patchwork-os 0.2.0-beta.1 → 0.2.0-beta.10.canary.95

package/dist/fp/automationState.d.ts

@@ -36,7 +36,7 @@ export interface AutomationState {
     readonly taskTimestamps: readonly number[];
     /**
      * Per-content-signature dedup timestamps (keyed: `dedup:${hookKey}:${sig}`).
-     * Bounded at 5_000 entries — same eviction as lastTrigger.
+     * Bounded at 5_000 entries via LRU eviction in `recordDedup`.
      */
     readonly deduplicationWindow: ReadonlyMap<string, number>;
     /**
@@ -59,6 +59,14 @@ export interface AutomationState {
      * Last known test runner outcome (pass/fail) for evaluateWhen checks.
      */
     readonly lastTestRunnerStatusByRunner: ReadonlyMap<string, "pass" | "fail">;
+    /**
+     * Last successful webhook fan-out time (ms since epoch) per hook key.
+     * Recorded after `Backend.postWebhook` resolves regardless of `ok` —
+     * the timestamp marks "we attempted to deliver", which is what an
+     * operator wants when debugging webhook health. Merged via max-per-key
+     * in `mergeAutomationStates`.
+     */
+    readonly lastWebhookFiredAt: ReadonlyMap<string, number>;
 }
 export declare const EMPTY_AUTOMATION_STATE: AutomationState;
 /**
@@ -123,13 +131,24 @@ export declare function clearPendingRetry(state: AutomationState, key: string):
  */
 export declare function setLatestDiagnostics(state: AutomationState, file: string, severity: number, count: number): AutomationState;
 /**
- * Merge two AutomationStates produced by parallel branches that share the same
- * initial state. For each map, keeps the max timestamp / last value per key.
- * taskTimestamps are unioned. Used by the Parallel interpreter case so both
- * branches' cooldown / trigger records are preserved.
+ * @deprecated Not called from production code. Parallel was rewritten to be
+ * sequential (see automationInterpreter.ts case "Parallel") so that branches
+ * see each other's cooldown/dedup writes — the merge-max semantics here lost
+ * those guarantees. Function + tests retained as a reference for any future
+ * truly-concurrent execution model. NOTE: `unionMap` of `activeTasks` is
+ * last-write-wins, which silently drops one taskId when both branches record
+ * the same key — restore as union-of-arrays before re-introducing parallelism.
  */
 export declare function mergeAutomationStates(a: AutomationState, b: AutomationState): AutomationState;
 /**
  * Update the last known test runner outcome for `runner`.
  */
 export declare function setTestRunnerStatus(state: AutomationState, runner: string, outcome: "pass" | "fail"): AutomationState;
+/**
+ * Record that an automation webhook fan-out attempt for `key` resolved at
+ * `now`. Used for telemetry / dashboards — does NOT gate future fires on its
+ * own (cooldown is already enforced by WithCooldown around the parent hook).
+ *
+ * Bounded at 5_000 entries, FIFO eviction.
+ */
+export declare function recordWebhookFired(state: AutomationState, key: string, now: number): AutomationState;

package/dist/fp/automationState.js

@@ -19,6 +19,7 @@ export const EMPTY_AUTOMATION_STATE = {
     pendingRetries: new Map(),
     latestDiagnosticsByFile: new Map(),
     lastTestRunnerStatusByRunner: new Map(),
+    lastWebhookFiredAt: new Map(),
 };
 // ── Cooldown helpers ──────────────────────────────────────────────────────────
 /**
@@ -41,14 +42,32 @@ export function isOnCooldown(state, key, now, cooldownMs) {
  */
 export function recordTrigger(state, key, taskId, now) {
     const MAX_TASK_TIMESTAMPS = 10_000;
+    const MAX_TRIGGER_KEYS = 5_000;
+    // LRU: delete-then-set so the key moves to the end of insertion order.
+    // When the map exceeds the cap, drop entries from the front (oldest).
     const newLastTrigger = new Map(state.lastTrigger);
+    newLastTrigger.delete(key);
     newLastTrigger.set(key, now);
+    while (newLastTrigger.size > MAX_TRIGGER_KEYS) {
+        const oldestKey = newLastTrigger.keys().next().value;
+        if (oldestKey === undefined)
+            break;
+        newLastTrigger.delete(oldestKey);
+    }
     const newActiveTasks = new Map(state.activeTasks);
     newActiveTasks.set(key, taskId);
-    const rawTimestamps = [...state.taskTimestamps, now];
-    const newTaskTimestamps = rawTimestamps.length > MAX_TASK_TIMESTAMPS
-        ? rawTimestamps.slice(rawTimestamps.length - MAX_TASK_TIMESTAMPS)
-        : rawTimestamps;
+    // Prune entries older than 1 hour while building the new array — keeps the
+    // array small so tasksInLastHour() scans only recent entries.
+    const cutoff = now - 3_600_000;
+    const pruned = [];
+    for (const t of state.taskTimestamps) {
+        if (t > cutoff)
+            pruned.push(t);
+    }
+    pruned.push(now);
+    const newTaskTimestamps = pruned.length > MAX_TASK_TIMESTAMPS
+        ? pruned.slice(pruned.length - MAX_TASK_TIMESTAMPS)
+        : pruned;
     return {
         ...state,
         lastTrigger: newLastTrigger,
@@ -100,7 +119,12 @@ export function setLastTestOutcome(state, runner, outcome) {
  */
 export function tasksInLastHour(state, now) {
     const cutoff = now - 3_600_000;
-    return state.taskTimestamps.filter((t) => t > cutoff).length;
+    let count = 0;
+    for (const t of state.taskTimestamps) {
+        if (t > cutoff)
+            count++;
+    }
+    return count;
 }
 // ── Deduplication helpers ─────────────────────────────────────────────────────
 const DEDUP_MAX_SIZE = 5_000;
@@ -165,10 +189,13 @@ export function setLatestDiagnostics(state, file, severity, count) {
 }
 // ── Merge helper (for Parallel node) ──────────────────────────────────────────
 /**
- * Merge two AutomationStates produced by parallel branches that share the same
- * initial state. For each map, keeps the max timestamp / last value per key.
- * taskTimestamps are unioned. Used by the Parallel interpreter case so both
- * branches' cooldown / trigger records are preserved.
+ * @deprecated Not called from production code. Parallel was rewritten to be
+ * sequential (see automationInterpreter.ts case "Parallel") so that branches
+ * see each other's cooldown/dedup writes — the merge-max semantics here lost
+ * those guarantees. Function + tests retained as a reference for any future
+ * truly-concurrent execution model. NOTE: `unionMap` of `activeTasks` is
+ * last-write-wins, which silently drops one taskId when both branches record
+ * the same key — restore as union-of-arrays before re-introducing parallelism.
  */
 export function mergeAutomationStates(a, b) {
     const maxNumMap = (x, y) => {
@@ -195,6 +222,7 @@ export function mergeAutomationStates(a, b) {
         pendingRetries: unionMap(a.pendingRetries, b.pendingRetries),
         latestDiagnosticsByFile: unionMap(a.latestDiagnosticsByFile, b.latestDiagnosticsByFile),
         lastTestRunnerStatusByRunner: unionMap(a.lastTestRunnerStatusByRunner, b.lastTestRunnerStatusByRunner),
+        lastWebhookFiredAt: maxNumMap(a.lastWebhookFiredAt, b.lastWebhookFiredAt),
     };
 }
 // ── Test runner status helpers ────────────────────────────────────────────────
@@ -206,4 +234,23 @@ export function setTestRunnerStatus(state, runner, outcome) {
     newMap.set(runner, outcome);
     return { ...state, lastTestRunnerStatusByRunner: newMap };
 }
+// ── Webhook helpers ───────────────────────────────────────────────────────────
+const WEBHOOK_FIRED_MAX_SIZE = 5_000;
+/**
+ * Record that an automation webhook fan-out attempt for `key` resolved at
+ * `now`. Used for telemetry / dashboards — does NOT gate future fires on its
+ * own (cooldown is already enforced by WithCooldown around the parent hook).
+ *
+ * Bounded at 5_000 entries, FIFO eviction.
+ */
+export function recordWebhookFired(state, key, now) {
+    const newMap = new Map(state.lastWebhookFiredAt);
+    newMap.delete(key);
+    newMap.set(key, now);
+    if (newMap.size > WEBHOOK_FIRED_MAX_SIZE) {
+        const firstKey = newMap.keys().next().value;
+        newMap.delete(firstKey);
+    }
+    return { ...state, lastWebhookFiredAt: newMap };
+}
 //# sourceMappingURL=automationState.js.map

