poe-code 3.0.268 → 3.0.270

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "poe-code",
-  "version": "3.0.268",
+  "version": "3.0.270",
   "description": "CLI tool to configure Poe API for developer workflows.",
   "type": "module",
   "main": "./dist/index.js",

package/packages/agent-code-review/dist/config.js

@@ -2,6 +2,7 @@ import { lstat, mkdir, readFile, readdir, rename, stat, unlink, writeFile } from
 import { homedir } from "node:os";
 import { createConfigStore, defineScope, resolveConfigPath, resolveProjectConfigPath } from "@poe-code/poe-code-config";
 import { codeReviewConfigScope, parseCodeReviewConfigDocument, parseCodeReviewProfileDirectories } from "./config-scope.js";
+import { requireSafeDocumentSegment } from "./document-schemas.js";
 import { hasOwnErrorCode } from "./error-codes.js";
 import { resolveCodeReviewStoreDirectory } from "./review-store.js";
 const poeCoreAgentScope = defineScope("core", {
@@ -111,7 +112,7 @@ export async function resolveCodeReviewRunOptions(input, configOptions) {
         profileDirectories: parseCodeReviewProfileDirectories(inputProfileDirectories ?? configProfileDirectories),
         ...(inputProfilePath === undefined ? {} : { profilePath: inputProfilePath }),
         ...(inputPromptPath === undefined ? {} : { promptPath: inputPromptPath }),
-        ...(inputProfiles === undefined ? {} : { profiles: inputProfiles }),
+        ...(inputProfiles === undefined ? {} : { profiles: requireProfileFilters(inputProfiles) }),
         ...(inputAdditionalFeedback === undefined
             ? {}
             : { additionalFeedback: inputAdditionalFeedback })
@@ -165,6 +166,19 @@ function requireNonEmptyString(value, field) {
     }
     return normalized;
 }
+function requireProfileFilters(value) {
+    if (!Array.isArray(value)) {
+        throw new Error("profiles must be an array of safe profile names.");
+    }
+    return value.map((profile) => {
+        try {
+            return requireSafeDocumentSegment(profile, "profiles");
+        }
+        catch {
+            throw new Error("profiles must be an array of safe profile names.");
+        }
+    });
+}
 function isMissingFileError(error) {
     return hasOwnErrorCode(error, "ENOENT");
 }

package/packages/agent-code-review/dist/document-schemas.js

@@ -8,7 +8,7 @@ const CODE_REVIEW_PROMPT_ROLES = [
 ];
 const FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)([\s\S]*)$/;
 const SAFE_SEGMENT_RE = /^[A-Za-z0-9._-]+$/;
-const SAFE_GITHUB_ACTOR_RE = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})$/;
+const SAFE_GITHUB_ACTOR_RE = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/;
 export function requireSafeDocumentSegment(value, field) {
     if (typeof value !== "string" ||
         value.trim() !== value ||
@@ -179,9 +179,6 @@ export function serializeCodeReviewIngestSource(source, filePath = "code-review
 function parseOptionalFrontmatter(content, filePath) {
     const match = content.match(FRONTMATTER_RE);
     if (!match) {
-        if (/^---\r?\n/.test(content)) {
-            throw new Error(`${filePath}: frontmatter is missing a closing --- delimiter.`);
-        }
         return { body: content };
     }
     try {

package/packages/agent-code-review/dist/mcp.js

@@ -11,11 +11,17 @@ import { buildCodeReviewReviewerPrompt } from "./prompt-builders.js";
 export const CODE_REVIEW_AGENT_MCP_ROLES = ["agent", "orchestrator", "subagent"];
 const inlineCommentSchema = S.Object({
     path: S.String({ description: "Repository-relative path in the PR diff." }),
-    line: S.Number({ description: "Right-side line number in the PR diff." }),
+    line: S.Number({
+        description: "Right-side line number in the PR diff.",
+        jsonType: "integer",
+        minimum: 1
+    }),
     body: S.String({ description: "Inline review comment body." })
 });
 const inlineCommentIndexSchema = S.Number({
-    description: "Zero-based merged review inline comment index."
+    description: "Zero-based merged review inline comment index.",
+    jsonType: "integer",
+    minimum: 0
 });
 const prParam = S.String({ description: "GitHub pull request URL." });
 export function parseCodeReviewAgentMcpArgs(argv) {
@@ -140,7 +146,9 @@ export function createCodeReviewAgentMcpGroup(context, dependencies = {}) {
         handler: async ({ params }) => {
             const pr = canonicalPullRequestUrl(params.pr);
             const draft = validateDraft(params);
-            const currentState = await ensureState(store, context, pr);
+            const currentState = context.role === "orchestrator"
+                ? await ensureState(store, context, pr)
+                : await requireState(store, context, pr);
             if (context.role === "orchestrator") {
                 const unfinishedProfiles = Object.values(currentState.subagents)
                     .filter(({ status }) => status === "pending" || status === "running")
@@ -342,7 +350,11 @@ export function createCodeReviewAgentMcpGroup(context, dependencies = {}) {
             pr: prParam,
             index: inlineCommentIndexSchema,
             path: S.String({ description: "Repository-relative path in the PR diff." }),
-            line: S.Number({ description: "Right-side line number in the PR diff." }),
+            line: S.Number({
+                description: "Right-side line number in the PR diff.",
+                jsonType: "integer",
+                minimum: 1
+            }),
             body: S.String({ description: "Inline review comment body." })
         }),
         handler: async ({ params }) => {

