praxis-agent 0.46.0 → 0.46.2

package/dist/cli/tui/decision-surface-model.js

@@ -100,6 +100,32 @@ export function projectTuiDecisionSurface(input) {
             cancellation,
         };
     }
+    if (input.kind === 'cd-trust') {
+        const selectedIndex = normalizeIndex(input.selectedIndex, 2);
+        const options = projectedOptions([{ label: 'No, stay put' }, { label: 'Yes, move here' }], selectedIndex);
+        return {
+            kind: 'cd-trust',
+            heading: 'Moving to a new directory:',
+            canonicalPath: input.canonicalPath,
+            explanation: "This session hasn't worked here before. Is this a directory you created or one you trust?",
+            scope: 'Praxis can read, edit, and execute files in this directory.',
+            securityGuide: 'Security guide: https://code.claude.com/docs/en/security',
+            options,
+            selectedIndex,
+            range: range(options.length),
+            actions: [
+                {
+                    visualLabel: 'Enter to confirm',
+                    screenReaderLabel: 'Enter to confirm',
+                },
+                { screenReaderLabel: 'Use up and down arrows to change selection' },
+                { screenReaderLabel: 'Press 1 or 2 to choose directly' },
+                { screenReaderLabel: 'Press y to move here' },
+                { screenReaderLabel: 'Press n to stay put' },
+            ],
+            cancellation,
+        };
+    }
     const count = input.questions.length;
     const questionIndex = normalizeIndex(input.questionIndex, count);
     if (count === 0)

package/dist/cli/tui/decision-surface.js

@@ -31,8 +31,11 @@ function PlanSurface({ model, screenReader, }) {
 function QuestionSurface({ model, screenReader, }) {
     return (_jsxs(DialogFrame, { title: model.heading, screenReader: screenReader, children: [_jsx(Text, { children: model.progress }), model.emptyState ? _jsx(Text, { dimColor: true, children: model.emptyState }) : null, model.options.map((option) => (_jsxs(Box, { flexDirection: "column", children: [_jsxs(Text, { children: [option.index, ". ", option.label, option.description ? ` — ${option.description}` : ''] }), option.preview ? _jsx(Text, { dimColor: true, children: option.preview }) : null] }, `${option.index}-${option.label}`))), _jsxs(Text, { children: [screenReader ? 'Current answer: ' : '› ', model.answer || (screenReader ? '(empty)' : '')] }), _jsx(Footer, { ...model, screenReader: screenReader })] }));
 }
+function CdTrustSurface({ model, screenReader, }) {
+    return (_jsxs(DialogFrame, { title: model.heading, screenReader: screenReader, children: [_jsx(Text, { children: model.canonicalPath }), _jsx(Text, { dimColor: true, children: model.explanation }), _jsx(Text, { dimColor: true, children: model.scope }), _jsx(Text, { dimColor: true, children: model.securityGuide }), model.options.map((option) => (_jsx(Option, { option: option, screenReader: screenReader }, option.index))), _jsx(Footer, { ...model, screenReader: screenReader })] }));
+}
 export function DecisionSurface({ model, width, screenReader, }) {
-    const content = model.kind === 'plan-approval' ? (_jsx(PlanSurface, { model: model, screenReader: screenReader })) : (_jsx(QuestionSurface, { model: model, screenReader: screenReader }));
+    const content = model.kind === 'plan-approval' ? (_jsx(PlanSurface, { model: model, screenReader: screenReader })) : model.kind === 'question' ? (_jsx(QuestionSurface, { model: model, screenReader: screenReader })) : (_jsx(CdTrustSurface, { model: model, screenReader: screenReader }));
     const normalizedWidth = Number.isFinite(width)
         ? Math.min(100, Math.max(1, Math.trunc(width)))
         : 100;

package/dist/cli/tui/open-url.d.ts

@@ -1,2 +1,12 @@
-export declare function openTuiUrl(url: string): Promise<void>;
+type OpenUrlOptions = {
+    timeout: number;
+    shell: false;
+};
+type OpenUrlExecutor = (command: string, args: string[], options: OpenUrlOptions, callback: (error?: Error | null) => void) => unknown;
+type OpenUrlDependencies = {
+    platform?: NodeJS.Platform;
+    execFile?: OpenUrlExecutor;
+};
+export declare function openTuiUrl(url: string, dependencies?: OpenUrlDependencies): Promise<void>;
+export {};
 //# sourceMappingURL=open-url.d.ts.map

