open-walnut 0.3.0

package/package.json

@@ -0,0 +1,143 @@
+{
+  "name": "open-walnut",
+  "version": "0.3.0",
+  "description": "Personal AI butler powered by Claude — task management, Claude Code sessions, memory system, and web UI",
+  "license": "MIT",
+  "homepage": "https://github.com/EvanZhang008/open-walnut",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/EvanZhang008/open-walnut.git"
+  },
+  "keywords": [
+    "ai",
+    "task-manager",
+    "claude",
+    "claude-code",
+    "personal-assistant",
+    "productivity",
+    "self-hosted",
+    "local-first",
+    "ai-agent",
+    "web-ui",
+    "knowledge-management",
+    "typescript",
+    "cli",
+    "ai-butler",
+    "automation"
+  ],
+  "type": "module",
+  "bin": {
+    "open-walnut": "./bin/open-walnut.js",
+    "walnut": "./bin/open-walnut.js"
+  },
+  "main": "./dist/cli.js",
+  "engines": {
+    "node": ">=22"
+  },
+  "files": [
+    "bin",
+    "dist",
+    "!dist/daemon-binaries/daemon-*",
+    "!dist/**/*.map",
+    "!dist/**/*.gz",
+    "patches",
+    "scripts/patch-qmd.mjs",
+    "scripts/postinstall.mjs",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "postinstall": "node scripts/postinstall.mjs",
+    "prepublishOnly": "npm run build && cd web && npx vite build && cd .. && node scripts/check-publish.mjs",
+    "start": "npm run web:build && node dist/cli.js web --port 3456",
+    "build": "bash scripts/build-daemon.sh && tsup && rm -rf dist/data && cp -r src/data dist/ && for d in src/integrations/*/manifest.json; do cp \"$d\" \"dist/integrations/$(basename $(dirname $d))/\"; done",
+    "dev": "tsup --watch",
+    "test": "node scripts/test-parallel.mjs",
+    "test:quick": "vitest run --config vitest.quick.config.ts",
+    "test:slow": "vitest run --config vitest.slow.config.ts",
+    "test:focus": "vitest run --config vitest.focus.config.ts",
+    "test:frontend:ci": "node scripts/test-frontend.mjs",
+    "test:changed": "node scripts/test-changed.mjs",
+    "test:baseline": "node scripts/test-baseline.mjs check",
+    "test:baseline:record": "node scripts/test-baseline.mjs record",
+    "test:pre-commit": "node scripts/test-changed.mjs --tiers",
+    "test:unit": "vitest run --config vitest.unit.config.ts",
+    "test:integration": "vitest run --config vitest.integration.config.ts",
+    "test:e2e": "vitest run --config vitest.e2e.config.ts",
+    "test:live": "WALNUT_LIVE_TEST=1 vitest run --config vitest.live.config.ts",
+    "test:live:daemon": "bash scripts/run-live-daemon-tests.sh",
+    "test:live:cloud": "bash scripts/run-live-cloud-tests.sh",
+    "test:live:aws-setup": "bash scripts/run-live-aws-cloud-setup.sh",
+    "test:full": "npm run test && npm run test:e2e && npm run test:live:daemon && npm run test:live:cloud",
+    "test:all": "npm run lint && npm run lint:paths && npm run test && npx playwright test",
+    "lint:paths": "bash scripts/lint-production-paths.sh",
+    "test:coverage": "vitest run --coverage",
+    "test:watch": "vitest",
+    "build:daemon": "bash scripts/build-daemon.sh",
+    "lint": "tsc --noEmit",
+    "web": "node dist/web/server.js",
+    "web:dev": "concurrently \"tsup --watch\" \"cd web && npx vite\"",
+    "web:build": "bash scripts/build-daemon.sh && tsup && rm -rf dist/data && cp -r src/data dist/ && for d in src/integrations/*/manifest.json; do cp \"$d\" \"dist/integrations/$(basename $(dirname $d))/\"; done && cd web && npx vite build",
+    "dev:ephemeral": "npm run web:build && node dist/cli.js web --ephemeral",
+    "dev:demo": "npm run web:build && (lsof -ti:3457 -sTCP:LISTEN | xargs kill -15 2>/dev/null || true); (cat /tmp/open-walnut-demo/daemon.pid 2>/dev/null | xargs kill -15 2>/dev/null || true); sleep 1; echo \"Demo server: http://localhost:3457  (data: $HOME/.open-walnut-demo, daemon: /tmp/open-walnut-demo — fully isolated from prod)\"; OPEN_WALNUT_HOME=\"$HOME/.open-walnut-demo\" WALNUT_DAEMON_DIR=/tmp/open-walnut-demo node dist/cli.js web --port 3457",
+    "dev:prod": "bash scripts/dev-prod.sh",
+    "prepare": "husky"
+  },
+  "dependencies": {
+    "@agentclientprotocol/codex-acp": "1.1.4",
+    "@agentclientprotocol/sdk": "1.2.1",
+    "@anthropic-ai/bedrock-sdk": "^0.26.3",
+    "@anthropic-ai/claude-agent-sdk": "0.2.50",
+    "@anthropic-ai/tokenizer": "^0.0.4",