package/dist/fp/automationState.js.map

@@ -1 +1 @@
-{"version":3,"file":"automationState.js","sourceRoot":"","sources":["../../src/fp/automationState.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAqDH,MAAM,CAAC,MAAM,sBAAsB,GAAoB;IACrD,WAAW,EAAE,IAAI,GAAG,EAAE;IACtB,WAAW,EAAE,IAAI,GAAG,EAAE;IACtB,oBAAoB,EAAE,IAAI,GAAG,EAAE;IAC/B,uBAAuB,EAAE,IAAI,GAAG,EAAE;IAClC,cAAc,EAAE,EAAE;IAClB,mBAAmB,EAAE,IAAI,GAAG,EAAE;IAC9B,cAAc,EAAE,IAAI,GAAG,EAAE;IACzB,uBAAuB,EAAE,IAAI,GAAG,EAAE;IAClC,4BAA4B,EAAE,IAAI,GAAG,EAAE;CACxC,CAAC;AAEF,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAsB,EACtB,GAAW,EACX,GAAW,EACX,UAAkB;IAElB,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,GAAG,GAAG,IAAI,GAAG,UAAU,CAAC;AACjC,CAAC;AAED,iFAAiF;AAEjF;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAsB,EACtB,GAAW,EACX,MAAc,EACd,GAAW;IAEX,MAAM,mBAAmB,GAAG,MAAM,CAAC;IACnC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAE7B,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAEhC,MAAM,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,iBAAiB,GACrB,aAAa,CAAC,MAAM,GAAG,mBAAmB;QACxC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,mBAAmB,CAAC;QACjE,CAAC,CAAC,aAAa,CAAC;IAEpB,OAAO;QACL,GAAG,KAAK;QACR,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,cAAc;QAC3B,cAAc,EAAE,iBAAiB;KAClC,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAsB,EAAE,GAAW;IAC9D,OAAO,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAsB,EACtB,GAAW;IAEX,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;AACnD,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAsB,EACtB,IAAY,EACZ,KAAa;IAEb,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,EAAE,GAAG,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,MAAc,EACd,OAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,EAAE,GAAG,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC;AACvD,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAsB,EAAE,GAAW;IACjE,MAAM,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC;IAC/B,OAAO,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC;AAC/D,CAAC;AAED,iFAAiF;AAEjF,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,KAAsB,EACtB,GAAW,EACX,GAAW;IAEX,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAClD,uEAAuE;IACvE,2EAA2E;IAC3E,yDAAyD;IACzD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrB,IAAI,MAAM,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CACvB,KAAsB,EACtB,GAAW,EACX,GAAW,EACX,UAAkB;IAElB,MAAM,IAAI,GAAG,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,GAAG,GAAG,IAAI,GAAG,UAAU,CAAC;AACjC,CAAC;AAED,iFAAiF;AAEjF;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,GAAW,EACX,OAAe,EACf,WAAmB,EACnB,MAAc;IAEd,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IAClD,OAAO,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAsB,EACtB,GAAW;IAEX,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED,iFAAiF;AAEjF,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAsB,EACtB,IAAY,EACZ,QAAgB,EAChB,KAAa;IAEb,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,IAAI,GAAG,yBAAyB,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC;AACvD,CAAC;AAED,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,CAAkB,EAClB,CAAkB;IAElB,MAAM,SAAS,GAAG,CAChB,CAA8B,EAC9B,CAA8B,EACT,EAAE;QACvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CACf,CAAyB,EACzB,CAAyB,EACT,EAAE;QAClB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,OAAO;QACL,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC;QACpD,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC;QACnD,oBAAoB,EAAE,QAAQ,CAC5B,CAAC,CAAC,oBAAoB,EACtB,CAAC,CAAC,oBAAoB,CACvB;QACD,uBAAuB,EAAE,QAAQ,CAC/B,CAAC,CAAC,uBAAuB,EACzB,CAAC,CAAC,uBAAuB,CAC1B;QACD,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QACzE,mBAAmB,EAAE,SAAS,CAC5B,CAAC,CAAC,mBAAmB,EACrB,CAAC,CAAC,mBAAmB,CACtB;QACD,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC;QAC5D,uBAAuB,EAAE,QAAQ,CAC/B,CAAC,CAAC,uBAAuB,EACzB,CAAC,CAAC,uBAAuB,CAC1B;QACD,4BAA4B,EAAE,QAAQ,CACpC,CAAC,CAAC,4BAA4B,EAC9B,CAAC,CAAC,4BAA4B,CAC/B;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsB,EACtB,MAAc,EACd,OAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,EAAE,GAAG,KAAK,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC;AAC5D,CAAC"}
