.skippedBelowThresholdBlocks ?? 0),\n\t\tskippedSecretBlocks: stats.skippedSecretBlocks + (delta.skippedSecretBlocks ?? 0),\n\t\tskippedLeanContextBlocks: stats.skippedLeanContextBlocks + (delta.skippedLeanContextBlocks ?? 0),\n\t\tfailedOpenBlocks: stats.failedOpenBlocks + (delta.failedOpenBlocks ?? 0),\n\t\tinputTokens: stats.inputTokens + (delta.inputTokens ?? 0),\n\t\toutputTokens: stats.outputTokens + (delta.outputTokens ?? 0),\n\t};\n}\n\nfunction getThresholdTokens(options: HeadroomBeforeProviderSendOptions, message: ToolResultMessage<unknown>): number {\n\tconst threshold = isLogLikeToolResult(message)\n\t\t? (options.logsThresholdTokens ?? options.thresholdTokens)\n\t\t: options.thresholdTokens;\n\tif (threshold === undefined) return DEFAULT_THRESHOLD_TOKENS;\n\tif (!Number.isFinite(threshold) || threshold < 0) return 0;\n\treturn Math.ceil(threshold);\n}\n\nfunction isLogLikeToolResult(message: ToolResultMessage<unknown>): boolean {\n\tif (/\\b(?:bash|exec|shell|log|logs|stderr|stdout)\\b/i.test(message.toolName)) return true;\n\tconst details = asRecord(message.details);\n\tif (!details) return false;\n\treturn [\"path\", \"filePath\", \"command\", \"query\"].some((key) => {\n\t\tconst value = details[key];\n\t\treturn typeof value === \"string\" && /(?:\\.log\\b|\\blogs?\\b|stderr|stdout|trace)/i.test(value);\n\t});\n}\n\nfunction isLeanContextStub(text: string): boolean {\n\treturn text.trimStart().startsWith(LEAN_CONTEXT_STUB_PREFIX);\n}\n\nfunction containsSecretPattern(text: string): boolean {\n\treturn DEFAULT_SECRET_PATTERNS.some((pattern) => regexTestStateless(pattern, text));\n}\n\nfunction regexTestStateless(pattern: RegExp, text: string): boolean {\n\tconst flags = pattern.flags.replace(/[gy]/g, \"\");\n\treturn new RegExp(pattern.source, flags).test(text);\n}\n\nfunction asRecord(value: unknown): Record<string, unknown> | undefined {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value)\n\t\t? (value as Record<string, unknown>)\n\t\t: undefined;\n}\n"]}

package/dist/core/hook-inventory.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Minimal hook inventory for the loadout runtime.
+ *
+ * The external harness resolves `scriptPath` to an actual shell script.
+ * This module only provides the canonical names and builtin flag so the
+ * loadout layer can validate allow/exclude/require selectors.
+ */
+export interface HookDescriptor {
+    name: string;
+    scriptPath?: string;
+    builtin: boolean;
+}
+export interface HookInventory {
+    hooks: readonly HookDescriptor[];
+}
+export declare const BUILTIN_HOOKS: readonly HookDescriptor[];
+/**
+ * Load the hook inventory. Builtin hooks are always present; if an agent
+ * directory is provided and its `hooks` subdirectory exists, any shell scripts
+ * discovered there are appended as non-builtin descriptors.
+ */
+export declare function loadHookInventory(agentDir?: string): HookInventory;
+//# sourceMappingURL=hook-inventory.d.ts.map

package/dist/core/hook-inventory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-inventory.d.ts","sourceRoot":"","sources":["../../src/core/hook-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;CACjC;AAED,eAAO,MAAM,aAAa,EAAE,SAAS,cAAc,EASlD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,aAAa,CAqBlE","sourcesContent":["/**\n * Minimal hook inventory for the loadout runtime.\n *\n * The external harness resolves `scriptPath` to an actual shell script.\n * This module only provides the canonical names and builtin flag so the\n * loadout layer can validate allow/exclude/require selectors.\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\n\nexport interface HookDescriptor {\n\tname: string;\n\tscriptPath?: string;\n\tbuiltin: boolean;\n}\n\nexport interface HookInventory {\n\thooks: readonly HookDescriptor[];\n}\n\nexport const BUILTIN_HOOKS: readonly HookDescriptor[] = [\n\t{ name: \"pre-shell-guard\", builtin: true },\n\t{ name: \"protect-secrets\", builtin: true },\n\t{ name: \"session-context\", builtin: true },\n\t{ name: \"precompact-checkpoint\", builtin: true },\n\t{ name: \"typecheck-after-edit\", builtin: true },\n\t{ name: \"stop-verify\", builtin: true },\n\t{ name: \"subagent-stop-audit\", builtin: true },\n\t{ name: \"npm-audit-summary\", builtin: true },\n];\n\n/**\n * Load the hook inventory. Builtin hooks are always present; if an agent\n * directory is provided and its `hooks` subdirectory exists, any shell scripts\n * discovered there are appended as non-builtin descriptors.\n */\nexport function loadHookInventory(agentDir?: string): HookInventory {\n\tconst hooks: HookDescriptor[] = [...BUILTIN_HOOKS];\n\tif (agentDir) {\n\t\ttry {\n\t\t\tconst hooksDir = path.join(agentDir, \"hooks\");\n\t\t\tconst entries = fs.readdirSync(hooksDir);\n\t\t\tfor (const entry of entries) {\n\t\t\t\tif (!entry.endsWith(\".sh\")) continue;\n\t\t\t\tconst name = entry.slice(0, -3);\n\t\t\t\tif (hooks.some((h) => h.name === name)) continue;\n\t\t\t\thooks.push({\n\t\t\t\t\tname,\n\t\t\t\t\tscriptPath: path.join(hooksDir, entry),\n\t\t\t\t\tbuiltin: false,\n\t\t\t\t});\n\t\t\t}\n\t\t} catch {\n\t\t\t// Hooks directory may be absent; builtin inventory is sufficient.\n\t\t}\n\t}\n\treturn { hooks };\n}\n"]}

package/dist/core/hook-inventory.js

@@ -0,0 +1,50 @@
+/**
+ * Minimal hook inventory for the loadout runtime.
+ *
+ * The external harness resolves `scriptPath` to an actual shell script.
+ * This module only provides the canonical names and builtin flag so the
+ * loadout layer can validate allow/exclude/require selectors.
+ */
+import fs from "node:fs";
+import path from "node:path";
+export const BUILTIN_HOOKS = [
+    { name: "pre-shell-guard", builtin: true },
+    { name: "protect-secrets", builtin: true },
+    { name: "session-context", builtin: true },
+    { name: "precompact-checkpoint", builtin: true },
+    { name: "typecheck-after-edit", builtin: true },
+    { name: "stop-verify", builtin: true },
+    { name: "subagent-stop-audit", builtin: true },
+    { name: "npm-audit-summary", builtin: true },
+];
+/**
+ * Load the hook inventory. Builtin hooks are always present; if an agent
+ * directory is provided and its `hooks` subdirectory exists, any shell scripts
+ * discovered there are appended as non-builtin descriptors.
+ */
+export function loadHookInventory(agentDir) {
+    const hooks = [...BUILTIN_HOOKS];
+    if (agentDir) {
+        try {
+            const hooksDir = path.join(agentDir, "hooks");
+            const entries = fs.readdirSync(hooksDir);
+            for (const entry of entries) {
+                if (!entry.endsWith(".sh"))
+                    continue;
+                const name = entry.slice(0, -3);
+                if (hooks.some((h) => h.name === name))
+                    continue;
+                hooks.push({
+                    name,
+                    scriptPath: path.join(hooksDir, entry),
+                    builtin: false,
+                });
+            }
+        }
+        catch {
+            // Hooks directory may be absent; builtin inventory is sufficient.
+        }
+    }
+    return { hooks };
+}
+//# sourceMappingURL=hook-inventory.js.map