+    "@aws-sdk/client-sts": "^3.996.0",
+    "@azure/msal-node": "^5.0.3",
+    "@google/generative-ai": "^0.24.1",
+    "@homebridge/node-pty-prebuilt-multiarch": "^0.12.0",
+    "@mozilla/readability": "^0.6.0",
+    "@slack/web-api": "^7.14.0",
+    "@tiptap/extension-image": "^3.20.1",
+    "@tobilu/qmd": "2.1.0",
+    "better-sqlite3": "^12.6.2",
+    "chalk": "^5.4.1",
+    "commander": "^14.0.0",
+    "compression": "^1.8.1",
+    "cors": "^2.8.6",
+    "croner": "^10.0.1",
+    "esbuild": "^0.27.3",
+    "express": "^5.2.1",
+    "image-size": "^2.0.2",
+    "js-yaml": "^4.1.0",
+    "linkedom": "^0.18.12",
+    "marked": "^15.0.12",
+    "marked-terminal": "^7.3.0",
+    "openai": "^6.29.0",
+    "sharp": "^0.34.5",
+    "ws": "^8.19.0"
+  },
+  "optionalDependencies": {
+    "screencapturekit-audio-capture": "^1.3.6"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.58.2",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/compression": "^1.8.1",
+    "@types/cors": "^2.8.19",
+    "@types/express": "^5.0.6",
+    "@types/image-size": "^0.7.0",
+    "@types/js-yaml": "^4.0.9",
+    "@types/marked-terminal": "^6.1.1",
+    "@types/node": "^22.15.0",
+    "@types/sharp": "^0.31.1",
+    "@types/supertest": "^6.0.3",
+    "@types/ws": "^8.18.1",
+    "@vitest/coverage-v8": "^3.1.0",
+    "concurrently": "^9.2.1",
+    "husky": "^9.1.7",
+    "patch-package": "^8.0.1",
+    "supertest": "^7.2.2",
+    "tsup": "^8.5.0",
+    "tsx": "^4.23.1",
+    "typescript": "^5.8.0",
+    "vitest": "^3.1.0"
+  }
+}

package/patches/@anthropic-ai+claude-agent-sdk+0.2.50.patch

@@ -0,0 +1,13 @@
+diff --git a/node_modules/@anthropic-ai/claude-agent-sdk/cli.js b/node_modules/@anthropic-ai/claude-agent-sdk/cli.js
+index 394c46b..745b6cc 100755
+--- a/node_modules/@anthropic-ai/claude-agent-sdk/cli.js
++++ b/node_modules/@anthropic-ai/claude-agent-sdk/cli.js
+@@ -4895,7 +4895,7 @@ The scratchpad directory is session-specific, isolated from the user's project,
+ <system-reminder>
+ Whenever you read a file, you should consider whether it would be considered malware. You CAN and SHOULD provide analysis of malware, what it is doing. But you MUST refuse to improve or augment the code. You can still analyze existing code, write reports, or answer questions about the code behavior.
+ </system-reminder>
+-`,D4z;var XR=E(()=>{H4();P7();V8();rS();j4();cK6();NX8();hz();bH1();S1();N_();uz();$z1();cX8();kA();zV();TA();Rwq();gZ1();p1();Aq();j4();U1();Ue();t7z=new Set(["/dev/zero","/dev/random","/dev/urandom","/dev/full","/dev/stdin","/dev/tty","/dev/console","/dev/stdout","/dev/stderr","/dev/fd/0","/dev/fd/1","/dev/fd/2"]);A4z=String.fromCharCode(8239);K4z=[];jZ1=class jZ1 extends Error{tokenCount;maxTokens;constructor(A,q){super(`File content (${A} tokens) exceeds maximum allowed tokens (${q}). Please use offset and limit parameters to read specific portions of the file, or use the GrepTool to search for specific content.`);this.tokenCount=A;this.maxTokens=q;this.name="MaxFileReadTokenExceededError"}};z4z=new Set(["png","jpg","jpeg","gif","webp"]),w4z=new Set(["mp3","wav","flac","ogg","aac","m4a","wma","aiff","opus","mp4","avi","mov","wmv","flv","mkv","webm","m4v","mpeg","mpg","zip","rar","tar","gz","bz2","7z","xz","z","tgz","iso","exe","dll","so","dylib","app","msi","deb","rpm","bin","dat","db","sqlite","sqlite3","mdb","idx","doc","docx","xls","xlsx","ppt","pptx","odt","ods","odp","ttf","otf","woff","woff2","eot","psd","ai","eps","sketch","fig","xd","blend","obj","3ds","max","class","jar","war","pyc","pyo","rlib","swf","fla"]);$4z=y1(()=>u.strictObject({file_path:u.string().describe("The absolute path to the file to read"),offset:u.number().optional().describe("The line number to start reading from. Only provide if the file is too large to read at once"),limit:u.number().optional().describe("The number of lines to read. Only provide if the file is too large to read at once."),pages:u.string().optional().describe(`Page range for PDF files (e.g., "1-5", "3", "10-20"). Only applicable to PDF files. Maximum ${_D6} pages per request.