+{"version":3,"file":"automationState.js","sourceRoot":"","sources":["../../src/fp/automationState.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA6DH,MAAM,CAAC,MAAM,sBAAsB,GAAoB;IACrD,WAAW,EAAE,IAAI,GAAG,EAAE;IACtB,WAAW,EAAE,IAAI,GAAG,EAAE;IACtB,oBAAoB,EAAE,IAAI,GAAG,EAAE;IAC/B,uBAAuB,EAAE,IAAI,GAAG,EAAE;IAClC,cAAc,EAAE,EAAE;IAClB,mBAAmB,EAAE,IAAI,GAAG,EAAE;IAC9B,cAAc,EAAE,IAAI,GAAG,EAAE;IACzB,uBAAuB,EAAE,IAAI,GAAG,EAAE;IAClC,4BAA4B,EAAE,IAAI,GAAG,EAAE;IACvC,kBAAkB,EAAE,IAAI,GAAG,EAAE;CAC9B,CAAC;AAEF,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAsB,EACtB,GAAW,EACX,GAAW,EACX,UAAkB;IAElB,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,GAAG,GAAG,IAAI,GAAG,UAAU,CAAC;AACjC,CAAC;AAED,iFAAiF;AAEjF;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAsB,EACtB,GAAW,EACX,MAAc,EACd,GAAW;IAEX,MAAM,mBAAmB,GAAG,MAAM,CAAC;IACnC,MAAM,gBAAgB,GAAG,KAAK,CAAC;IAE/B,uEAAuE;IACvE,sEAAsE;IACtE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,cAAc,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACrD,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM;QACnC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAEhC,2EAA2E;IAC3E,8DAA8D;IAC9D,MAAM,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC,GAAG,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,MAAM,iBAAiB,GACrB,MAAM,CAAC,MAAM,GAAG,mBAAmB;QACjC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,mBAAmB,CAAC;QACnD,CAAC,CAAC,MAAM,CAAC;IAEb,OAAO;QACL,GAAG,KAAK;QACR,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,cAAc;QAC3B,cAAc,EAAE,iBAAiB;KAClC,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAsB,EAAE,GAAW;IAC9D,OAAO,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAsB,EACtB,GAAW;IAEX,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;AACnD,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAsB,EACtB,IAAY,EACZ,KAAa;IAEb,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,EAAE,GAAG,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,MAAc,EACd,OAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,EAAE,GAAG,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC;AACvD,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAsB,EAAE,GAAW;IACjE,MAAM,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC,GAAG,MAAM;YAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AAEjF,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,KAAsB,EACtB,GAAW,EACX,GAAW;IAEX,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAClD,uEAAuE;IACvE,2EAA2E;IAC3E,yDAAyD;IACzD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrB,IAAI,MAAM,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CACvB,KAAsB,EACtB,GAAW,EACX,GAAW,EACX,UAAkB;IAElB,MAAM,IAAI,GAAG,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,GAAG,GAAG,IAAI,GAAG,UAAU,CAAC;AACjC,CAAC;AAED,iFAAiF;AAEjF;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,GAAW,EACX,OAAe,EACf,WAAmB,EACnB,MAAc;IAEd,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IAClD,OAAO,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAsB,EACtB,GAAW;IAEX,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED,iFAAiF;AAEjF,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAsB,EACtB,IAAY,EACZ,QAAgB,EAChB,KAAa;IAEb,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,IAAI,GAAG,yBAAyB,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC;AACvD,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,CAAkB,EAClB,CAAkB;IAElB,MAAM,SAAS,GAAG,CAChB,CAA8B,EAC9B,CAA8B,EACT,EAAE;QACvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CACf,CAAyB,EACzB,CAAyB,EACT,EAAE;QAClB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,OAAO;QACL,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC;QACpD,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC;QACnD,oBAAoB,EAAE,QAAQ,CAC5B,CAAC,CAAC,oBAAoB,EACtB,CAAC,CAAC,oBAAoB,CACvB;QACD,uBAAuB,EAAE,QAAQ,CAC/B,CAAC,CAAC,uBAAuB,EACzB,CAAC,CAAC,uBAAuB,CAC1B;QACD,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QACzE,mBAAmB,EAAE,SAAS,CAC5B,CAAC,CAAC,mBAAmB,EACrB,CAAC,CAAC,mBAAmB,CACtB;QACD,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC;QAC5D,uBAAuB,EAAE,QAAQ,CAC/B,CAAC,CAAC,uBAAuB,EACzB,CAAC,CAAC,uBAAuB,CAC1B;QACD,4BAA4B,EAAE,QAAQ,CACpC,CAAC,CAAC,4BAA4B,EAC9B,CAAC,CAAC,4BAA4B,CAC/B;QACD,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsB,EACtB,MAAc,EACd,OAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,EAAE,GAAG,KAAK,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC;AAC5D,CAAC;AAED,iFAAiF;AAEjF,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,GAAW,EACX,GAAW;IAEX,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACjD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrB,IAAI,MAAM,CAAC,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC;AAClD,CAAC"}