package/dist/core/hook-inventory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-inventory.js","sourceRoot":"","sources":["../../src/core/hook-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAY7B,MAAM,CAAC,MAAM,aAAa,GAA8B;IACvD,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE;IAC1C,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE;IAC1C,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE;IAC1C,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE;IAChD,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE;IAC/C,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE;IACtC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,EAAE;IAC9C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE;CAC5C,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAiB,EAAiB;IACnE,MAAM,KAAK,GAAqB,CAAC,GAAG,aAAa,CAAC,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACzC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;oBAAE,SAAS;gBACjD,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI;oBACJ,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC;oBACtC,OAAO,EAAE,KAAK;iBACd,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,kEAAkE;QACnE,CAAC;IACF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,CACjB","sourcesContent":["/**\n * Minimal hook inventory for the loadout runtime.\n *\n * The external harness resolves `scriptPath` to an actual shell script.\n * This module only provides the canonical names and builtin flag so the\n * loadout layer can validate allow/exclude/require selectors.\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\n\nexport interface HookDescriptor {\n\tname: string;\n\tscriptPath?: string;\n\tbuiltin: boolean;\n}\n\nexport interface HookInventory {\n\thooks: readonly HookDescriptor[];\n}\n\nexport const BUILTIN_HOOKS: readonly HookDescriptor[] = [\n\t{ name: \"pre-shell-guard\", builtin: true },\n\t{ name: \"protect-secrets\", builtin: true },\n\t{ name: \"session-context\", builtin: true },\n\t{ name: \"precompact-checkpoint\", builtin: true },\n\t{ name: \"typecheck-after-edit\", builtin: true },\n\t{ name: \"stop-verify\", builtin: true },\n\t{ name: \"subagent-stop-audit\", builtin: true },\n\t{ name: \"npm-audit-summary\", builtin: true },\n];\n\n/**\n * Load the hook inventory. Builtin hooks are always present; if an agent\n * directory is provided and its `hooks` subdirectory exists, any shell scripts\n * discovered there are appended as non-builtin descriptors.\n */\nexport function loadHookInventory(agentDir?: string): HookInventory {\n\tconst hooks: HookDescriptor[] = [...BUILTIN_HOOKS];\n\tif (agentDir) {\n\t\ttry {\n\t\t\tconst hooksDir = path.join(agentDir, \"hooks\");\n\t\t\tconst entries = fs.readdirSync(hooksDir);\n\t\t\tfor (const entry of entries) {\n\t\t\t\tif (!entry.endsWith(\".sh\")) continue;\n\t\t\t\tconst name = entry.slice(0, -3);\n\t\t\t\tif (hooks.some((h) => h.name === name)) continue;\n\t\t\t\thooks.push({\n\t\t\t\t\tname,\n\t\t\t\t\tscriptPath: path.join(hooksDir, entry),\n\t\t\t\t\tbuiltin: false,\n\t\t\t\t});\n\t\t\t}\n\t\t} catch {\n\t\t\t// Hooks directory may be absent; builtin inventory is sufficient.\n\t\t}\n\t}\n\treturn { hooks };\n}\n"]}

package/dist/core/lean-context-middleware.d.ts

@@ -0,0 +1,12 @@
+import type { BeforeProviderSend } from "@earendil-works/omk-ai";
+import { type LeanContextPolicyOptions, type LeanContextPolicyState } from "./lean-context-policy.ts";
+export interface LeanContextBeforeProviderSendOptions extends LeanContextPolicyOptions {
+    readonly enabled?: boolean;
+}
+export interface LeanContextBeforeProviderSend {
+    readonly beforeProviderSend: BeforeProviderSend;
+    getState(): LeanContextPolicyState;
+    reset(): void;
+}
+export declare function createLeanContextBeforeProviderSend(options?: LeanContextBeforeProviderSendOptions): LeanContextBeforeProviderSend;
+//# sourceMappingURL=lean-context-middleware.d.ts.map

package/dist/core/lean-context-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lean-context-middleware.d.ts","sourceRoot":"","sources":["../../src/core/lean-context-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAA2C,MAAM,wBAAwB,CAAC;AAC1G,OAAO,EAGN,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,oCAAqC,SAAQ,wBAAwB;IACrF,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,QAAQ,IAAI,sBAAsB,CAAC;IACnC,KAAK,IAAI,IAAI,CAAC;CACd;AAED,wBAAgB,mCAAmC,CAClD,OAAO,GAAE,oCAAyC,GAChD,6BAA6B,CAiB/B","sourcesContent":["import type { BeforeProviderSend, Context, TextContent, ToolResultMessage } from \"@earendil-works/omk-ai\";\nimport {\n\tcreateLeanContextPolicyState,\n\tdecideLeanContextEmission,\n\ttype LeanContextPolicyOptions,\n\ttype LeanContextPolicyState,\n} from \"./lean-context-policy.ts\";\n\nexport interface LeanContextBeforeProviderSendOptions extends LeanContextPolicyOptions {\n\treadonly enabled?: boolean;\n}\n\nexport interface LeanContextBeforeProviderSend {\n\treadonly beforeProviderSend: BeforeProviderSend;\n\tgetState(): LeanContextPolicyState;\n\treset(): void;\n}\n\nexport function createLeanContextBeforeProviderSend(\n\toptions: LeanContextBeforeProviderSendOptions = {},\n): LeanContextBeforeProviderSend {\n\tlet state = createLeanContextPolicyState();\n\n\treturn {\n\t\tbeforeProviderSend(input) {\n\t\t\tif (options.enabled === false) return undefined;\n\t\t\tconst result = transformContext(input.context, state, options);\n\t\t\tstate = result.nextState;\n\t\t\treturn result.changed ? result.context : undefined;\n\t\t},\n\t\tgetState() {\n\t\t\treturn state;\n\t\t},\n\t\treset() {\n\t\t\tstate = createLeanContextPolicyState();\n\t\t},\n\t};\n}\n\ninterface ContextTransformResult {\n\treadonly context: Context;\n\treadonly nextState: LeanContextPolicyState;\n\treadonly changed: boolean;\n}\n\nfunction transformContext(\n\tcontext: Context,\n\tinitialState: LeanContextPolicyState,\n\toptions: LeanContextBeforeProviderSendOptions,\n): ContextTransformResult {\n\tlet nextState = initialState;\n\tlet changed = false;\n\tconst messages = context.messages.map((message) => {\n\t\tif (message.role !== \"toolResult\") return message;\n\t\tconst result = transformToolResult(message, nextState, options);\n\t\tnextState = result.nextState;\n\t\tchanged = changed || result.changed;\n\t\treturn result.message;\n\t});\n\n\treturn {\n\t\tcontext: changed ? { ...context, messages } : context,\n\t\tnextState,\n\t\tchanged,\n\t};\n}\n\ninterface ToolResultTransformResult {\n\treadonly message: ToolResultMessage;\n\treadonly nextState: LeanContextPolicyState;\n\treadonly changed: boolean;\n}\n\nfunction transformToolResult(\n\tmessage: ToolResultMessage,\n\tinitialState: LeanContextPolicyState,\n\toptions: LeanContextBeforeProviderSendOptions,\n): ToolResultTransformResult {\n\tlet nextState = initialState;\n\tlet changed = false;\n\tconst content = message.content.map((block, index) => {\n\t\tif (block.type !== \"text\") return block;\n\t\tconst key = extractLeanContextKey(message, index);\n\t\tconst decision = decideLeanContextEmission({\n\t\t\tstate: nextState,\n\t\t\ttool: message.toolName,\n\t\t\tkey,\n\t\t\tpath: key,\n\t\t\tcontent: block.text,\n\t\t\tminStubTokens: options.minStubTokens,\n\t\t\tneverStubFilenames: options.neverStubFilenames,\n\t\t\tsecretPatterns: options.secretPatterns,\n\t\t});\n\t\tnextState = decision.nextState;\n\t\tif (decision.emit !== \"stub\" || decision.stub === undefined) return block;\n\t\tchanged = true;\n\t\treturn { type: \"text\", text: decision.stub } satisfies TextContent;\n\t});\n\n\treturn {\n\t\tmessage: changed ? { ...message, content } : message,\n\t\tnextState,\n\t\tchanged,\n\t};\n}\n\nfunction extractLeanContextKey(message: ToolResultMessage, contentIndex: number): string {\n\tconst details = asRecord(message.details);\n\tconst detailKey = firstStringValue(details, [\"leanContextKey\", \"path\", \"filePath\", \"command\", \"query\"]);\n\treturn detailKey ?? `${message.toolName}:${message.toolCallId}:${contentIndex}`;\n}\n\nfunction firstStringValue(record: Record<string, unknown> | undefined, keys: readonly string[]): string | undefined {\n\tif (!record) return undefined;\n\tfor (const key of keys) {\n\t\tconst value = record[key];\n\t\tif (typeof value === \"string\" && value.trim().length > 0) {\n\t\t\treturn value;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction asRecord(value: unknown): Record<string, unknown> | undefined {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value)\n\t\t? (value as Record<string, unknown>)\n\t\t: undefined;\n}\n"]}