`)})),H4z=u.enum(["image/jpeg","image/png","image/gif","image/webp"]),O4z=y1(()=>u.discriminatedUnion("type",[u.object({type:u.literal("text"),file:u.object({filePath:u.string().describe("The path to the file that was read"),content:u.string().describe("The content of the file"),numLines:u.number().describe("Number of lines in the returned content"),startLine:u.number().describe("The starting line number"),totalLines:u.number().describe("Total number of lines in the file")})}),u.object({type:u.literal("image"),file:u.object({base64:u.string().describe("Base64-encoded image data"),type:H4z.describe("The MIME type of the image"),originalSize:u.number().describe("Original file size in bytes"),dimensions:u.object({originalWidth:u.number().optional().describe("Original image width in pixels"),originalHeight:u.number().optional().describe("Original image height in pixels"),displayWidth:u.number().optional().describe("Displayed image width in pixels (after resizing)"),displayHeight:u.number().optional().describe("Displayed image height in pixels (after resizing)")}).optional().describe("Image dimension info for coordinate mapping")})}),u.object({type:u.literal("notebook"),file:u.object({filePath:u.string().describe("The path to the notebook file"),cells:u.array(u.any()).describe("Array of notebook cells")})}),u.object({type:u.literal("pdf"),file:u.object({filePath:u.string().describe("The path to the PDF file"),base64:u.string().describe("Base64-encoded PDF data"),originalSize:u.number().describe("Original file size in bytes")})}),u.object({type:u.literal("parts"),file:u.object({filePath:u.string().describe("The path to the PDF file"),originalSize:u.number().describe("Original file size in bytes"),count:u.number().describe("Number of pages extracted"),outputDir:u.string().describe("Directory containing extracted page images")})})])),B5={name:wq,maxResultSizeChars:1e5,strict:!0,input_examples:[{file_path:"/Users/username/project/src/index.ts"},{file_path:"/Users/username/project/README.md",limit:100,offset:50}],async description(){return if7},async prompt(){return nf7},get inputSchema(){return $4z()},inputParamAliases:{filePath:"file_path",filepath:"file_path",path:"file_path"},get outputSchema(){return O4z()},userFacingName:ywq,getToolUseSummary:zg8,getActivityDescription(A){let q=zg8(A);return q?`Reading ${q}`:"Reading file"},isEnabled(){return!0},isConcurrencySafe(){return!0},isReadOnly(){return!0},isSearchOrReadCommand(){return{isSearch:!1,isRead:!0}},getPath({file_path:A}){return A||L1()},async checkPermissions(A,q){let K=await q.getAppState();return ve(B5,A,K.toolPermissionContext)},renderToolUseMessage:Vwq,renderToolUseTag:Nwq,renderToolUseProgressMessage:vwq,renderToolResultMessage:kwq,renderToolUseRejectedMessage:Ewq,renderToolUseErrorMessage:Lwq,async validateInput({file_path:A,pages:q},K){if(q!==void 0){let H=tY8(q);if(!H)return{result:!1,message:`Invalid pages parameter: "${q}". Use formats like "1-5", "3", or "10-20". Pages are 1-indexed.`,errorCode:7};if((H.lastPage===1/0?_D6+1:H.lastPage-H.firstPage+1)>_D6)return{result:!1,message:`Page range "${q}" exceeds maximum of ${_D6} pages per request. Please use a smaller range.`,errorCode:8}}let Y=e4(A),z=await K.getAppState();if(PM(Y,z.toolPermissionContext,"read","deny")!==null)return{result:!1,message:"File is in a directory that is denied by your permission settings.",errorCode:1};if(Y.startsWith("\\\\")||Y.startsWith("//"))return{result:!0};let $=Yz6.extname(Y).toLowerCase();if(w4z.has($.slice(1))&&!ID6($))return{result:!1,message:`This tool cannot read binary files. The file appears to be a binary ${$} file. Please use appropriate tools for binary file analysis.`,errorCode:4};if(e7z(Y))return{result:!1,message:`Cannot read '${A}': this device file would block or produce infinite output.`,errorCode:9};return{result:!0}},async call({file_path:A,offset:q=1,limit:K=void 0,pages:Y},z){let{readFileState:w,fileReadingLimits:_}=z,$=_?.maxSizeBytes??_g8,H=_?.maxTokens??wg8(),O=Yz6.extname(A).toLowerCase().slice(1),J=e4(A),j=L1(),D=vG6([J],j);if(D.length>0){for(let X of D)z.dynamicSkillDirTriggers?.add(X);kG6(D).catch(()=>{})}EG6([J],j);try{return await Swq(A,J,J,O,q,K,Y,$,H,w,z)}catch(X){if(X.code==="ENOENT"){let P=q4z(J);if(P)try{return await Swq(A,J,P,O,q,K,Y,$,H,w,z)}catch(T){if(T.code!=="ENOENT")throw T}let W=SN1(J),Z=await ke(J),G=`File does not exist. ${jZ} ${L1()}.`;if(Z)G+=` Did you mean ${Z}?`;else if(W)G+=` Did you mean ${W}?