package/dist/cli/tui/open-url.js

@@ -1,13 +1,33 @@
 import { execFile } from 'node:child_process';
-export async function openTuiUrl(url) {
-    const command = process.platform === 'darwin'
+const defaultExecFile = (command, args, options, callback) => execFile(command, args, options, callback);
+export async function openTuiUrl(url, dependencies = {}) {
+    let parsedUrl;
+    try {
+        parsedUrl = new URL(url);
+    }
+    catch {
+        throw new Error('TUI URL must be an absolute HTTP(S) URL');
+    }
+    if (parsedUrl.protocol !== 'http:' && parsedUrl.protocol !== 'https:')
+        throw new Error('TUI URL must be an absolute HTTP(S) URL');
+    const canonicalUrl = parsedUrl.href;
+    const platform = dependencies.platform ?? process.platform;
+    const command = platform === 'darwin'
         ? 'open'
-        : process.platform === 'win32'
-            ? 'cmd'
+        : platform === 'win32'
+            ? 'rundll32.exe'
             : 'xdg-open';
-    const args = process.platform === 'win32' ? ['/c', 'start', '', url] : [url];
-    await new Promise((resolvePromise) => {
-        execFile(command, args, { timeout: 10_000 }, () => resolvePromise());
+    const args = platform === 'win32'
+        ? ['url.dll,FileProtocolHandler', canonicalUrl]
+        : [canonicalUrl];
+    const executor = dependencies.execFile ?? defaultExecFile;
+    await new Promise((resolvePromise, rejectPromise) => {
+        try {
+            executor(command, args, { timeout: 10_000, shell: false }, (error) => error == null ? resolvePromise() : rejectPromise(error));
+        }
+        catch (error) {
+            rejectPromise(error);
+        }
     });
 }
 //# sourceMappingURL=open-url.js.map

package/dist/cli/tui/quiet-choice-rows.js

@@ -176,6 +176,17 @@ function decision(surface, density, sr) {
             explicitFooter('quiet:plan:footer', '↑/↓ select  Enter confirm  Esc cancel', 'Use up and down arrows to select. Press Enter to confirm. Press Escape to cancel.'),
         ];
     }
+    if (surface.kind === 'cd-trust') {
+        out.push(row('quiet:cd-trust:path', surface.canonicalPath, 'body'));
+        out.push(row('quiet:cd-trust:explanation', surface.explanation, 'muted'));
+        out.push(row('quiet:cd-trust:scope', surface.scope, 'muted'));
+        out.push(row('quiet:cd-trust:security-guide', surface.securityGuide, 'muted'));
+        out.push(...optionsRows(surface.options, 'quiet:cd-trust:option', density, sr));
+        return [
+            ...out,
+            explicitFooter('quiet:cd-trust:footer', '↑/↓ select  Enter confirm  Esc cancel', 'Use up and down arrows to select. Press Enter to confirm. Press Escape to cancel.'),
+        ];
+    }
     if (surface.progress)
         out.push(row('quiet:question:progress', surface.progress, 'muted'));
     if (surface.question)
@@ -291,7 +302,9 @@ export function projectQuietChoiceRows(surface, options) {
             row('quiet:exit:heading', 'Exit Praxis?', 'heading'),
             explicitFooter('quiet:exit:footer', 'Enter confirm  Esc cancel', 'Press Enter to confirm. Press Escape to cancel.'),
         ];
-    if (surface.kind === 'plan-approval' || surface.kind === 'question')
+    if (surface.kind === 'plan-approval' ||
+        surface.kind === 'question' ||
+        surface.kind === 'cd-trust')
         return decision(surface, options.density, sr);
     if (surface.kind === 'session-picker' ||
         surface.kind === 'command-palette' ||