package/dist/core/lean-context-middleware.js

@@ -0,0 +1,87 @@
+import { createLeanContextPolicyState, decideLeanContextEmission, } from "./lean-context-policy.js";
+export function createLeanContextBeforeProviderSend(options = {}) {
+    let state = createLeanContextPolicyState();
+    return {
+        beforeProviderSend(input) {
+            if (options.enabled === false)
+                return undefined;
+            const result = transformContext(input.context, state, options);
+            state = result.nextState;
+            return result.changed ? result.context : undefined;
+        },
+        getState() {
+            return state;
+        },
+        reset() {
+            state = createLeanContextPolicyState();
+        },
+    };
+}
+function transformContext(context, initialState, options) {
+    let nextState = initialState;
+    let changed = false;
+    const messages = context.messages.map((message) => {
+        if (message.role !== "toolResult")
+            return message;
+        const result = transformToolResult(message, nextState, options);
+        nextState = result.nextState;
+        changed = changed || result.changed;
+        return result.message;
+    });
+    return {
+        context: changed ? { ...context, messages } : context,
+        nextState,
+        changed,
+    };
+}
+function transformToolResult(message, initialState, options) {
+    let nextState = initialState;
+    let changed = false;
+    const content = message.content.map((block, index) => {
+        if (block.type !== "text")
+            return block;
+        const key = extractLeanContextKey(message, index);
+        const decision = decideLeanContextEmission({
+            state: nextState,
+            tool: message.toolName,
+            key,
+            path: key,
+            content: block.text,
+            minStubTokens: options.minStubTokens,
+            neverStubFilenames: options.neverStubFilenames,
+            secretPatterns: options.secretPatterns,
+        });
+        nextState = decision.nextState;
+        if (decision.emit !== "stub" || decision.stub === undefined)
+            return block;
+        changed = true;
+        return { type: "text", text: decision.stub };
+    });
+    return {
+        message: changed ? { ...message, content } : message,
+        nextState,
+        changed,
+    };
+}
+function extractLeanContextKey(message, contentIndex) {
+    const details = asRecord(message.details);
+    const detailKey = firstStringValue(details, ["leanContextKey", "path", "filePath", "command", "query"]);
+    return detailKey ?? `${message.toolName}:${message.toolCallId}:${contentIndex}`;
+}
+function firstStringValue(record, keys) {
+    if (!record)
+        return undefined;
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === "string" && value.trim().length > 0) {
+            return value;
+        }
+    }
+    return undefined;
+}
+function asRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+//# sourceMappingURL=lean-context-middleware.js.map

package/dist/core/lean-context-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lean-context-middleware.js","sourceRoot":"","sources":["../../src/core/lean-context-middleware.ts"],"names":[],"mappings":"AACA,OAAO,EACN,4BAA4B,EAC5B,yBAAyB,GAGzB,MAAM,0BAA0B,CAAC;AAYlC,MAAM,UAAU,mCAAmC,CAClD,OAAO,GAAyC,EAAE,EAClB;IAChC,IAAI,KAAK,GAAG,4BAA4B,EAAE,CAAC;IAE3C,OAAO;QACN,kBAAkB,CAAC,KAAK,EAAE;YACzB,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK;gBAAE,OAAO,SAAS,CAAC;YAChD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAC/D,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC;YACzB,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAAA,CACnD;QACD,QAAQ,GAAG;YACV,OAAO,KAAK,CAAC;QAAA,CACb;QACD,KAAK,GAAG;YACP,KAAK,GAAG,4BAA4B,EAAE,CAAC;QAAA,CACvC;KACD,CAAC;AAAA,CACF;AAQD,SAAS,gBAAgB,CACxB,OAAgB,EAChB,YAAoC,EACpC,OAA6C,EACpB;IACzB,IAAI,SAAS,GAAG,YAAY,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,OAAO,CAAC;QAClD,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAChE,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAC7B,OAAO,GAAG,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;QACpC,OAAO,MAAM,CAAC,OAAO,CAAC;IAAA,CACtB,CAAC,CAAC;IAEH,OAAO;QACN,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO;QACrD,SAAS;QACT,OAAO;KACP,CAAC;AAAA,CACF;AAQD,SAAS,mBAAmB,CAC3B,OAA0B,EAC1B,YAAoC,EACpC,OAA6C,EACjB;IAC5B,IAAI,SAAS,GAAG,YAAY,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,yBAAyB,CAAC;YAC1C,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,OAAO,CAAC,QAAQ;YACtB,GAAG;YACH,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,KAAK,CAAC,IAAI;YACnB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,cAAc,EAAE,OAAO,CAAC,cAAc;SACtC,CAAC,CAAC;QACH,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QAC/B,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC1E,OAAO,GAAG,IAAI,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAwB,CAAC;IAAA,CACnE,CAAC,CAAC;IAEH,OAAO;QACN,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO;QACpD,SAAS;QACT,OAAO;KACP,CAAC;AAAA,CACF;AAED,SAAS,qBAAqB,CAAC,OAA0B,EAAE,YAAoB,EAAU;IACxF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACxG,OAAO,SAAS,IAAI,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,UAAU,IAAI,YAAY,EAAE,CAAC;AAAA,CAChF;AAED,SAAS,gBAAgB,CAAC,MAA2C,EAAE,IAAuB,EAAsB;IACnH,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,QAAQ,CAAC,KAAc,EAAuC;IACtE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1E,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAAA,CACb","sourcesContent":["import type { BeforeProviderSend, Context, TextContent, ToolResultMessage } from \"@earendil-works/omk-ai\";\nimport {\n\tcreateLeanContextPolicyState,\n\tdecideLeanContextEmission,\n\ttype LeanContextPolicyOptions,\n\ttype LeanContextPolicyState,\n} from \"./lean-context-policy.ts\";\n\nexport interface LeanContextBeforeProviderSendOptions extends LeanContextPolicyOptions {\n\treadonly enabled?: boolean;\n}\n\nexport interface LeanContextBeforeProviderSend {\n\treadonly beforeProviderSend: BeforeProviderSend;\n\tgetState(): LeanContextPolicyState;\n\treset(): void;\n}\n\nexport function createLeanContextBeforeProviderSend(\n\toptions: LeanContextBeforeProviderSendOptions = {},\n): LeanContextBeforeProviderSend {\n\tlet state = createLeanContextPolicyState();\n\n\treturn {\n\t\tbeforeProviderSend(input) {\n\t\t\tif (options.enabled === false) return undefined;\n\t\t\tconst result = transformContext(input.context, state, options);\n\t\t\tstate = result.nextState;\n\t\t\treturn result.changed ? result.context : undefined;\n\t\t},\n\t\tgetState() {\n\t\t\treturn state;\n\t\t},\n\t\treset() {\n\t\t\tstate = createLeanContextPolicyState();\n\t\t},\n\t};\n}\n\ninterface ContextTransformResult {\n\treadonly context: Context;\n\treadonly nextState: LeanContextPolicyState;\n\treadonly changed: boolean;\n}\n\nfunction transformContext(\n\tcontext: Context,\n\tinitialState: LeanContextPolicyState,\n\toptions: LeanContextBeforeProviderSendOptions,\n): ContextTransformResult {\n\tlet nextState = initialState;\n\tlet changed = false;\n\tconst messages = context.messages.map((message) => {\n\t\tif (message.role !== \"toolResult\") return message;\n\t\tconst result = transformToolResult(message, nextState, options);\n\t\tnextState = result.nextState;\n\t\tchanged = changed || result.changed;\n\t\treturn result.message;\n\t});\n\n\treturn {\n\t\tcontext: changed ? { ...context, messages } : context,\n\t\tnextState,\n\t\tchanged,\n\t};\n}\n\ninterface ToolResultTransformResult {\n\treadonly message: ToolResultMessage;\n\treadonly nextState: LeanContextPolicyState;\n\treadonly changed: boolean;\n}\n\nfunction transformToolResult(\n\tmessage: ToolResultMessage,\n\tinitialState: LeanContextPolicyState,\n\toptions: LeanContextBeforeProviderSendOptions,\n): ToolResultTransformResult {\n\tlet nextState = initialState;\n\tlet changed = false;\n\tconst content = message.content.map((block, index) => {\n\t\tif (block.type !== \"text\") return block;\n\t\tconst key = extractLeanContextKey(message, index);\n\t\tconst decision = decideLeanContextEmission({\n\t\t\tstate: nextState,\n\t\t\ttool: message.toolName,\n\t\t\tkey,\n\t\t\tpath: key,\n\t\t\tcontent: block.text,\n\t\t\tminStubTokens: options.minStubTokens,\n\t\t\tneverStubFilenames: options.neverStubFilenames,\n\t\t\tsecretPatterns: options.secretPatterns,\n\t\t});\n\t\tnextState = decision.nextState;\n\t\tif (decision.emit !== \"stub\" || decision.stub === undefined) return block;\n\t\tchanged = true;\n\t\treturn { type: \"text\", text: decision.stub } satisfies TextContent;\n\t});\n\n\treturn {\n\t\tmessage: changed ? { ...message, content } : message,\n\t\tnextState,\n\t\tchanged,\n\t};\n}\n\nfunction extractLeanContextKey(message: ToolResultMessage, contentIndex: number): string {\n\tconst details = asRecord(message.details);\n\tconst detailKey = firstStringValue(details, [\"leanContextKey\", \"path\", \"filePath\", \"command\", \"query\"]);\n\treturn detailKey ?? `${message.toolName}:${message.toolCallId}:${contentIndex}`;\n}\n\nfunction firstStringValue(record: Record<string, unknown> | undefined, keys: readonly string[]): string | undefined {\n\tif (!record) return undefined;\n\tfor (const key of keys) {\n\t\tconst value = record[key];\n\t\tif (typeof value === \"string\" && value.trim().length > 0) {\n\t\t\treturn value;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction asRecord(value: unknown): Record<string, unknown> | undefined {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value)\n\t\t? (value as Record<string, unknown>)\n\t\t: undefined;\n}\n"]}