`;throw Error(G)}throw X}},mapToolResultToToolResultBlockParam(A,q){switch(A.type){case"image":return{tool_use_id:q,type:"tool_result",content:[{type:"image",source:{type:"base64",data:A.file.base64,media_type:A.file.type}}]};case"notebook":return So7(A.file.cells,q);case"pdf":return{tool_use_id:q,type:"tool_result",content:`PDF file read: ${A.file.filePath} (${E3(A.file.originalSize)})`};case"parts":return{tool_use_id:q,type:"tool_result",content:`PDF pages extracted: ${A.file.count} page(s) from ${A.file.filePath} (${E3(A.file.originalSize)})`};case"text":{let K;if(A.file.content)K=J4z(A.file)+(X4z()?j4z:"");else K=A.file.totalLines===0?"<system-reminder>Warning: the file exists but the contents are empty.</system-reminder>":`<system-reminder>Warning: the file exists but is shorter than the provided offset (${A.file.startLine}). The file has ${A.file.totalLines} lines.</system-reminder>`;return{tool_use_id:q,type:"tool_result",content:K}}}}};D4z=new Set(["claude-opus-4-6"])});function Pv1(A=process.env){let q=A.BASH_DEFAULT_TIMEOUT_MS;if(q){let K=parseInt(q,10);if(!isNaN(K)&&K>0)return K}return 120000}function hwq(A=process.env){let q=A.BASH_MAX_TIMEOUT_MS;if(q){let K=parseInt(q,10);if(!isNaN(K)&&K>0)return Math.max(K,Pv1(A))}return Math.max(600000,Pv1(A))}function Wv1(){return Pv1()}function Zv1(){return hwq()}function M4z(){if(!bA.isSandboxingEnabled())return"";let A=bA.getFsReadConfig(),q=bA.getFsWriteConfig(),K=bA.getNetworkRestrictionConfig(),Y=bA.getAllowUnixSockets(),z=bA.getIgnoreViolations(),w=bA.areUnsandboxedCommandsAllowed(),_={read:A,write:q},$={...K?.allowedHosts&&{allowedHosts:K.allowedHosts},...K?.deniedHosts&&{deniedHosts:K.deniedHosts},...Y&&{allowUnixSockets:Y}},H=[];if(Object.keys(_).length>0)H.push(`    - Filesystem: ${F6(_,null,2).split(`
++`,D4z;var XR=E(()=>{H4();P7();V8();rS();j4();cK6();NX8();hz();bH1();S1();N_();uz();$z1();cX8();kA();zV();TA();Rwq();gZ1();p1();Aq();j4();U1();Ue();t7z=new Set(["/dev/zero","/dev/random","/dev/urandom","/dev/full","/dev/stdin","/dev/tty","/dev/console","/dev/stdout","/dev/stderr","/dev/fd/0","/dev/fd/1","/dev/fd/2"]);A4z=String.fromCharCode(8239);K4z=[];jZ1=class jZ1 extends Error{tokenCount;maxTokens;constructor(A,q){super(`File content (${A} tokens) exceeds maximum allowed tokens (${q}). Please use offset and limit parameters to read specific portions of the file, or use the GrepTool to search for specific content.`);this.tokenCount=A;this.maxTokens=q;this.name="MaxFileReadTokenExceededError"}};z4z=new Set(["png","jpg","jpeg","gif","webp"]),w4z=new Set(["mp3","wav","flac","ogg","aac","m4a","wma","aiff","opus","mp4","avi","mov","wmv","flv","mkv","webm","m4v","mpeg","mpg","zip","rar","tar","gz","bz2","7z","xz","z","tgz","iso","exe","dll","so","dylib","app","msi","deb","rpm","bin","dat","db","sqlite","sqlite3","mdb","idx","doc","docx","xls","xlsx","ppt","pptx","odt","ods","odp","ttf","otf","woff","woff2","eot","psd","ai","eps","sketch","fig","xd","blend","obj","3ds","max","class","jar","war","pyc","pyo","rlib","swf","fla"]);$4z=y1(()=>u.strictObject({file_path:u.string().describe("The absolute path to the file to read"),offset:u.number().optional().describe("The line number to start reading from. Only provide if the file is too large to read at once"),limit:u.number().optional().describe("The number of lines to read. Only provide if the file is too large to read at once."),pages:u.string().optional().describe(`Page range for PDF files (e.g., "1-5", "3", "10-20"). Only applicable to PDF files. Maximum ${_D6} pages per request.`)})),H4z=u.enum(["image/jpeg","image/png","image/gif","image/webp"]),O4z=y1(()=>u.discriminatedUnion("type",[u.object({type:u.literal("text"),file:u.object({filePath:u.string().describe("The path to the file that was read"),content:u.string().describe("The content of the file"),numLines:u.number().describe("Number of lines in the returned content"),startLine:u.number().describe("The starting line number"),totalLines:u.number().describe("Total number of lines in the file")})}),u.object({type:u.literal("image"),file:u.object({base64:u.string().describe("Base64-encoded image data"),type:H4z.describe("The MIME type of the image"),originalSize:u.number().describe("Original file size in bytes"),dimensions:u.object({originalWidth:u.number().optional().describe("Original image width in pixels"),originalHeight:u.number().optional().describe("Original