package/packages/agent-code-review/dist/review-store.js

@@ -436,8 +436,8 @@ async function withFileLock(lockPath, lockTimeoutMs, operation) {
 }
 async function isStaleLock(lockPath, lockTimeoutMs) {
     try {
-        const ownerPid = Number.parseInt((await readFile(lockPath, "utf8")).trim(), 10);
-        if (Number.isSafeInteger(ownerPid) && ownerPid > 0) {
+        const ownerPid = parseLockOwnerPid((await readFile(lockPath, "utf8")).trim());
+        if (ownerPid !== undefined) {
             return !isRunningProcess(ownerPid);
         }
         return Date.now() - (await stat(lockPath)).mtimeMs >= lockTimeoutMs;
@@ -449,6 +449,13 @@ async function isStaleLock(lockPath, lockTimeoutMs) {
         throw error;
     }
 }
+function parseLockOwnerPid(value) {
+    const processId = Number(value);
+    if (!Number.isSafeInteger(processId) || processId <= 0) {
+        return undefined;
+    }
+    return String(processId) === value ? processId : undefined;
+}
 function isRunningProcess(processId) {
     try {
         process.kill(processId, 0);

package/packages/agent-spawn/dist/acp/session-update-converter.d.ts

@@ -1,10 +1,13 @@
-import type { SessionUpdate, ToolKind } from "../../../poe-acp-client/dist/index.js";
-import type { AcpEvent } from "./types.js";
+import type { SessionUpdate as AcpClientSessionUpdate, ToolKind as AcpClientToolKind } from "../../../poe-acp-client/dist/index.js";
+import type { AcpEvent, SessionUpdate as LegacySessionUpdate, ToolKind as LegacyToolKind } from "./types.js";
+type ConvertibleSessionUpdate = AcpClientSessionUpdate | LegacySessionUpdate;
+type ConvertibleToolKind = AcpClientToolKind | LegacyToolKind;
 export interface ToolRenderState {
     startedToolCalls: Set<string>;
     toolCallKinds: Map<string, string>;
     toolCallTitles: Map<string, string>;
 }
 export declare function createToolRenderState(): ToolRenderState;
-export declare function toRenderKind(kind: ToolKind | undefined | null): string;
-export declare function sessionUpdateToEvents(update: SessionUpdate, state: ToolRenderState): AcpEvent[];
+export declare function toRenderKind(kind: ConvertibleToolKind | undefined | null): string;
+export declare function sessionUpdateToEvents(update: ConvertibleSessionUpdate, state: ToolRenderState): AcpEvent[];
+export {};

package/packages/agent-spawn/dist/acp/session-update-converter.js

@@ -2,13 +2,13 @@ export function createToolRenderState() {
     return {
         startedToolCalls: new Set(),
         toolCallKinds: new Map(),
-        toolCallTitles: new Map(),
+        toolCallTitles: new Map()
     };
 }
 export function toRenderKind(kind) {
     if (kind === "execute")
         return "exec";
-    if (kind === "write")
+    if (kind === "write" || kind === "edit")
         return "edit";
     if (kind === "read")
         return "read";
@@ -60,7 +60,7 @@ export function sessionUpdateToEvents(update, state) {
         const usage = {
             event: "usage",
             inputTokens,
-            outputTokens,
+            outputTokens
         };
         if (cachedTokens > 0) {
             usage.cachedTokens = cachedTokens;
@@ -79,31 +79,33 @@ export function sessionUpdateToEvents(update, state) {
             return [];
         }
         state.startedToolCalls.add(update.toolCallId);
-        return [{
+        return [
+            {
                 event: "tool_start",
                 kind: renderKind,
                 title,
-                id: update.toolCallId,
-            }];
+                id: update.toolCallId
+            }
+        ];
     }
     if (update.sessionUpdate === "tool_call_update") {
-        const renderKind = toRenderKind(update.kind ?? undefined)
-            || state.toolCallKinds.get(update.toolCallId)
-            || "other";
+        const renderKind = (update.kind == null ? undefined : toRenderKind(update.kind)) ||
+            state.toolCallKinds.get(update.toolCallId) ||
+            "other";
         state.toolCallKinds.set(update.toolCallId, renderKind);
         const events = [];
         const toolTitle = toToolTitle(state.toolCallTitles.get(update.toolCallId) ?? update.toolCallId, update.locations);
         state.toolCallTitles.set(update.toolCallId, toolTitle);
         const status = update.status;
-        const shouldStart = !state.startedToolCalls.has(update.toolCallId)
-            && (status === "pending" || status === "in_progress");
+        const shouldStart = !state.startedToolCalls.has(update.toolCallId) &&
+            (status === "pending" || status === "in_progress");
         if (shouldStart) {
             state.startedToolCalls.add(update.toolCallId);
             events.push({
                 event: "tool_start",
                 kind: renderKind,
                 title: toolTitle,
-                id: update.toolCallId,
+                id: update.toolCallId
             });
         }
         if (status === "completed" || status === "failed" || status === "cancelled") {
@@ -113,14 +115,14 @@ export function sessionUpdateToEvents(update, state) {
                     event: "tool_start",
                     kind: renderKind,
                     title: toolTitle,
-                    id: update.toolCallId,
+                    id: update.toolCallId
                 });
             }
             events.push({
                 event: "tool_complete",
                 kind: renderKind,
                 path: extractToolOutputText(update),
-                id: update.toolCallId,
+                id: update.toolCallId
             });
         }
         return events;