package/dist/core/lean-context-policy.d.ts

@@ -0,0 +1,45 @@
+export declare const LEAN_CONTEXT_DEFAULT_MIN_STUB_TOKENS = 256;
+export declare const LEAN_CONTEXT_NEVER_STUB_FILENAMES: readonly ["AGENTS.md", "CLAUDE.md", "SYSTEM.md"];
+export type LeanContextEmission = "full" | "stub";
+export type LeanContextDecisionReason = "first-pass" | "changed" | "unchanged" | "never-stub-parent-instruction" | "secret-pattern" | "below-min-token-threshold";
+export interface LeanContextPolicyState {
+    readonly hashesByToolKey: Readonly<Record<string, string>>;
+}
+export interface LeanContextPolicyOptions {
+    /** Repeated unchanged outputs below this token estimate stay full. */
+    readonly minStubTokens?: number;
+    /** Basenames that must never be replaced with an unchanged stub. */
+    readonly neverStubFilenames?: readonly string[];
+    /** Patterns that force full output when matched. */
+    readonly secretPatterns?: readonly RegExp[];
+}
+export interface LeanContextPolicyInput extends LeanContextPolicyOptions {
+    readonly state: LeanContextPolicyState;
+    readonly tool: string;
+    /** Stable caller-defined identity inside the tool, such as path or request key. */
+    readonly key: string;
+    readonly content: string;
+    /** Optional path used for parent-instruction filename checks. Defaults to key. */
+    readonly path?: string;
+}
+export interface LeanContextPolicyDecision {
+    readonly emit: LeanContextEmission;
+    readonly reason: LeanContextDecisionReason;
+    readonly contentSha256: string;
+    readonly previousSha256?: string;
+    readonly estimatedTokens: number;
+    readonly nextState: LeanContextPolicyState;
+    readonly stub?: string;
+}
+export declare function createLeanContextPolicyState(hashesByToolKey?: Readonly<Record<string, string>>): LeanContextPolicyState;
+export declare function decideLeanContextEmission(input: LeanContextPolicyInput): LeanContextPolicyDecision;
+export declare function getLeanContextTrackingHash(state: LeanContextPolicyState, tool: string, key: string): string | undefined;
+export declare function createLeanContextTrackingKey(tool: string, key: string): string;
+export declare function estimateLeanContextTokens(content: string): number;
+export declare function formatLeanContextUnchangedStub(input: {
+    readonly tool: string;
+    readonly key: string;
+    readonly contentSha256: string;
+    readonly estimatedTokens: number;
+}): string;
+//# sourceMappingURL=lean-context-policy.d.ts.map

package/dist/core/lean-context-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lean-context-policy.d.ts","sourceRoot":"","sources":["../../src/core/lean-context-policy.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,oCAAoC,MAAM,CAAC;AACxD,eAAO,MAAM,iCAAiC,kDAAmD,CAAC;AASlG,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,MAAM,CAAC;AAElD,MAAM,MAAM,yBAAyB,GAClC,YAAY,GACZ,SAAS,GACT,WAAW,GACX,+BAA+B,GAC/B,gBAAgB,GAChB,2BAA2B,CAAC;AAE/B,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,wBAAwB;IACxC,sEAAsE;IACtE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,oEAAoE;IACpE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,oDAAoD;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAuB,SAAQ,wBAAwB;IACvE,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,4BAA4B,CAC3C,eAAe,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,GACpD,sBAAsB,CAExB;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,sBAAsB,GAAG,yBAAyB,CA6ClG;AAED,wBAAgB,0BAA0B,CACzC,KAAK,EAAE,sBAAsB,EAC7B,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,GACT,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGjE;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CACjC,GAAG,MAAM,CAET","sourcesContent":["import { createHash } from \"node:crypto\";\n\nconst CHARS_PER_TOKEN_ESTIMATE = 4;\nconst TRACKING_KEY_SEPARATOR = \"\\u0000\";\n\nexport const LEAN_CONTEXT_DEFAULT_MIN_STUB_TOKENS = 256;\nexport const LEAN_CONTEXT_NEVER_STUB_FILENAMES = [\"AGENTS.md\", \"CLAUDE.md\", \"SYSTEM.md\"] as const;\n\nconst DEFAULT_SECRET_PATTERNS: readonly RegExp[] = [\n\t/-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----/i,\n\t/\\b(?:api[_-]?key|access[_-]?token|auth[_-]?token|refresh[_-]?token|client[_-]?secret|password|passwd|pwd)\\b\\s*[:=]\\s*[\"']?[^\\s\"']{8,}/i,\n\t/\\bauthorization\\s*:\\s*bearer\\s+[A-Za-z0-9._~+/=-]{10,}/i,\n\t/\\b(?:gh[pousr]_|sk-|xox[baprs]-)[A-Za-z0-9_=-]{10,}/i,\n];\n\nexport type LeanContextEmission = \"full\" | \"stub\";\n\nexport type LeanContextDecisionReason =\n\t| \"first-pass\"\n\t| \"changed\"\n\t| \"unchanged\"\n\t| \"never-stub-parent-instruction\"\n\t| \"secret-pattern\"\n\t| \"below-min-token-threshold\";\n\nexport interface LeanContextPolicyState {\n\treadonly hashesByToolKey: Readonly<Record<string, string>>;\n}\n\nexport interface LeanContextPolicyOptions {\n\t/** Repeated unchanged outputs below this token estimate stay full. */\n\treadonly minStubTokens?: number;\n\t/** Basenames that must never be replaced with an unchanged stub. */\n\treadonly neverStubFilenames?: readonly string[];\n\t/** Patterns that force full output when matched. */\n\treadonly secretPatterns?: readonly RegExp[];\n}\n\nexport interface LeanContextPolicyInput extends LeanContextPolicyOptions {\n\treadonly state: LeanContextPolicyState;\n\treadonly tool: string;\n\t/** Stable caller-defined identity inside the tool, such as path or request key. */\n\treadonly key: string;\n\treadonly content: string;\n\t/** Optional path used for parent-instruction filename checks. Defaults to key. */\n\treadonly path?: string;\n}\n\nexport interface LeanContextPolicyDecision {\n\treadonly emit: LeanContextEmission;\n\treadonly reason: LeanContextDecisionReason;\n\treadonly contentSha256: string;\n\treadonly previousSha256?: string;\n\treadonly estimatedTokens: number;\n\treadonly nextState: LeanContextPolicyState;\n\treadonly stub?: string;\n}\n\nexport function createLeanContextPolicyState(\n\thashesByToolKey: Readonly<Record<string, string>> = {},\n): LeanContextPolicyState {\n\treturn { hashesByToolKey: { ...hashesByToolKey } };\n}\n\nexport function decideLeanContextEmission(input: LeanContextPolicyInput): LeanContextPolicyDecision {\n\tconst contentSha256 = sha256Text(input.content);\n\tconst trackingKey = createLeanContextTrackingKey(input.tool, input.key);\n\tconst previousSha256 = input.state.hashesByToolKey[trackingKey];\n\tconst estimatedTokens = estimateLeanContextTokens(input.content);\n\tconst nextState = updateTrackedHash(input.state, trackingKey, contentSha256);\n\tconst baseDecision = {\n\t\tcontentSha256,\n\t\tpreviousSha256,\n\t\testimatedTokens,\n\t\tnextState,\n\t};\n\n\tif (previousSha256 === undefined) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"first-pass\" };\n\t}\n\n\tif (previousSha256 !== contentSha256) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"changed\" };\n\t}\n\n\tif (isNeverStubParentInstruction(input.path ?? input.key, input.neverStubFilenames)) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"never-stub-parent-instruction\" };\n\t}\n\n\tif (containsSecretPattern(input.content, input.secretPatterns)) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"secret-pattern\" };\n\t}\n\n\tconst minStubTokens = normalizeMinStubTokens(input.minStubTokens);\n\tif (estimatedTokens < minStubTokens) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"below-min-token-threshold\" };\n\t}\n\n\treturn {\n\t\t...baseDecision,\n\t\temit: \"stub\",\n\t\treason: \"unchanged\",\n\t\tstub: formatLeanContextUnchangedStub({\n\t\t\ttool: input.tool,\n\t\t\tkey: input.key,\n\t\t\tcontentSha256,\n\t\t\testimatedTokens,\n\t\t}),\n\t};\n}\n\nexport function getLeanContextTrackingHash(\n\tstate: LeanContextPolicyState,\n\ttool: string,\n\tkey: string,\n): string | undefined {\n\treturn state.hashesByToolKey[createLeanContextTrackingKey(tool, key)];\n}\n\nexport function createLeanContextTrackingKey(tool: string, key: string): string {\n\treturn `${tool}${TRACKING_KEY_SEPARATOR}${key}`;\n}\n\nexport function estimateLeanContextTokens(content: string): number {\n\tif (content.length === 0) return 0;\n\treturn Math.ceil(content.length / CHARS_PER_TOKEN_ESTIMATE);\n}\n\nexport function formatLeanContextUnchangedStub(input: {\n\treadonly tool: string;\n\treadonly key: string;\n\treadonly contentSha256: string;\n\treadonly estimatedTokens: number;\n}): string {\n\treturn `[lean-context] ${input.tool} result for ${input.key} unchanged; omitted ${input.estimatedTokens} estimated tokens (sha256:${input.contentSha256.slice(0, 12)}).`;\n}\n\nfunction updateTrackedHash(\n\tstate: LeanContextPolicyState,\n\ttrackingKey: string,\n\tcontentSha256: string,\n): LeanContextPolicyState {\n\tif (state.hashesByToolKey[trackingKey] === contentSha256) {\n\t\treturn state;\n\t}\n\treturn {\n\t\thashesByToolKey: {\n\t\t\t...state.hashesByToolKey,\n\t\t\t[trackingKey]: contentSha256,\n\t\t},\n\t};\n}\n\nfunction sha256Text(content: string): string {\n\treturn createHash(\"sha256\").update(content, \"utf8\").digest(\"hex\");\n}\n\nfunction isNeverStubParentInstruction(pathOrKey: string, filenames?: readonly string[]): boolean {\n\tconst allowedNames = filenames ?? LEAN_CONTEXT_NEVER_STUB_FILENAMES;\n\tconst basename = getBasename(pathOrKey).toUpperCase();\n\treturn allowedNames.some((name) => name.toUpperCase() === basename);\n}\n\nfunction getBasename(pathOrKey: string): string {\n\tconst normalized = pathOrKey.replaceAll(\"\\\\\", \"/\");\n\tconst parts = normalized.split(\"/\");\n\treturn parts.at(-1) ?? normalized;\n}\n\nfunction containsSecretPattern(content: string, patterns?: readonly RegExp[]): boolean {\n\tconst activePatterns = patterns ?? DEFAULT_SECRET_PATTERNS;\n\treturn activePatterns.some((pattern) => regexTestStateless(pattern, content));\n}\n\nfunction regexTestStateless(pattern: RegExp, content: string): boolean {\n\tconst flags = pattern.flags.replace(/[gy]/g, \"\");\n\treturn new RegExp(pattern.source, flags).test(content);\n}\n\nfunction normalizeMinStubTokens(value: number | undefined): number {\n\tif (value === undefined) return LEAN_CONTEXT_DEFAULT_MIN_STUB_TOKENS;\n\tif (!Number.isFinite(value) || value <= 0) return 0;\n\treturn Math.ceil(value);\n}\n"]}