image height in pixels"),displayWidth:u.number().optional().describe("Displayed image width in pixels (after resizing)"),displayHeight:u.number().optional().describe("Displayed image height in pixels (after resizing)")}).optional().describe("Image dimension info for coordinate mapping")})}),u.object({type:u.literal("notebook"),file:u.object({filePath:u.string().describe("The path to the notebook file"),cells:u.array(u.any()).describe("Array of notebook cells")})}),u.object({type:u.literal("pdf"),file:u.object({filePath:u.string().describe("The path to the PDF file"),base64:u.string().describe("Base64-encoded PDF data"),originalSize:u.number().describe("Original file size in bytes")})}),u.object({type:u.literal("parts"),file:u.object({filePath:u.string().describe("The path to the PDF file"),originalSize:u.number().describe("Original file size in bytes"),count:u.number().describe("Number of pages extracted"),outputDir:u.string().describe("Directory containing extracted page images")})})])),B5={name:wq,maxResultSizeChars:1e5,strict:!0,input_examples:[{file_path:"/Users/username/project/src/index.ts"},{file_path:"/Users/username/project/README.md",limit:100,offset:50}],async description(){return if7},async prompt(){return nf7},get inputSchema(){return $4z()},inputParamAliases:{filePath:"file_path",filepath:"file_path",path:"file_path"},get outputSchema(){return O4z()},userFacingName:ywq,getToolUseSummary:zg8,getActivityDescription(A){let q=zg8(A);return q?`Reading ${q}`:"Reading file"},isEnabled(){return!0},isConcurrencySafe(){return!0},isReadOnly(){return!0},isSearchOrReadCommand(){return{isSearch:!1,isRead:!0}},getPath({file_path:A}){return A||L1()},async checkPermissions(A,q){let K=await q.getAppState();return ve(B5,A,K.toolPermissionContext)},renderToolUseMessage:Vwq,renderToolUseTag:Nwq,renderToolUseProgressMessage:vwq,renderToolResultMessage:kwq,renderToolUseRejectedMessage:Ewq,renderToolUseErrorMessage:Lwq,async validateInput({file_path:A,pages:q},K){if(q!==void 0){let H=tY8(q);if(!H)return{result:!1,message:`Invalid pages parameter: "${q}". Use formats like "1-5", "3", or "10-20". Pages are 1-indexed.`,errorCode:7};if((H.lastPage===1/0?_D6+1:H.lastPage-H.firstPage+1)>_D6)return{result:!1,message:`Page range "${q}" exceeds maximum of ${_D6} pages per request. Please use a smaller range.`,errorCode:8}}let Y=e4(A),z=await K.getAppState();if(PM(Y,z.toolPermissionContext,"read","deny")!==null)return{result:!1,message:"File is in a directory that is denied by your permission settings.",errorCode:1};if(Y.startsWith("\\\\")||Y.startsWith("//"))return{result:!0};let $=Yz6.extname(Y).toLowerCase();if(w4z.has($.slice(1))&&!ID6($))return{result:!1,message:`This tool cannot read binary files. The file appears to be a binary ${$} file. Please use appropriate tools for binary file analysis.`,errorCode:4};if(e7z(Y))return{result:!1,message:`Cannot read '${A}': this device file would block or produce infinite output.`,errorCode:9};return{result:!0}},async call({file_path:A,offset:q=1,limit:K=void 0,pages:Y},z){let{readFileState:w,fileReadingLimits:_}=z,$=_?.maxSizeBytes??_g8,H=_?.maxTokens??wg8(),O=Yz6.extname(A).toLowerCase().slice(1),J=e4(A),j=L1(),D=vG6([J],j);if(D.length>0){for(let X of D)z.dynamicSkillDirTriggers?.add(X);kG6(D).catch(()=>{})}EG6([J],j);try{return await Swq(A,J,J,O,q,K,Y,$,H,w,z)}catch(X){if(X.code==="ENOENT"){let P=q4z(J);if(P)try{return await Swq(A,J,P,O,q,K,Y,$,H,w,z)}catch(T){if(T.code!=="ENOENT")throw T}let W=SN1(J),Z=await ke(J),G=`File does not exist. ${jZ} ${L1()}.`;if(Z)G+=` Did you mean ${Z}?`;else if(W)G+=` Did you mean ${W}?`;throw Error(G)}throw X}},mapToolResultToToolResultBlockParam(A,q){switch(A.type){case"image":return{tool_use_id:q,type:"tool_result",content:[{type:"image",source:{type:"base64",data:A.file.base64,media_type:A.file.type}}]};case"notebook":return So7(A.file.cells,q);case"pdf":return{tool_use_id:q,type:"tool_result",content:`PDF file read: ${A.file.filePath} (${E3(A.file.originalSize)})`};case"parts":return{tool_use_id:q,type:"tool_result",content:`PDF pages extracted: ${A.file.count} page(s) from ${A.file.filePath} (${E3(A.file.originalSize)})`};case"text":{let K;if(A.file.content)K=J4z(A.file)+("");else K=A.file.totalLines===0?"