package/packages/agent-spawn/dist/acp/types.d.ts

@@ -18,7 +18,7 @@
  */
 export type ToolKind = "read" | "edit" | "delete" | "move" | "search" | "execute" | "think" | "fetch" | "switch_mode" | "other";
 /** ACP-compatible type - @see https://agentclientprotocol.com/ - no package dependency, structural compatibility only */
-export type ToolCallStatus = "pending" | "in_progress" | "completed" | "failed";
+export type ToolCallStatus = "pending" | "in_progress" | "completed" | "failed" | "cancelled";
 /** ACP-compatible type - @see https://agentclientprotocol.com/ - no package dependency, structural compatibility only */
 export interface ContentChunk {
     type: "text";
@@ -39,9 +39,12 @@ export interface ToolCall {
     sessionUpdate: "tool_call";
     toolCallId: string;
     title: string;
+    content?: ToolCallContent[];
     kind?: ToolKind;
+    locations?: ToolCallLocation[];
     status?: ToolCallStatus;
     rawInput?: unknown;
+    rawOutput?: unknown;
     _meta?: Record<string, unknown>;
 }
 /** ACP-compatible type - @see https://agentclientprotocol.com/ - no package dependency, structural compatibility only */
@@ -54,13 +57,22 @@ export type ToolCallContent = {
     data: string;
 };
 /** ACP-compatible type - @see https://agentclientprotocol.com/ - no package dependency, structural compatibility only */
+export interface ToolCallLocation {
+    path: string;
+    lineNumber?: number | null;
+    _meta?: Record<string, unknown>;
+}
+/** ACP-compatible type - @see https://agentclientprotocol.com/ - no package dependency, structural compatibility only */
 export interface ToolCallUpdate {
     sessionUpdate: "tool_call_update";
     toolCallId: string;
     kind?: ToolKind;
-    status?: ToolCallStatus;
+    status?: ToolCallStatus | null;
     rawOutput?: unknown;
-    content?: ToolCallContent[];
+    rawInput?: unknown;
+    content?: ToolCallContent[] | null;
+    locations?: ToolCallLocation[] | null;
+    title?: string | null;
     _meta?: Record<string, unknown>;
 }
 /** ACP-compatible type - @see https://agentclientprotocol.com/ - no package dependency, structural compatibility only */

package/packages/agent-spawn/dist/index.d.ts

@@ -17,6 +17,8 @@ export { spawnInteractive } from "./spawn-interactive.js";
 export { spawnAutonomous } from "./autonomous.js";
 export type { AutonomousOptions, StreamingSpawnFn, StreamingSpawnReturn } from "./autonomous.js";
 export { renderAcpEvent, renderAcpStream, renderSessionUpdateStream } from "./acp/renderer.js";
+export { createToolRenderState, sessionUpdateToEvents } from "./acp/session-update-converter.js";
+export type { ToolRenderState } from "./acp/session-update-converter.js";
 export type { LogEntry, MalformedSpawnLogRecord, ReadSpawnLogOptions } from "./acp/replay.js";
 export { findLatestLog, listSpawnLogs, pickRandomLog, readSpawnLog, replaySpawnLog } from "./acp/replay.js";
 export type { SpawnStreamingOptions, SpawnStreamingResult } from "./acp/spawn.js";

package/packages/agent-spawn/dist/index.js

@@ -14,6 +14,7 @@ export { createSpawnParallel, SpawnParallelError } from "./parallel.js";
 export { spawnInteractive } from "./spawn-interactive.js";
 export { spawnAutonomous } from "./autonomous.js";
 export { renderAcpEvent, renderAcpStream, renderSessionUpdateStream } from "./acp/renderer.js";
+export { createToolRenderState, sessionUpdateToEvents } from "./acp/session-update-converter.js";
 export { findLatestLog, listSpawnLogs, pickRandomLog, readSpawnLog, replaySpawnLog } from "./acp/replay.js";
 export { spawnStreaming } from "./acp/spawn.js";
 export { spawnAcp } from "./acp/spawn-acp.js";