package/dist/core/lean-context-policy.js

@@ -0,0 +1,108 @@
+import { createHash } from "node:crypto";
+const CHARS_PER_TOKEN_ESTIMATE = 4;
+const TRACKING_KEY_SEPARATOR = "\u0000";
+export const LEAN_CONTEXT_DEFAULT_MIN_STUB_TOKENS = 256;
+export const LEAN_CONTEXT_NEVER_STUB_FILENAMES = ["AGENTS.md", "CLAUDE.md", "SYSTEM.md"];
+const DEFAULT_SECRET_PATTERNS = [
+    /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----/i,
+    /\b(?:api[_-]?key|access[_-]?token|auth[_-]?token|refresh[_-]?token|client[_-]?secret|password|passwd|pwd)\b\s*[:=]\s*["']?[^\s"']{8,}/i,
+    /\bauthorization\s*:\s*bearer\s+[A-Za-z0-9._~+/=-]{10,}/i,
+    /\b(?:gh[pousr]_|sk-|xox[baprs]-)[A-Za-z0-9_=-]{10,}/i,
+];
+export function createLeanContextPolicyState(hashesByToolKey = {}) {
+    return { hashesByToolKey: { ...hashesByToolKey } };
+}
+export function decideLeanContextEmission(input) {
+    const contentSha256 = sha256Text(input.content);
+    const trackingKey = createLeanContextTrackingKey(input.tool, input.key);
+    const previousSha256 = input.state.hashesByToolKey[trackingKey];
+    const estimatedTokens = estimateLeanContextTokens(input.content);
+    const nextState = updateTrackedHash(input.state, trackingKey, contentSha256);
+    const baseDecision = {
+        contentSha256,
+        previousSha256,
+        estimatedTokens,
+        nextState,
+    };
+    if (previousSha256 === undefined) {
+        return { ...baseDecision, emit: "full", reason: "first-pass" };
+    }
+    if (previousSha256 !== contentSha256) {
+        return { ...baseDecision, emit: "full", reason: "changed" };
+    }
+    if (isNeverStubParentInstruction(input.path ?? input.key, input.neverStubFilenames)) {
+        return { ...baseDecision, emit: "full", reason: "never-stub-parent-instruction" };
+    }
+    if (containsSecretPattern(input.content, input.secretPatterns)) {
+        return { ...baseDecision, emit: "full", reason: "secret-pattern" };
+    }
+    const minStubTokens = normalizeMinStubTokens(input.minStubTokens);
+    if (estimatedTokens < minStubTokens) {
+        return { ...baseDecision, emit: "full", reason: "below-min-token-threshold" };
+    }
+    return {
+        ...baseDecision,
+        emit: "stub",
+        reason: "unchanged",
+        stub: formatLeanContextUnchangedStub({
+            tool: input.tool,
+            key: input.key,
+            contentSha256,
+            estimatedTokens,
+        }),
+    };
+}
+export function getLeanContextTrackingHash(state, tool, key) {
+    return state.hashesByToolKey[createLeanContextTrackingKey(tool, key)];
+}
+export function createLeanContextTrackingKey(tool, key) {
+    return `${tool}${TRACKING_KEY_SEPARATOR}${key}`;
+}
+export function estimateLeanContextTokens(content) {
+    if (content.length === 0)
+        return 0;
+    return Math.ceil(content.length / CHARS_PER_TOKEN_ESTIMATE);
+}
+export function formatLeanContextUnchangedStub(input) {
+    return `[lean-context] ${input.tool} result for ${input.key} unchanged; omitted ${input.estimatedTokens} estimated tokens (sha256:${input.contentSha256.slice(0, 12)}).`;
+}
+function updateTrackedHash(state, trackingKey, contentSha256) {
+    if (state.hashesByToolKey[trackingKey] === contentSha256) {
+        return state;
+    }
+    return {
+        hashesByToolKey: {
+            ...state.hashesByToolKey,
+            [trackingKey]: contentSha256,
+        },
+    };
+}
+function sha256Text(content) {
+    return createHash("sha256").update(content, "utf8").digest("hex");
+}
+function isNeverStubParentInstruction(pathOrKey, filenames) {
+    const allowedNames = filenames ?? LEAN_CONTEXT_NEVER_STUB_FILENAMES;
+    const basename = getBasename(pathOrKey).toUpperCase();
+    return allowedNames.some((name) => name.toUpperCase() === basename);
+}
+function getBasename(pathOrKey) {
+    const normalized = pathOrKey.replaceAll("\\", "/");
+    const parts = normalized.split("/");
+    return parts.at(-1) ?? normalized;
+}
+function containsSecretPattern(content, patterns) {
+    const activePatterns = patterns ?? DEFAULT_SECRET_PATTERNS;
+    return activePatterns.some((pattern) => regexTestStateless(pattern, content));
+}
+function regexTestStateless(pattern, content) {
+    const flags = pattern.flags.replace(/[gy]/g, "");
+    return new RegExp(pattern.source, flags).test(content);
+}
+function normalizeMinStubTokens(value) {
+    if (value === undefined)
+        return LEAN_CONTEXT_DEFAULT_MIN_STUB_TOKENS;
+    if (!Number.isFinite(value) || value <= 0)
+        return 0;
+    return Math.ceil(value);
+}
+//# sourceMappingURL=lean-context-policy.js.map