<system-reminder>Warning: the file exists but the contents are empty.</system-reminder>":`<system-reminder>Warning: the file exists but is shorter than the provided offset (${A.file.startLine}). The file has ${A.file.totalLines} lines.</system-reminder>`;return{tool_use_id:q,type:"tool_result",content:K}}}}};D4z=new Set(["claude-opus-4-6"])});function Pv1(A=process.env){let q=A.BASH_DEFAULT_TIMEOUT_MS;if(q){let K=parseInt(q,10);if(!isNaN(K)&&K>0)return K}return 120000}function hwq(A=process.env){let q=A.BASH_MAX_TIMEOUT_MS;if(q){let K=parseInt(q,10);if(!isNaN(K)&&K>0)return Math.max(K,Pv1(A))}return Math.max(600000,Pv1(A))}function Wv1(){return Pv1()}function Zv1(){return hwq()}function M4z(){if(!bA.isSandboxingEnabled())return"";let A=bA.getFsReadConfig(),q=bA.getFsWriteConfig(),K=bA.getNetworkRestrictionConfig(),Y=bA.getAllowUnixSockets(),z=bA.getIgnoreViolations(),w=bA.areUnsandboxedCommandsAllowed(),_={read:A,write:q},$={...K?.allowedHosts&&{allowedHosts:K.allowedHosts},...K?.deniedHosts&&{deniedHosts:K.deniedHosts},...Y&&{allowUnixSockets:Y}},H=[];if(Object.keys(_).length>0)H.push(`    - Filesystem: ${F6(_,null,2).split(`
+ `).join(`
+       `)}`);if(Object.keys($).length>0)H.push(`    - Network: ${F6($,null,2).split(`
+ `).join(`

package/scripts/patch-qmd.mjs

@@ -0,0 +1,171 @@
+#!/usr/bin/env node
+/**
+ * Post-install patch for @tobilu/qmd@2.1.0 — fixes two search-recall issues:
+ *
+ * 1. Hardcoded per-sub-search limit of 20 in hybridQuery() and structuredSearch()
+ *    prevents documents ranked 21-40 from entering the RRF fusion pool. Replaced
+ *    with candidateLimit (default RERANK_CANDIDATE_LIMIT = 40).
+ *
+ * 2. Dotted version tokens (e.g., "4.7", "v2.0.1") in buildFTS5Query() — the dot
+ *    is stripped by sanitizeFTS5Term, collapsing "4.7" into "47" which never
+ *    matches the FTS5 tokens "4" and "7". Added a dotted-token handler that
+ *    splits on dots and creates a phrase query, matching the hyphenated-token pattern.
+ */
+import { readFileSync, writeFileSync, existsSync } from 'fs';
+import { resolve, dirname } from 'path';
+import { fileURLToPath } from 'url';
+import { createRequire } from 'module';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+
+// QMD may be in root and/or web node_modules — patch all copies found.
+const locations = [
+  resolve(__dirname, '../node_modules/@tobilu/qmd'),
+  resolve(__dirname, '../web/node_modules/@tobilu/qmd'),
+];
+
+// Published-package installs hoist qmd to a PARENT node_modules where neither
+// hardcoded path exists — add wherever Node actually resolves it from. The
+// package exports map blocks './package.json', so resolve the main entry
+// (dist/index.js) and walk up to the package root.
+try {
+  const require_ = createRequire(import.meta.url);
+  let dir = dirname(require_.resolve('@tobilu/qmd'));
+  while (dir !== dirname(dir) && !existsSync(resolve(dir, 'package.json'))) dir = dirname(dir);
+  if (!locations.includes(dir)) locations.push(dir);
+} catch { /* not installed at all — the loop below reports it */ }
+
+let anyVerified = false;
+
+for (const qmdDir of locations) {
+  const storeFile = resolve(qmdDir, 'dist/store.js');
+  if (!existsSync(storeFile)) continue;
+
+  // ── Version guard ──
+  const pkgFile = resolve(qmdDir, 'package.json');
+  let pkg;
+  try {
+    pkg = JSON.parse(readFileSync(pkgFile, 'utf8'));
+  } catch (error) {
+    throw new Error(`patch-qmd: could not read ${pkgFile}: ${error}`);
+  }
+  if (pkg.version !== '2.1.0') {
+    throw new Error(
+      `patch-qmd: expected @tobilu/qmd@2.1.0 but found @${pkg.version} at ${qmdDir}`,
+    );
+  }
+
+  const originalSrc = readFileSync(storeFile, 'utf8');
+  let src = originalSrc;
+  let applied = 0;
+  const expected = 6;
+
+  // ── Fix 1: Replace hardcoded limit 20 with candidateLimit ──
+
+  // hybridQuery: initial FTS probe
+  const hq1 = 'const initialFts = store.searchFTS(query, 20, collection);';
+  if (src.includes(hq1)) {
+    src = src.replace(hq1, 'const initialFts = store.searchFTS(query, candidateLimit, collection);');
+    applied++;
+  }
+
+  // hybridQuery: expanded lex FTS
+  const hq2_old = 'const ftsResults = store.searchFTS(q.query, 20, collection);';
+  if (src.includes(hq2_old)) {
+    src = src.replace(hq2_old, 'const ftsResults = store.searchFTS(q.query, candidateLimit, collection);');