package/dist/fp/automationUtils.js

@@ -18,7 +18,7 @@ export function untrustedBlock(label, value, nonce) {
     // Use literal string replacement (not RegExp) — nonce is an opaque ID that
     // may contain regex metacharacters (e.g. "[", "+", ".").  RegExp would throw
     // SyntaxError for those inputs, enabling a DoS on every hook trigger.
-    const safe = value.split(nonce).join("");
+    const safe = value.replaceAll(nonce, "");
     return `\n--- BEGIN ${label} [${nonce}] (untrusted) ---\n${safe}\n--- END ${label} [${nonce}] ---\n`;
 }
 /**

package/dist/fp/automationUtils.js.map

@@ -1 +1 @@
-{"version":3,"file":"automationUtils.js","sourceRoot":"","sources":["../../src/fp/automationUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,qFAAqF;AACrF,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,kEAAkE;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAa,EACb,KAAa,EACb,KAAa;IAEb,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,uDAAuD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAC/E,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,OAAO,eAAe,KAAK,KAAK,KAAK,sBAAsB,IAAI,aAAa,KAAK,KAAK,KAAK,SAAS,CAAC;AACvG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,sEAAsE;IACtE,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,uBAAuB;QAC9D,OAAO,MAAM,CAAC;IAEhB,yEAAyE;IACzE,+DAA+D;IAC/D,IAAI,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;SACxC,QAAQ,CAAC,CAAC,EAAE,uBAAuB,CAAC;SACpC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEpB,oEAAoE;IACpE,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,GAAG,SAAS,yCAAyC,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,MAAc,EACd,IAAa;IAEb,MAAM,QAAQ,GAAG,IAAI;QACnB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;QACpE,CAAC,CAAC,KAAK,CAAC;IACV,OAAO,YAAY,QAAQ,YAAY,QAAQ,UAAU,MAAM,OAAO,CAAC;AACzE,CAAC"}
+{"version":3,"file":"automationUtils.js","sourceRoot":"","sources":["../../src/fp/automationUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,qFAAqF;AACrF,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,kEAAkE;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAa,EACb,KAAa,EACb,KAAa;IAEb,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,uDAAuD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAC/E,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzC,OAAO,eAAe,KAAK,KAAK,KAAK,sBAAsB,IAAI,aAAa,KAAK,KAAK,KAAK,SAAS,CAAC;AACvG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,sEAAsE;IACtE,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,uBAAuB;QAC9D,OAAO,MAAM,CAAC;IAEhB,yEAAyE;IACzE,+DAA+D;IAC/D,IAAI,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;SACxC,QAAQ,CAAC,CAAC,EAAE,uBAAuB,CAAC;SACpC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEpB,oEAAoE;IACpE,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,GAAG,SAAS,yCAAyC,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,MAAc,EACd,IAAa;IAEb,MAAM,QAAQ,GAAG,IAAI;QACnB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;QACpE,CAAC,CAAC,KAAK,CAAC;IACV,OAAO,YAAY,QAAQ,YAAY,QAAQ,UAAU,MAAM,OAAO,CAAC;AACzE,CAAC"}

package/dist/fp/commandDescription.js

@@ -3,6 +3,7 @@
  * All allowlist/blocklist/path-traversal security checks live here.
  * No side effects, no fs.*, no process.* (except INTERPRETER_COMMANDS import).
  */
+import path from "node:path";
 import { INTERPRETER_COMMANDS } from "../config.js";
 import { optionalInt, optionalString, requireString, resolveFilePath, } from "../tools/utils.js";
 const MAX_ARGS = 100;
@@ -96,7 +97,12 @@ function validateCommandArgs(args, command, workspace) {
         if (DANGEROUS_FLAGS_FOR_COMMAND[command]?.has(flag)) {
             throw new Error(`Flag "${flag}" is blocked for command "${command}" — it can redirect command execution outside the workspace`);
         }
-        if (!arg.startsWith("-") && (arg.startsWith("/") || arg.startsWith("~/"))) {
+        // Workspace containment check for any absolute or home-relative path.
+        // path.isAbsolute catches Windows drive-letter forms (`C:\foo`, `\\srv\sh`)
+        // that startsWith("/") would miss — without this the containment check
+        // was a no-op on Windows.
+        if (!arg.startsWith("-") &&
+            (path.isAbsolute(arg) || arg.startsWith("~/"))) {
             try {
                 resolveFilePath(arg, workspace);
             }