package/dist/core/lean-context-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lean-context-policy.js","sourceRoot":"","sources":["../../src/core/lean-context-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACnC,MAAM,sBAAsB,GAAG,QAAQ,CAAC;AAExC,MAAM,CAAC,MAAM,oCAAoC,GAAG,GAAG,CAAC;AACxD,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAElG,MAAM,uBAAuB,GAAsB;IAClD,wCAAwC;IACxC,wIAAwI;IACxI,yDAAyD;IACzD,sDAAsD;CACtD,CAAC;AA6CF,MAAM,UAAU,4BAA4B,CAC3C,eAAe,GAAqC,EAAE,EAC7B;IACzB,OAAO,EAAE,eAAe,EAAE,EAAE,GAAG,eAAe,EAAE,EAAE,CAAC;AAAA,CACnD;AAED,MAAM,UAAU,yBAAyB,CAAC,KAA6B,EAA6B;IACnG,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACxE,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,eAAe,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG;QACpB,aAAa;QACb,cAAc;QACd,eAAe;QACf,SAAS;KACT,CAAC;IAEF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,cAAc,KAAK,aAAa,EAAE,CAAC;QACtC,OAAO,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,4BAA4B,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACrF,OAAO,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IACnF,CAAC;IAED,IAAI,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,aAAa,GAAG,sBAAsB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClE,IAAI,eAAe,GAAG,aAAa,EAAE,CAAC;QACrC,OAAO,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAC/E,CAAC;IAED,OAAO;QACN,GAAG,YAAY;QACf,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,8BAA8B,CAAC;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,aAAa;YACb,eAAe;SACf,CAAC;KACF,CAAC;AAAA,CACF;AAED,MAAM,UAAU,0BAA0B,CACzC,KAA6B,EAC7B,IAAY,EACZ,GAAW,EACU;IACrB,OAAO,KAAK,CAAC,eAAe,CAAC,4BAA4B,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAAA,CACtE;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAY,EAAE,GAAW,EAAU;IAC/E,OAAO,GAAG,IAAI,GAAG,sBAAsB,GAAG,GAAG,EAAE,CAAC;AAAA,CAChD;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAe,EAAU;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,wBAAwB,CAAC,CAAC;AAAA,CAC5D;AAED,MAAM,UAAU,8BAA8B,CAAC,KAK9C,EAAU;IACV,OAAO,kBAAkB,KAAK,CAAC,IAAI,eAAe,KAAK,CAAC,GAAG,uBAAuB,KAAK,CAAC,eAAe,6BAA6B,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;AAAA,CACzK;AAED,SAAS,iBAAiB,CACzB,KAA6B,EAC7B,WAAmB,EACnB,aAAqB,EACI;IACzB,IAAI,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,KAAK,aAAa,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO;QACN,eAAe,EAAE;YAChB,GAAG,KAAK,CAAC,eAAe;YACxB,CAAC,WAAW,CAAC,EAAE,aAAa;SAC5B;KACD,CAAC;AAAA,CACF;AAED,SAAS,UAAU,CAAC,OAAe,EAAU;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAClE;AAED,SAAS,4BAA4B,CAAC,SAAiB,EAAE,SAA6B,EAAW;IAChG,MAAM,YAAY,GAAG,SAAS,IAAI,iCAAiC,CAAC;IACpE,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,CAAC;AAAA,CACpE;AAED,SAAS,WAAW,CAAC,SAAiB,EAAU;IAC/C,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC;AAAA,CAClC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,QAA4B,EAAW;IACtF,MAAM,cAAc,GAAG,QAAQ,IAAI,uBAAuB,CAAC;IAC3D,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAAA,CAC9E;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,OAAe,EAAW;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAAA,CACvD;AAED,SAAS,sBAAsB,CAAC,KAAyB,EAAU;IAClE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,oCAAoC,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CACxB","sourcesContent":["import { createHash } from \"node:crypto\";\n\nconst CHARS_PER_TOKEN_ESTIMATE = 4;\nconst TRACKING_KEY_SEPARATOR = \"\\u0000\";\n\nexport const LEAN_CONTEXT_DEFAULT_MIN_STUB_TOKENS = 256;\nexport const LEAN_CONTEXT_NEVER_STUB_FILENAMES = [\"AGENTS.md\", \"CLAUDE.md\", \"SYSTEM.md\"] as const;\n\nconst DEFAULT_SECRET_PATTERNS: readonly RegExp[] = [\n\t/-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----/i,\n\t/\\b(?:api[_-]?key|access[_-]?token|auth[_-]?token|refresh[_-]?token|client[_-]?secret|password|passwd|pwd)\\b\\s*[:=]\\s*[\"']?[^\\s\"']{8,}/i,\n\t/\\bauthorization\\s*:\\s*bearer\\s+[A-Za-z0-9._~+/=-]{10,}/i,\n\t/\\b(?:gh[pousr]_|sk-|xox[baprs]-)[A-Za-z0-9_=-]{10,}/i,\n];\n\nexport type LeanContextEmission = \"full\" | \"stub\";\n\nexport type LeanContextDecisionReason =\n\t| \"first-pass\"\n\t| \"changed\"\n\t| \"unchanged\"\n\t| \"never-stub-parent-instruction\"\n\t| \"secret-pattern\"\n\t| \"below-min-token-threshold\";\n\nexport interface LeanContextPolicyState {\n\treadonly hashesByToolKey: Readonly<Record<string, string>>;\n}\n\nexport interface LeanContextPolicyOptions {\n\t/** Repeated unchanged outputs below this token estimate stay full. */\n\treadonly minStubTokens?: number;\n\t/** Basenames that must never be replaced with an unchanged stub. */\n\treadonly neverStubFilenames?: readonly string[];\n\t/** Patterns that force full output when matched. */\n\treadonly secretPatterns?: readonly RegExp[];\n}\n\nexport interface LeanContextPolicyInput extends LeanContextPolicyOptions {\n\treadonly state: LeanContextPolicyState;\n\treadonly tool: string;\n\t/** Stable caller-defined identity inside the tool, such as path or request key. */\n\treadonly key: string;\n\treadonly content: string;\n\t/** Optional path used for parent-instruction filename checks. Defaults to key. */\n\treadonly path?: string;\n}\n\nexport interface LeanContextPolicyDecision {\n\treadonly emit: LeanContextEmission;\n\treadonly reason: LeanContextDecisionReason;\n\treadonly contentSha256: string;\n\treadonly previousSha256?: string;\n\treadonly estimatedTokens: number;\n\treadonly nextState: LeanContextPolicyState;\n\treadonly stub?: string;\n}\n\nexport function createLeanContextPolicyState(\n\thashesByToolKey: Readonly<Record<string, string>> = {},\n): LeanContextPolicyState {\n\treturn { hashesByToolKey: { ...hashesByToolKey } };\n}\n\nexport function decideLeanContextEmission(input: LeanContextPolicyInput): LeanContextPolicyDecision {\n\tconst contentSha256 = sha256Text(input.content);\n\tconst trackingKey = createLeanContextTrackingKey(input.tool, input.key);\n\tconst previousSha256 = input.state.hashesByToolKey[trackingKey];\n\tconst estimatedTokens = estimateLeanContextTokens(input.content);\n\tconst nextState = updateTrackedHash(input.state, trackingKey, contentSha256);\n\tconst baseDecision = {\n\t\tcontentSha256,\n\t\tpreviousSha256,\n\t\testimatedTokens,\n\t\tnextState,\n\t};\n\n\tif (previousSha256 === undefined) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"first-pass\" };\n\t}\n\n\tif (previousSha256 !== contentSha256) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"changed\" };\n\t}\n\n\tif (isNeverStubParentInstruction(input.path ?? input.key, input.neverStubFilenames)) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"never-stub-parent-instruction\" };\n\t}\n\n\tif (containsSecretPattern(input.content, input.secretPatterns)) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"secret-pattern\" };\n\t}\n\n\tconst minStubTokens = normalizeMinStubTokens(input.minStubTokens);\n\tif (estimatedTokens < minStubTokens) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"below-min-token-threshold\" };\n\t}\n\n\treturn {\n\t\t...baseDecision,\n\t\temit: \"stub\",\n\t\treason: \"unchanged\",\n\t\tstub: formatLeanContextUnchangedStub({\n\t\t\ttool: input.tool,\n\t\t\tkey: input.key,\n\t\t\tcontentSha256,\n\t\t\testimatedTokens,\n\t\t}),\n\t};\n}\n\nexport function getLeanContextTrackingHash(\n\tstate: LeanContextPolicyState,\n\ttool: string,\n\tkey: string,\n): string | undefined {\n\treturn state.hashesByToolKey[createLeanContextTrackingKey(tool, key)];\n}\n\nexport function createLeanContextTrackingKey(tool: string, key: string): string {\n\treturn `${tool}${TRACKING_KEY_SEPARATOR}${key}`;\n}\n\nexport function estimateLeanContextTokens(content: string): number {\n\tif (content.length === 0) return 0;\n\treturn Math.ceil(content.length / CHARS_PER_TOKEN_ESTIMATE);\n}\n\nexport function formatLeanContextUnchangedStub(input: {\n\treadonly tool: string;\n\treadonly key: string;\n\treadonly contentSha256: string;\n\treadonly estimatedTokens: number;\n}): string {\n\treturn `[lean-context] ${input.tool} result for ${input.key} unchanged; omitted ${input.estimatedTokens} estimated tokens (sha256:${input.contentSha256.slice(0, 12)}).`;\n}\n\nfunction updateTrackedHash(\n\tstate: LeanContextPolicyState,\n\ttrackingKey: string,\n\tcontentSha256: string,\n): LeanContextPolicyState {\n\tif (state.hashesByToolKey[trackingKey] === contentSha256) {\n\t\treturn state;\n\t}\n\treturn {\n\t\thashesByToolKey: {\n\t\t\t...state.hashesByToolKey,\n\t\t\t[trackingKey]: contentSha256,\n\t\t},\n\t};\n}\n\nfunction sha256Text(content: string): string {\n\treturn createHash(\"sha256\").update(content, \"utf8\").digest(\"hex\");\n}\n\nfunction isNeverStubParentInstruction(pathOrKey: string, filenames?: readonly string[]): boolean {\n\tconst allowedNames = filenames ?? LEAN_CONTEXT_NEVER_STUB_FILENAMES;\n\tconst basename = getBasename(pathOrKey).toUpperCase();\n\treturn allowedNames.some((name) => name.toUpperCase() === basename);\n}\n\nfunction getBasename(pathOrKey: string): string {\n\tconst normalized = pathOrKey.replaceAll(\"\\\\\", \"/\");\n\tconst parts = normalized.split(\"/\");\n\treturn parts.at(-1) ?? normalized;\n}\n\nfunction containsSecretPattern(content: string, patterns?: readonly RegExp[]): boolean {\n\tconst activePatterns = patterns ?? DEFAULT_SECRET_PATTERNS;\n\treturn activePatterns.some((pattern) => regexTestStateless(pattern, content));\n}\n\nfunction regexTestStateless(pattern: RegExp, content: string): boolean {\n\tconst flags = pattern.flags.replace(/[gy]/g, \"\");\n\treturn new RegExp(pattern.source, flags).test(content);\n}\n\nfunction normalizeMinStubTokens(value: number | undefined): number {\n\tif (value === undefined) return LEAN_CONTEXT_DEFAULT_MIN_STUB_TOKENS;\n\tif (!Number.isFinite(value) || value <= 0) return 0;\n\treturn Math.ceil(value);\n}\n"]}