+    applied++;
+  }
+
+  // hybridQuery: vec search
+  const hq3_old = 'const vecResults = await store.searchVec(vecQueries[i].text, DEFAULT_EMBED_MODEL, 20, collection, undefined, embedding);';
+  if (src.includes(hq3_old)) {
+    src = src.replace(hq3_old,
+      'const vecResults = await store.searchVec(vecQueries[i].text, DEFAULT_EMBED_MODEL, candidateLimit, collection, undefined, embedding);');
+    applied++;
+  }
+
+  // structuredSearch: lex FTS (with coll parameter)
+  const ss1_old = 'const ftsResults = store.searchFTS(search.query, 20, coll);';
+  if (src.includes(ss1_old)) {
+    src = src.replace(ss1_old, 'const ftsResults = store.searchFTS(search.query, candidateLimit, coll);');
+    applied++;
+  }
+
+  // structuredSearch: vec search (with coll parameter)
+  const ss2_old = 'const vecResults = await store.searchVec(vecSearches[i].query, DEFAULT_EMBED_MODEL, 20, coll, undefined, embedding);';
+  if (src.includes(ss2_old)) {
+    src = src.replace(ss2_old,
+      'const vecResults = await store.searchVec(vecSearches[i].query, DEFAULT_EMBED_MODEL, candidateLimit, coll, undefined, embedding);');
+    applied++;
+  }
+
+  // ── Fix 2: Handle dotted version tokens in buildFTS5Query ──
+
+  const dottedInsertion = `            else if (/^[\\p{L}\\p{N}][\\p{L}\\p{N}.]*\\.[\\p{L}\\p{N}][\\p{L}\\p{N}.]*$/u.test(term)) {
+                const sanitized = term.split('.').map(t => sanitizeFTS5Term(t)).filter(t => t).join(' ');
+                if (sanitized) {
+                    const ftsPhrase = \`"\${sanitized}"\`; // Phrase match
+                    if (negated) {
+                        negative.push(ftsPhrase);
+                    }
+                    else {
+                        positive.push(ftsPhrase);
+                    }
+                }
+            }`;
+
+  // Find the closing brace of the hyphenated-token block and insert after it
+  const hyphenatedClose = `                }
+            }
+            else {
+                const sanitized = sanitizeFTS5Term(term);`;
+
+  // Idempotency: check for the actual injected regex code, not a comment string
+  if (src.includes(hyphenatedClose) && !src.includes('else if (/^[\\p{L}\\p{N}]')) {
+    src = src.replace(
+      hyphenatedClose,
+      `                }
+            }
+            // Handle dotted version tokens: 4.7, v2.0.1, 3.14
+            // FTS5 tokenizer splits on dots, so "4.7" becomes tokens "4","7".
+            // Without this, sanitizeFTS5Term strips the dot \u2192 "47" which never matches.
+${dottedInsertion}
+            else {
+                const sanitized = sanitizeFTS5Term(term);`
+    );
+    applied++;
+  }
+
+  const requiredSnippets = [
+    'store.searchFTS(query, candidateLimit, collection)',
+    'store.searchFTS(q.query, candidateLimit, collection)',
+    'store.searchVec(vecQueries[i].text, DEFAULT_EMBED_MODEL, candidateLimit, collection',
+    'store.searchFTS(search.query, candidateLimit, coll)',
+    'store.searchVec(vecSearches[i].query, DEFAULT_EMBED_MODEL, candidateLimit, coll',
+    'Handle dotted version tokens:',
+    "term.split('.').map",
+  ];
+  const missing = requiredSnippets.filter((snippet) => !src.includes(snippet));
+  if (missing.length > 0) {
+    throw new Error(
+      `patch-qmd: patch contract incomplete at ${qmdDir} `
+      + `(${applied}/${expected} replacements applied); missing: ${missing.join(', ')}`,
+    );
+  }
+
+  if (src !== originalSrc) {
+    writeFileSync(storeFile, src, 'utf8');
+    console.log(`patch-qmd: patched ${storeFile} \u2714`);
+  } else {
+    console.log(`patch-qmd: ${storeFile} \u2014 patch contract verified`);
+  }
+  anyVerified = true;
+}
+
+if (!anyVerified) {
+  // Check if we found any QMD at all
+  const found = locations.some(d => existsSync(resolve(d, 'dist/store.js')));
+  if (!found) {
+    console.log('patch-qmd: @tobilu/qmd not installed, skipping');
+  }
+}

package/scripts/postinstall.mjs

@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+/**
+ * Unified postinstall — routes between two very different install shapes:
+ *
+ * DEV CHECKOUT (git clone; web/ + src/ present):
+ *   patch-package && (cd web && npm install) && node scripts/patch-qmd.mjs
+ *   Strict: any failure fails the install, same as the historical inline chain.