package/dist/fp/commandDescription.js.map

@@ -1 +1 @@
-{"version":3,"file":"commandDescription.js","sourceRoot":"","sources":["../../src/fp/commandDescription.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,WAAW,EACX,cAAc,EACd,aAAa,EACb,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,sEAAsE;AACtE,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC;IAC1C,IAAI;IACJ,QAAQ;IACR,IAAI;IACJ,SAAS;IACT,IAAI;IACJ,cAAc;IACd,UAAU;IACV,UAAU;IACV,uBAAuB;IACvB,IAAI;IACJ,WAAW;IACX,eAAe;IACf,gBAAgB;CACjB,CAAC,CAAC;AAEH,oEAAoE;AACpE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,UAAU;IACV,iBAAiB;IACjB,UAAU;IACV,UAAU;IACV,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,YAAY;IACZ,IAAI;IACJ,UAAU;IACV,IAAI;IACJ,eAAe;IACf,IAAI;IACJ,eAAe;IACf,IAAI;IACJ,eAAe;IACf,wBAAwB;IACxB,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAgC;IAC/D,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC/B,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACpC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACrB,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1B,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;CACrB,CAAC;AAEF,MAAM,oBAAoB,GAAgC;IACxD,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IAC3B,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IAC9B,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;CAClC,CAAC;AAgBF,SAAS,mBAAmB,CAAC,OAAe,EAAE,SAAmB;IAC/D,IACE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EACrB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,2DAA2D,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,YAAY,OAAO,kDAAkD,OAAO,8DAA8D,CAC3I,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAa,EACb,OAAe,EACf,SAAiB;IAEjB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,+BAA+B,cAAc,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QACtC,IAAI,aAAa,IAAI,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,yCAAyC,OAAO,wCAAwC,CACtG,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,wEAAwE,CACtF,CAAC;QACJ,CAAC;QACD,IAAI,2BAA2B,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,6BAA6B,OAAO,6DAA6D,CAC/G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC;gBACH,eAAe,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACb,QAAQ,CAAC,MAAM,GAAG,6CAA6C,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAgB,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAgC,EAChC,MAAqB,EACrB,SAAiB;IAEjB,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,OAAO,GACX,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;IAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACpD,CAAC"}
+{"version":3,"file":"commandDescription.js","sourceRoot":"","sources":["../../src/fp/commandDescription.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,WAAW,EACX,cAAc,EACd,aAAa,EACb,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,sEAAsE;AACtE,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC;IAC1C,IAAI;IACJ,QAAQ;IACR,IAAI;IACJ,SAAS;IACT,IAAI;IACJ,cAAc;IACd,UAAU;IACV,UAAU;IACV,uBAAuB;IACvB,IAAI;IACJ,WAAW;IACX,eAAe;IACf,gBAAgB;CACjB,CAAC,CAAC;AAEH,oEAAoE;AACpE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,UAAU;IACV,iBAAiB;IACjB,UAAU;IACV,UAAU;IACV,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,YAAY;IACZ,IAAI;IACJ,UAAU;IACV,IAAI;IACJ,eAAe;IACf,IAAI;IACJ,eAAe;IACf,IAAI;IACJ,eAAe;IACf,wBAAwB;IACxB,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAgC;IAC/D,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC/B,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACpC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACrB,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1B,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;CACrB,CAAC;AAEF,MAAM,oBAAoB,GAAgC;IACxD,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IAC3B,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IAC9B,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;CAClC,CAAC;AAgBF,SAAS,mBAAmB,CAAC,OAAe,EAAE,SAAmB;IAC/D,IACE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EACrB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,2DAA2D,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,YAAY,OAAO,kDAAkD,OAAO,8DAA8D,CAC3I,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAa,EACb,OAAe,EACf,SAAiB;IAEjB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,+BAA+B,cAAc,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QACtC,IAAI,aAAa,IAAI,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,yCAAyC,OAAO,wCAAwC,CACtG,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,wEAAwE,CACtF,CAAC;QACJ,CAAC;QACD,IAAI,2BAA2B,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,6BAA6B,OAAO,6DAA6D,CAC/G,CAAC;QACJ,CAAC;QACD,sEAAsE;QACtE,4EAA4E;QAC5E,uEAAuE;QACvE,0BAA0B;QAC1B,IACE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YACpB,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAC9C,CAAC;YACD,IAAI,CAAC;gBACH,eAAe,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACb,QAAQ,CAAC,MAAM,GAAG,6CAA6C,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAgB,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAgC,EAChC,MAAqB,EACrB,SAAiB;IAEjB,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,OAAO,GACX,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;IAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACpD,CAAC"}

package/dist/fp/extensionSnapshot.js

@@ -2,11 +2,17 @@
 // A notification arriving after snapshot creation would mutate the
 // underlying Map if we just alias it.
 export function snapshotExtension(client) {
+    const diagnostics = new Map();
+    for (const [k, v] of client.latestDiagnostics)
+        diagnostics.set(k, [...v]);
+    const aiComments = new Map();
+    for (const [k, v] of client.latestAIComments)
+        aiComments.set(k, [...v]);
     return {
-        diagnostics: new Map([...client.latestDiagnostics.entries()].map(([k, v]) => [k, [...v]])),
+        diagnostics,
         selection: client.latestSelection,
         activeFile: client.latestActiveFile,
-        aiComments: new Map([...client.latestAIComments.entries()].map(([k, v]) => [k, [...v]])),
+        aiComments,
         debugState: client.latestDebugState,
         capturedAt: Date.now(),
     };

package/dist/fp/extensionSnapshot.js.map

@@ -1 +1 @@
-{"version":3,"file":"extensionSnapshot.js","sourceRoot":"","sources":["../../src/fp/extensionSnapshot.ts"],"names":[],"mappings":"AAiBA,yEAAyE;AACzE,mEAAmE;AACnE,sCAAsC;AACtC,MAAM,UAAU,iBAAiB,CAAC,MAAuB;IACvD,OAAO;QACL,WAAW,EAAE,IAAI,GAAG,CAClB,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CACrE;QACD,SAAS,EAAE,MAAM,CAAC,eAAe;QACjC,UAAU,EAAE,MAAM,CAAC,gBAAgB;QACnC,UAAU,EAAE,IAAI,GAAG,CACjB,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CACpE;QACD,UAAU,EAAE,MAAM,CAAC,gBAAgB;QACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"extensionSnapshot.js","sourceRoot":"","sources":["../../src/fp/extensionSnapshot.ts"],"names":[],"mappings":"AAiBA,yEAAyE;AACzE,mEAAmE;AACnE,sCAAsC;AACtC,MAAM,UAAU,iBAAiB,CAAC,MAAuB;IACvD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC7D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,iBAAiB;QAAE,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC3D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,gBAAgB;QAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO;QACL,WAAW;QACX,SAAS,EAAE,MAAM,CAAC,eAAe;QACjC,UAAU,EAAE,MAAM,CAAC,gBAAgB;QACnC,UAAU;QACV,UAAU,EAAE,MAAM,CAAC,gBAAgB;QACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAC;AACJ,CAAC"}