package/dist/core/loadout-access-policy.d.ts

@@ -0,0 +1,41 @@
+import type { LoadoutAccessEntry, LoadoutCommands } from "./loadouts.ts";
+export type LoadoutAccessOperation = "read" | "write" | "execute";
+export interface CreateLoadoutAccessPolicyOptions {
+    cwd: string;
+    activeTools: readonly string[];
+    readSet?: readonly LoadoutAccessEntry[];
+    writeSet?: readonly LoadoutAccessEntry[];
+    blockedPaths?: readonly string[];
+    commands?: LoadoutCommands;
+}
+export interface LoadoutAccessPolicy {
+    cwd: string;
+    activeTools: readonly string[];
+    readRoots: readonly string[];
+    writeRoots: readonly string[];
+    blockedPaths: readonly string[];
+    commands: LoadoutCommands;
+}
+export interface LoadoutPathAccessRequest {
+    operation: "read" | "write";
+    toolName: string;
+    path: string;
+}
+export interface LoadoutCommandAccessRequest {
+    operation: "execute";
+    toolName: string;
+    command: string;
+}
+export type LoadoutAccessRequest = LoadoutPathAccessRequest | LoadoutCommandAccessRequest;
+export interface LoadoutAccessDecision {
+    allowed: boolean;
+    reason: string;
+    normalizedPath?: string;
+    normalizedCommand?: string;
+}
+export type LoadoutAccessGuard = (request: LoadoutAccessRequest) => LoadoutAccessDecision;
+export declare function assertLoadoutAccess(guard: LoadoutAccessGuard | undefined, request: LoadoutAccessRequest): void;
+export declare function createLoadoutAccessPolicy(options: CreateLoadoutAccessPolicyOptions): LoadoutAccessPolicy;
+export declare function isActiveLoadoutTool(policy: Pick<LoadoutAccessPolicy, "activeTools">, toolName: string): boolean;
+export declare function decideLoadoutAccess(policy: LoadoutAccessPolicy, request: LoadoutAccessRequest): LoadoutAccessDecision;
+//# sourceMappingURL=loadout-access-policy.d.ts.map