+ *
+ * PUBLISHED PACKAGE (npm install open-walnut / npx open-walnut):
+ *   - patch-package is a devDependency and, even if present, resolves targets
+ *     via ./node_modules/<name> — with npm hoisting the SDK lives in the
+ *     PARENT node_modules, so it can never find it. Instead we parse our own
+ *     patch file (single-hunk, single-line change) and apply it directly to
+ *     the resolved install location.
+ *   - patch-qmd.mjs handles its own resolution (require-based candidate).
+ *   Fail-open: a cosmetic patch failure must never break `npm install` for a
+ *   consumer — warn loudly and continue.
+ */
+import { spawnSync } from 'node:child_process';
+import { createRequire } from 'node:module';
+import { existsSync, readFileSync, readdirSync, writeFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const isDevCheckout =
+  existsSync(join(root, 'web', 'package.json')) && existsSync(join(root, 'src'));
+
+function run(cmd, args, opts = {}) {
+  const res = spawnSync(cmd, args, { stdio: 'inherit', cwd: root, ...opts });
+  return res.status === 0;
+}
+
+if (isDevCheckout) {
+  // ── Dev chain (strict) ──
+  if (!run('npx', ['patch-package'])) process.exit(1);
+  if (!run('npm', ['install'], { cwd: join(root, 'web') })) process.exit(1);
+  if (!run(process.execPath, [join(root, 'scripts', 'patch-qmd.mjs')])) process.exit(1);
+  process.exit(0);
+}
+
+// ── Published-package chain (fail-open) ──
+
+function warn(msg) {
+  console.warn(`open-walnut postinstall: ${msg}`);
+}
+
+/**
+ * Apply the claude-agent-sdk reminder patch by parsing the shipped
+ * patch-package diff. The patch is one hunk changing one line of the minified
+ * cli.js bundle, which makes direct find-and-replace both exact and safe.
+ * The .patch file stays the single source of truth — no duplicated strings.
+ */
+function applySdkPatch() {
+  const patchesDir = join(root, 'patches');
+  let patchFile = null;
+  try {
+    patchFile = readdirSync(patchesDir).find(
+      (f) => f.startsWith('@anthropic-ai+claude-agent-sdk+') && f.endsWith('.patch'),
+    );
+  } catch { /* no patches dir shipped */ }
+  if (!patchFile) return warn('SDK patch file not found, skipping');
+
+  const patchVersion = patchFile.slice('@anthropic-ai+claude-agent-sdk+'.length, -'.patch'.length);
+
+  // Resolve the installed SDK (may be hoisted to a parent node_modules).
+  let sdkDir;
+  try {
+    const require_ = createRequire(import.meta.url);
+    let dir = dirname(require_.resolve('@anthropic-ai/claude-agent-sdk'));
+    while (dir !== dirname(dir) && !existsSync(join(dir, 'package.json'))) dir = dirname(dir);
+    sdkDir = dir;
+  } catch {
+    return warn('claude-agent-sdk not resolvable, skipping SDK patch');
+  }
+
+  const installedVersion = JSON.parse(readFileSync(join(sdkDir, 'package.json'), 'utf8')).version;
+  if (installedVersion !== patchVersion) {
+    return warn(
+      `SDK ${installedVersion} != patch target ${patchVersion} — skipping (file reads will carry the SDK's cyber reminder, costing context)`,
+    );
+  }
+
+  // Extract the one removed and one added line from the diff.
+  const lines = readFileSync(join(patchesDir, patchFile), 'utf8').split('\n');
+  const removed = lines.filter((l) => l.startsWith('-') && !l.startsWith('---')).map((l) => l.slice(1));
+  const added = lines.filter((l) => l.startsWith('+') && !l.startsWith('+++')).map((l) => l.slice(1));
+  if (removed.length !== 1 || added.length !== 1) {
+    return warn(`SDK patch shape changed (${removed.length}-/${added.length}+ lines), skipping`);
+  }
+
+  const cliPath = join(sdkDir, 'cli.js');
+  let content;
+  try {
+    content = readFileSync(cliPath, 'utf8');
+  } catch {
+    return warn(`SDK cli.js not readable at ${cliPath}, skipping`);
+  }
+  if (content.includes(added[0])) return; // already patched (reinstall/idempotent)
+  if (!content.includes(removed[0])) {
+    return warn('SDK cli.js does not match the patch context, skipping');
+  }
+  writeFileSync(cliPath, content.replace(removed[0], added[0]), 'utf8');
+  console.log(`open-walnut postinstall: patched claude-agent-sdk@${installedVersion} (reminder disabled)`);
+}
+
+try {
+  applySdkPatch();
+} catch (err) {
+  warn(`SDK patch failed (continuing): ${err instanceof Error ? err.message : err}`);
+}
+
+// patch-qmd resolves its own targets (including hoisted installs) and is
+// idempotent; isolate its strict throws so install never fails on it.
+const qmd = spawnSync(process.execPath, [join(root, 'scripts', 'patch-qmd.mjs')], {
+  stdio: 'inherit',
+  cwd: root,
+});
+if (qmd.status !== 0) warn('qmd search patch failed (continuing — search recall slightly degraded)');
+process.exit(0);