package/dist/fp/interpreterContext.d.ts

@@ -13,6 +13,32 @@ export interface BackendEnqueueOpts {
     effort?: "low" | "medium" | "high" | "max";
     systemPrompt?: string;
 }
+/**
+ * Options for an outbound webhook fired by an automation hook.
+ *
+ * `body` is the JSON-serializable payload. Backends serialize and set
+ * Content-Type if not already in `headers`. SSRF guarding is the backend's
+ * responsibility (production: loopback-only by default; tests: collect).
+ */
+export interface BackendWebhookOpts {
+    url: string;
+    method: "POST" | "PUT" | "PATCH";
+    headers: Readonly<Record<string, string>>;
+    body: Readonly<Record<string, unknown>>;
+    /** Hook key for diagnostic logging (e.g. "precompact"). */
+    hookKey: string;
+}
+/**
+ * Result of a webhook call. Always resolves — never throws — so a failed
+ * webhook does not block the rest of the interpreter run.
+ */
+export interface BackendWebhookResult {
+    ok: boolean;
+    /** HTTP status code on a completed request; absent on network error / timeout. */
+    status?: number;
+    /** Reason on failure — surfaced in the interpreter error list and logs. */
+    error?: string;
+}
 export interface Backend {
     /** Enqueue a task and return the task ID. */
     enqueueTask(opts: BackendEnqueueOpts): Promise<string>;
@@ -20,6 +46,12 @@ export interface Backend {
     scheduleRetry(key: string, delayMs: number, fn: () => void): () => void;
     /** Emit an informational notification (fire-and-forget). */
     notify(msg: string): void;
+    /**
+     * Fire an outbound webhook. Always resolves — never rejects — so failures
+     * never block other hooks. Production impl applies a 10s timeout and SSRF
+     * guard. Test impl pushes to `webhookCalls`.
+     */
+    postWebhook(opts: BackendWebhookOpts): Promise<BackendWebhookResult>;
 }
 export interface InterpreterContext {
     readonly state: AutomationState;
@@ -29,6 +61,30 @@ export interface InterpreterContext {
     readonly eventData: Readonly<Record<string, string>>;
     readonly backend: Backend;
     readonly log: (msg: string) => void;
+    /**
+     * Optional accessor for the live AutomationState at retry-fire time. If
+     * present, WithRetry uses this instead of the snapshot taken when the retry
+     * was scheduled — preventing retries from re-firing hooks that have since
+     * entered cooldown / dedup. AutomationHooks supplies a function that returns
+     * `this._automationState`; tests may omit.
+     */
+    readonly getLiveState?: () => AutomationState;
+    /**
+     * Optional atomic-retry executor. Receives a function that, given the
+     * truly-current `AutomationState` at lock-acquisition time, returns the
+     * post-retry state. AutomationHooks runs this through `_enqueueMutation`
+     * so the read-run-write happens atomically with respect to other
+     * `_runInterpreter` calls (the same chain that prevents two concurrent
+     * events from clobbering each other's writes).
+     *
+     * Replaces the older `mergeRetryState` setter API, which let a retry
+     * publish stale absolute state and clobber writes from concurrent runs
+     * that landed between scheduling and merge. Now the retry's interpret()
+     * is itself executed inside the lock against fresh live state.
+     *
+     * Tests may omit (TestBackend doesn't fire retries by default).
+     */
+    readonly runRetryUnderLock?: (work: (live: AutomationState) => Promise<AutomationState>) => void;
 }
 export interface InterpreterResult {
     readonly taskIds: ReadonlyArray<string>;
@@ -45,12 +101,14 @@ export interface InterpreterResult {
 export declare class VsCodeBackend implements Backend {
     private readonly orchestrator;
     private readonly logger?;
+    private readonly allowPrivateWebhooks;
     constructor(orchestrator: ClaudeOrchestrator, logger?: {
         info: (msg: string) => void;
-    } | undefined);
+    } | undefined, allowPrivateWebhooks?: boolean);
     enqueueTask(opts: BackendEnqueueOpts): Promise<string>;
     scheduleRetry(key: string, delayMs: number, fn: () => void): () => void;
     notify(msg: string): void;
+    postWebhook(opts: BackendWebhookOpts): Promise<BackendWebhookResult>;
 }
 export interface TestBackendCollector {
     enqueuedTasks: BackendEnqueueOpts[];
@@ -59,11 +117,18 @@ export interface TestBackendCollector {
         delayMs: number;
     }>;
     notifications: string[];
+    webhookCalls: BackendWebhookOpts[];
 }
 export declare class TestBackend implements Backend {
     readonly collector: TestBackendCollector;
+    /**
+     * Optional override for the webhook result a test wants to simulate.
+     * When unset, postWebhook returns `{ ok: true, status: 200 }`.
+     */
+    webhookResponse: BackendWebhookResult;
     enqueueTask(opts: BackendEnqueueOpts): Promise<string>;
     scheduleRetry(key: string, delayMs: number, _fn: () => void): () => void;
     notify(msg: string): void;
+    postWebhook(opts: BackendWebhookOpts): Promise<BackendWebhookResult>;
     reset(): void;
 }