package/dist/core/loadout-access-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadout-access-policy.d.ts","sourceRoot":"","sources":["../../src/core/loadout-access-policy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEzE,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;AAElE,MAAM,WAAW,gCAAgC;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,OAAO,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACxC,QAAQ,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACzC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,EAAE,eAAe,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACxC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,2BAA2B;IAC3C,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,oBAAoB,GAAG,wBAAwB,GAAG,2BAA2B,CAAC;AAE1F,MAAM,WAAW,qBAAqB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,oBAAoB,KAAK,qBAAqB,CAAC;AAE1F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,GAAG,SAAS,EAAE,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAM9G;AAID,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,gCAAgC,GAAG,mBAAmB,CAYxG;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE/G;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,oBAAoB,GAAG,qBAAqB,CAMrH","sourcesContent":["import { existsSync, realpathSync } from \"node:fs\";\nimport { basename, dirname, isAbsolute, relative, resolve } from \"node:path\";\nimport type { LoadoutAccessEntry, LoadoutCommands } from \"./loadouts.ts\";\n\nexport type LoadoutAccessOperation = \"read\" | \"write\" | \"execute\";\n\nexport interface CreateLoadoutAccessPolicyOptions {\n\tcwd: string;\n\tactiveTools: readonly string[];\n\treadSet?: readonly LoadoutAccessEntry[];\n\twriteSet?: readonly LoadoutAccessEntry[];\n\tblockedPaths?: readonly string[];\n\tcommands?: LoadoutCommands;\n}\n\nexport interface LoadoutAccessPolicy {\n\tcwd: string;\n\tactiveTools: readonly string[];\n\treadRoots: readonly string[];\n\twriteRoots: readonly string[];\n\tblockedPaths: readonly string[];\n\tcommands: LoadoutCommands;\n}\n\nexport interface LoadoutPathAccessRequest {\n\toperation: \"read\" | \"write\";\n\ttoolName: string;\n\tpath: string;\n}\n\nexport interface LoadoutCommandAccessRequest {\n\toperation: \"execute\";\n\ttoolName: string;\n\tcommand: string;\n}\n\nexport type LoadoutAccessRequest = LoadoutPathAccessRequest | LoadoutCommandAccessRequest;\n\nexport interface LoadoutAccessDecision {\n\tallowed: boolean;\n\treason: string;\n\tnormalizedPath?: string;\n\tnormalizedCommand?: string;\n}\n\nexport type LoadoutAccessGuard = (request: LoadoutAccessRequest) => LoadoutAccessDecision;\n\nexport function assertLoadoutAccess(guard: LoadoutAccessGuard | undefined, request: LoadoutAccessRequest): void {\n\tif (!guard) return;\n\tconst decision = guard(request);\n\tif (!decision.allowed) {\n\t\tthrow new Error(`loadout: ${decision.reason}`);\n\t}\n}\n\nconst DEFAULT_BLOCKED_PATHS = [\"**/.env*\", \"**/*secret*\", \"**/*key*\", \"**/.git\", \"**/.git/*\"] as const;\n\nexport function createLoadoutAccessPolicy(options: CreateLoadoutAccessPolicyOptions): LoadoutAccessPolicy {\n\tconst cwd = normalizeRootPath(options.cwd);\n\treturn {\n\t\tcwd,\n\t\tactiveTools: uniqueSorted(\n\t\t\toptions.activeTools.map((toolName) => toolName.trim()).filter((toolName) => toolName !== \"\"),\n\t\t),\n\t\treadRoots: normalizeAccessSet(cwd, options.readSet),\n\t\twriteRoots: normalizeAccessSet(cwd, options.writeSet),\n\t\tblockedPaths: uniqueSorted(options.blockedPaths ?? DEFAULT_BLOCKED_PATHS),\n\t\tcommands: options.commands ?? { mode: \"none\" },\n\t};\n}\n\nexport function isActiveLoadoutTool(policy: Pick<LoadoutAccessPolicy, \"activeTools\">, toolName: string): boolean {\n\treturn policy.activeTools.includes(toolName.trim());\n}\n\nexport function decideLoadoutAccess(policy: LoadoutAccessPolicy, request: LoadoutAccessRequest): LoadoutAccessDecision {\n\tif (!isActiveLoadoutTool(policy, request.toolName)) {\n\t\treturn deny(`inactive tool: ${request.toolName}`);\n\t}\n\tif (request.operation === \"execute\") return decideCommandAccess(policy, request);\n\treturn decidePathAccess(policy, request);\n}\n\nfunction decidePathAccess(policy: LoadoutAccessPolicy, request: LoadoutPathAccessRequest): LoadoutAccessDecision {\n\tconst normalizedPath = normalizeRequestPath(policy.cwd, request.path);\n\tif (!normalizedPath) return deny(\"invalid path\");\n\tif (isBlockedPath(policy, normalizedPath)) return deny(\"blocked path\", normalizedPath);\n\n\tif (request.operation === \"read\") {\n\t\tconst roots = uniqueSorted([...policy.readRoots, ...policy.writeRoots]);\n\t\tif (roots.length === 0) return deny(\"outside read scope: empty read/write set\", normalizedPath);\n\t\tif (roots.some((root) => containsPath(root, normalizedPath))) return allow(normalizedPath);\n\t\treturn deny(\"outside read scope\", normalizedPath);\n\t}\n\n\tif (policy.writeRoots.length === 0) return deny(\"outside write scope: empty write set\", normalizedPath);\n\tif (policy.writeRoots.some((root) => containsPath(root, normalizedPath))) return allow(normalizedPath);\n\treturn deny(\"outside write scope\", normalizedPath);\n}\n\nfunction decideCommandAccess(policy: LoadoutAccessPolicy, request: LoadoutCommandAccessRequest): LoadoutAccessDecision {\n\tconst normalizedCommand = request.command.trim();\n\tif (normalizedCommand === \"\" || normalizedCommand.includes(\"\\0\")) return denyCommand(\"invalid command\");\n\tif (policy.commands.mode === \"none\") return denyCommand(\"command mode none\");\n\tif (policy.commands.blockPatterns?.some((pattern) => commandMatchesPattern(pattern, normalizedCommand))) {\n\t\treturn denyCommand(\"blocked command pattern\");\n\t}\n\tif (policy.commands.allowPatterns?.some((pattern) => commandMatchesPattern(pattern, normalizedCommand))) {\n\t\treturn { allowed: true, reason: \"allowed\", normalizedCommand };\n\t}\n\treturn denyCommand(`command mode ${policy.commands.mode} requires an explicit allow pattern`);\n}\n\nfunction allow(normalizedPath: string): LoadoutAccessDecision {\n\treturn { allowed: true, reason: \"allowed\", normalizedPath };\n}\n\nfunction deny(reason: string, normalizedPath?: string): LoadoutAccessDecision {\n\treturn { allowed: false, reason, normalizedPath };\n}\n\nfunction denyCommand(reason: string): LoadoutAccessDecision {\n\treturn { allowed: false, reason };\n}\n\nfunction normalizeRootPath(path: string): string {\n\tconst normalized = normalizePathSeparators(path);\n\tif (normalized.trim() === \"\" || normalized.includes(\"\\0\")) {\n\t\tthrow new Error(\"loadout access policy cwd must be a non-empty path\");\n\t}\n\treturn stripTrailingSeparator(canonicalizeExistingPrefix(resolve(normalized)));\n}\n\nfunction normalizeRequestPath(cwd: string, requestedPath: string): string | undefined {\n\tconst normalized = normalizePathSeparators(requestedPath);\n\tif (normalized.trim() === \"\" || normalized.includes(\"\\0\")) return undefined;\n\treturn stripTrailingSeparator(canonicalizeExistingPrefix(resolve(cwd, normalized)));\n}\n\nfunction normalizeAccessSet(cwd: string, accessSet: readonly LoadoutAccessEntry[] | undefined): string[] {\n\tif (!accessSet) return [];\n\tconst roots: string[] = [];\n\tfor (const entry of accessSet) {\n\t\tif (entry.symbols && entry.symbols.length > 0) continue;\n\t\tconst normalized = normalizePathSeparators(entry.path);\n\t\tif (normalized.trim() === \"\" || normalized.includes(\"\\0\")) continue;\n\t\troots.push(stripTrailingSeparator(canonicalizeExistingPrefix(resolve(cwd, normalized))));\n\t}\n\treturn uniqueSorted(roots);\n}\n\nfunction canonicalizeExistingPrefix(path: string): string {\n\ttry {\n\t\treturn realpathSync.native(path);\n\t} catch {\n\t\tif (existsSync(path)) return resolve(path);\n\t\tconst parent = dirname(path);\n\t\tif (parent === path) return resolve(path);\n\t\treturn resolve(canonicalizeExistingPrefix(parent), basename(path));\n\t}\n}\n\nfunction containsPath(root: string, candidate: string): boolean {\n\tif (candidate === root) return true;\n\tconst relativePath = relative(root, candidate);\n\treturn relativePath !== \"\" && !relativePath.startsWith(\"..\") && !isAbsolute(relativePath);\n}\n\nfunction isBlockedPath(policy: LoadoutAccessPolicy, normalizedPath: string): boolean {\n\tconst relativeCandidate = toForwardSlashes(relative(policy.cwd, normalizedPath));\n\tconst candidates = uniqueSorted([toForwardSlashes(normalizedPath), relativeCandidate]);\n\treturn policy.blockedPaths.some((pattern) => candidates.some((candidate) => globMatch(pattern, candidate)));\n}\n\nfunction commandMatchesPattern(pattern: string, command: string): boolean {\n\treturn pattern === command || globMatch(pattern, command);\n}\n\nfunction normalizePathSeparators(path: string): string {\n\treturn path.replaceAll(\"\\\\\", \"/\");\n}\n\nfunction stripTrailingSeparator(path: string): string {\n\tif (path === \"/\") return path;\n\treturn path.endsWith(\"/\") ? path.slice(0, -1) : path;\n}\n\nfunction toForwardSlashes(path: string): string {\n\treturn path.replaceAll(\"\\\\\", \"/\");\n}\n\nfunction globMatch(glob: string, value: string): boolean {\n\treturn globToRegExp(normalizePathSeparators(glob)).test(toForwardSlashes(value));\n}\n\nfunction globToRegExp(glob: string): RegExp {\n\tlet pattern = \"\";\n\tfor (let index = 0; index < glob.length; index++) {\n\t\tconst char = glob[index];\n\t\tif (char === \"*\") {\n\t\t\tif (glob[index + 1] === \"*\") {\n\t\t\t\tif (glob[index + 2] === \"/\") {\n\t\t\t\t\tpattern += \"(?:.*/)?\";\n\t\t\t\t\tindex += 2;\n\t\t\t\t} else {\n\t\t\t\t\tpattern += \".*\";\n\t\t\t\t\tindex++;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tpattern += \"[^/]*\";\n\t\t\t}\n\t\t} else if (char === \"?\") {\n\t\t\tpattern += \"[^/]\";\n\t\t} else {\n\t\t\tpattern += char.replace(/[.+^${}()|[\\]\\\\]/g, \"\\\\$&\");\n\t\t}\n\t}\n\treturn new RegExp(`^${pattern}$`);\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)].sort((a, b) => {\n\t\tif (a < b) return -1;\n\t\tif (a > b) return 1;\n\t\treturn 0;\n\t});\n}\n"]}