package/dist/fp/interpreterContext.js

@@ -1,10 +1,34 @@
+import { isPrivateNonLoopbackHost } from "../ssrfGuard.js";
 // ── VsCodeBackend ─────────────────────────────────────────────────────────────
+/**
+ * SSRF guard for automation webhooks.
+ *
+ * Default policy (`allowPrivate=false`):
+ *   - Loopback (127.0.0.0/8, ::1, localhost, *.localhost) → ALLOWED.
+ *     Automation hooks fire INTO the same machine on the common path;
+ *     the bridge itself listens on 127.0.0.1, and recipe-6 webhooks
+ *     target `http://127.0.0.1:${BRIDGE_PORT}/...`.
+ *   - Other RFC 1918 / link-local / ULA / CGNAT / 0.0.0.0/8 → BLOCKED.
+ *   - Public hosts → ALLOWED.
+ *
+ * Opt-in (`allowPrivate=true`) drops the private-range check entirely.
+ *
+ * This is a deliberate divergence from `sendHttpRequest` which blocks ALL
+ * private addresses by default (loopback included). The reasoning: a
+ * MCP-tool-driven HTTP request is potentially attacker-controlled (a
+ * compromised LLM session could craft URLs); an automation webhook URL
+ * comes from a trusted policy file that the operator wrote. Loopback is
+ * the common case there, not the exceptional one.
+ */
+const WEBHOOK_TIMEOUT_MS = 10_000;
 export class VsCodeBackend {
     orchestrator;
     logger;
-    constructor(orchestrator, logger) {
+    allowPrivateWebhooks;
+    constructor(orchestrator, logger, allowPrivateWebhooks = false) {
         this.orchestrator = orchestrator;
         this.logger = logger;
+        this.allowPrivateWebhooks = allowPrivateWebhooks;
     }
     async enqueueTask(opts) {
         const taskId = this.orchestrator.enqueue({
@@ -28,13 +52,73 @@ export class VsCodeBackend {
     notify(msg) {
         this.logger?.info(msg);
     }
+    async postWebhook(opts) {
+        let parsed;
+        try {
+            parsed = new URL(opts.url);
+        }
+        catch (e) {
+            const error = `invalid url: ${e instanceof Error ? e.message : String(e)}`;
+            this.logger?.info(`[automation-webhook] ${opts.hookKey} blocked: ${error}`);
+            return { ok: false, error };
+        }
+        if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+            const error = `unsupported protocol "${parsed.protocol}"`;
+            this.logger?.info(`[automation-webhook] ${opts.hookKey} blocked: ${error}`);
+            return { ok: false, error };
+        }
+        if (!this.allowPrivateWebhooks &&
+            isPrivateNonLoopbackHost(parsed.hostname)) {
+            const error = `private/non-loopback host "${parsed.hostname}" blocked (use --automation-allow-private-webhooks to enable)`;
+            this.logger?.info(`[automation-webhook] ${opts.hookKey} blocked: ${error}`);
+            return { ok: false, error };
+        }
+        const headers = { ...opts.headers };
+        const hasContentType = Object.keys(headers).some((k) => k.toLowerCase() === "content-type");
+        if (!hasContentType)
+            headers["Content-Type"] = "application/json";
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), WEBHOOK_TIMEOUT_MS);
+        try {
+            const res = await fetch(opts.url, {
+                method: opts.method,
+                headers,
+                body: JSON.stringify(opts.body),
+                signal: controller.signal,
+            });
+            clearTimeout(timer);
+            if (!res.ok) {
+                const error = `non-2xx response: ${res.status}`;
+                this.logger?.info(`[automation-webhook] ${opts.hookKey} ${opts.method} ${opts.url} → ${res.status}`);
+                return { ok: false, status: res.status, error };
+            }
+            this.logger?.info(`[automation-webhook] ${opts.hookKey} ${opts.method} ${opts.url} → ${res.status}`);
+            return { ok: true, status: res.status };
+        }
+        catch (e) {
+            clearTimeout(timer);
+            const error = e instanceof Error
+                ? e.name === "AbortError"
+                    ? `timeout after ${WEBHOOK_TIMEOUT_MS}ms`
+                    : e.message
+                : String(e);
+            this.logger?.info(`[automation-webhook] ${opts.hookKey} ${opts.method} ${opts.url} failed: ${error}`);
+            return { ok: false, error };
+        }
+    }
 }
 export class TestBackend {
     collector = {
         enqueuedTasks: [],
         scheduledRetries: [],
         notifications: [],
+        webhookCalls: [],
     };
+    /**
+     * Optional override for the webhook result a test wants to simulate.
+     * When unset, postWebhook returns `{ ok: true, status: 200 }`.
+     */
+    webhookResponse = { ok: true, status: 200 };
     async enqueueTask(opts) {
         this.collector.enqueuedTasks.push(opts);
         return `task-${this.collector.enqueuedTasks.length}`;
@@ -47,10 +131,16 @@ export class TestBackend {
     notify(msg) {
         this.collector.notifications.push(msg);
     }
+    async postWebhook(opts) {
+        this.collector.webhookCalls.push(opts);
+        return this.webhookResponse;
+    }
     reset() {
         this.collector.enqueuedTasks = [];
         this.collector.scheduledRetries = [];
         this.collector.notifications = [];
+        this.collector.webhookCalls = [];
+        this.webhookResponse = { ok: true, status: 200 };
     }
 }
 //# sourceMappingURL=interpreterContext.js.map

package/dist/fp/interpreterContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"interpreterContext.js","sourceRoot":"","sources":["../../src/fp/interpreterContext.ts"],"names":[],"mappings":"AAiDA,iFAAiF;AAEjF,MAAM,OAAO,aAAa;IAEL;IACA;IAFnB,YACmB,YAAgC,EAChC,MAAwC;QADxC,iBAAY,GAAZ,YAAY,CAAoB;QAChC,WAAM,GAAN,MAAM,CAAkC;IACxD,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,IAAwB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YACvC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,aAAa,CAAC,GAAW,EAAE,OAAe,EAAE,EAAc;QACxD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;YAClD,EAAE,EAAE,CAAC;QACP,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;CACF;AAUD,MAAM,OAAO,WAAW;IACb,SAAS,GAAyB;QACzC,aAAa,EAAE,EAAE;QACjB,gBAAgB,EAAE,EAAE;QACpB,aAAa,EAAE,EAAE;KAClB,CAAC;IAEF,KAAK,CAAC,WAAW,CAAC,IAAwB;QACxC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,QAAQ,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;IACvD,CAAC;IAED,aAAa,CAAC,GAAW,EAAE,OAAe,EAAE,GAAe;QACzD,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,+CAA+C;QAC/C,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,aAAa,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,gBAAgB,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,SAAS,CAAC,aAAa,GAAG,EAAE,CAAC;IACpC,CAAC;CACF"}
+{"version":3,"file":"interpreterContext.js","sourceRoot":"","sources":["../../src/fp/interpreterContext.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAyG3D,iFAAiF;AAEjF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,OAAO,aAAa;IAEL;IACA;IACA;IAHnB,YACmB,YAAgC,EAChC,MAAwC,EACxC,uBAAgC,KAAK;QAFrC,iBAAY,GAAZ,YAAY,CAAoB;QAChC,WAAM,GAAN,MAAM,CAAkC;QACxC,yBAAoB,GAApB,oBAAoB,CAAiB;IACrD,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,IAAwB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YACvC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,aAAa,CAAC,GAAW,EAAE,OAAe,EAAE,EAAc;QACxD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;YAClD,EAAE,EAAE,CAAC;QACP,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAwB;QACxC,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,gBAAgB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wBAAwB,IAAI,CAAC,OAAO,aAAa,KAAK,EAAE,CACzD,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,yBAAyB,MAAM,CAAC,QAAQ,GAAG,CAAC;YAC1D,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wBAAwB,IAAI,CAAC,OAAO,aAAa,KAAK,EAAE,CACzD,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;QACD,IACE,CAAC,IAAI,CAAC,oBAAoB;YAC1B,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC,EACzC,CAAC;YACD,MAAM,KAAK,GAAG,8BAA8B,MAAM,CAAC,QAAQ,+DAA+D,CAAC;YAC3H,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wBAAwB,IAAI,CAAC,OAAO,aAAa,KAAK,EAAE,CACzD,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5D,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,cAAc,CAC1C,CAAC;QACF,IAAI,CAAC,cAAc;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAElE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC/B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC;gBAChD,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wBAAwB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAClF,CAAC;gBACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;YAClD,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wBAAwB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAClF,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,KAAK,GACT,CAAC,YAAY,KAAK;gBAChB,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY;oBACvB,CAAC,CAAC,iBAAiB,kBAAkB,IAAI;oBACzC,CAAC,CAAC,CAAC,CAAC,OAAO;gBACb,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAChB,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wBAAwB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,YAAY,KAAK,EAAE,CACnF,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;CACF;AAWD,MAAM,OAAO,WAAW;IACb,SAAS,GAAyB;QACzC,aAAa,EAAE,EAAE;QACjB,gBAAgB,EAAE,EAAE;QACpB,aAAa,EAAE,EAAE;QACjB,YAAY,EAAE,EAAE;KACjB,CAAC;IAEF;;;OAGG;IACH,eAAe,GAAyB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAElE,KAAK,CAAC,WAAW,CAAC,IAAwB;QACxC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,QAAQ,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;IACvD,CAAC;IAED,aAAa,CAAC,GAAW,EAAE,OAAe,EAAE,GAAe;QACzD,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,+CAA+C;QAC/C,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAwB;QACxC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,aAAa,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,gBAAgB,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,SAAS,CAAC,aAAa,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,YAAY,GAAG,EAAE,CAAC;QACjC,IAAI,CAAC,eAAe,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACnD,CAAC;CACF"}

package/dist/fp/policyParser.js

@@ -59,7 +59,13 @@ function buildPromptSource(src) {
             promptArgs: src.promptArgs,
         });
     }
-    return err("invalid_arg", "Hook must specify either `prompt` or `promptName`");
+    // Webhook-only hook (e.g. recipe-6 compaction triggers): no inline prompt,
+    // no named prompt, just a webhook fan-out. Caller is responsible for
+    // ensuring `webhook` is configured — `validatePromptSource` enforces this.
+    if (src.webhook !== undefined) {
+        return ok({ kind: "none" });
+    }
+    return err("invalid_arg", "Hook must specify either `prompt`, `promptName`, or `webhook`");
 }
 // ── WhenCondition mapping ─────────────────────────────────────────────────────
 function buildWhen(src) {
@@ -78,10 +84,31 @@ function buildWhen(src) {
         : undefined;
 }
 // ── Hook builder ──────────────────────────────────────────────────────────────
+/**
+ * Hook types that opt into webhook fan-out as of v1. Other types parse the
+ * `webhook` field successfully (per validatePromptSource) but the parser
+ * silently drops it — keeps the schema forward-compatible without enabling
+ * fan-out where it hasn't been thought through yet.
+ */
+const WEBHOOK_ENABLED_HOOK_TYPES = new Set([
+    "onPreCompact",
+    "onPostCompact",
+]);
 function buildHook(hookType, src, enabled, cooldownMs, condition, patterns, extras, model, effort, systemPrompt) {
     const promptSourceResult = buildPromptSource(src);
     if (!promptSourceResult.ok)
         return promptSourceResult;
+    // Wire `webhook` into the HookNode only for opted-in hook types. This keeps
+    // the v1 surface area focused on `onCompaction` (recipe-6 unblock) while
+    // letting the schema parse the field everywhere — adding a new hook type
+    // later is a one-line change to WEBHOOK_ENABLED_HOOK_TYPES.
+    const webhook = src.webhook && WEBHOOK_ENABLED_HOOK_TYPES.has(hookType)
+        ? {
+            url: src.webhook.url,
+            method: src.webhook.method,
+            headers: src.webhook.headers,
+        }
+        : undefined;
     const hookNode = hook({
         hookType,
         enabled,
@@ -93,6 +120,7 @@ function buildHook(hookType, src, enabled, cooldownMs, condition, patterns, extr
         effort,
         systemPrompt,
         extras,
+        webhook,
     });
     const key = cooldownKey(hookType, condition);
     // When dedupeByContent is active, the content-based dedup provides its own