package/dist/cli/tui/sandbox-settings.d.ts

@@ -1,8 +1,16 @@
 import type { SandboxDependencyCheck } from '@anthropic-ai/sandbox-runtime';
 import type { JsonResource } from '../../core/resources.js';
+import { type ClaudeSandboxPlatform } from '../../sandbox/claude-sandbox-runtime.js';
 import { type ClaudeSandboxSettings } from '../../sandbox/claude-sandbox-settings.js';
 export type TuiSandboxMode = 'auto-allow' | 'regular' | 'disabled';
 export type TuiSandboxTab = 'mode' | 'dependencies' | 'overrides' | 'config';
+export interface TuiSandboxRuntime {
+    initialize(settings: ClaudeSandboxSettings): Promise<void>;
+    unavailableReason(settings: ClaudeSandboxSettings): string | undefined;
+    platformName(): ClaudeSandboxPlatform;
+    dependencyCheck(settings: ClaudeSandboxSettings): SandboxDependencyCheck;
+    isSupportedPlatform(): boolean;
+}
 export interface TuiSandboxSnapshot {
     settings: ClaudeSandboxSettings;
     dependencies: SandboxDependencyCheck;
@@ -22,11 +30,12 @@ export interface TuiSandboxStore {
     }>;
 }
 export declare function linuxGlobPatternWarnings(resources: readonly JsonResource[], platform: 'macos' | 'linux' | 'windows' | 'wsl'): string[];
-export declare function createTuiSandboxStore({ configRoot, cwd, homeDirectory, additionalDirectories, environment, }: {
+export declare function createTuiSandboxStore({ configRoot, cwd, homeDirectory, additionalDirectories, environment, runtime, }: {
     configRoot: string;
     cwd: string;
     homeDirectory: string;
     additionalDirectories?: readonly string[];
     environment?: NodeJS.ProcessEnv;
+    runtime?: TuiSandboxRuntime;
 }): TuiSandboxStore;
 //# sourceMappingURL=sandbox-settings.d.ts.map

package/dist/cli/tui/sandbox-settings.js

@@ -2,7 +2,7 @@ import { readFile } from 'node:fs/promises';
 import { join, relative } from 'node:path';
 import { writeFileAtomically } from '../../platform/atomic-write.js';
 import { loadNativeSharedResources } from '../../persistence/native-resources.js';
-import { claudeSandboxRuntime } from '../../sandbox/claude-sandbox-runtime.js';
+import { claudeSandboxRuntime, } from '../../sandbox/claude-sandbox-runtime.js';
 import { nativeSandboxTempDirectory, loadClaudeSandboxSettings, } from '../../sandbox/claude-sandbox-settings.js';
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
@@ -75,7 +75,7 @@ export function linuxGlobPatternWarnings(resources, platform) {
     }
     return [...new Set(warnings)];
 }
-export function createTuiSandboxStore({ configRoot, cwd, homeDirectory, additionalDirectories = [], environment = process.env, }) {
+export function createTuiSandboxStore({ configRoot, cwd, homeDirectory, additionalDirectories = [], environment = process.env, runtime = claudeSandboxRuntime, }) {
     const localSettingsPath = join(cwd, '.praxis', 'settings.local.json');
     const load = async () => {
         const resources = (await loadNativeSharedResources({ root: configRoot, cwd })).settings;
@@ -87,13 +87,13 @@ export function createTuiSandboxStore({ configRoot, cwd, homeDirectory, addition
             additionalDirectories,
             tempDirectory: nativeSandboxTempDirectory(environment),
         });
-        await claudeSandboxRuntime.initialize(settings);
-        const unavailableReason = claudeSandboxRuntime.unavailableReason(settings);
-        const platform = claudeSandboxRuntime.platformName();
+        await runtime.initialize(settings);
+        const unavailableReason = runtime.unavailableReason(settings);
+        const platform = runtime.platformName();
         return {
             settings,
-            dependencies: claudeSandboxRuntime.dependencyCheck(settings),
-            supported: claudeSandboxRuntime.isSupportedPlatform(),
+            dependencies: runtime.dependencyCheck(settings),
+            supported: runtime.isSupportedPlatform(),
             platform,
             globPatternWarnings: linuxGlobPatternWarnings(resources, platform),
             ...(unavailableReason ? { unavailableReason } : {}),

package/dist/cli/tui/tui-focus-stack.d.ts

@@ -7,6 +7,7 @@ export interface TuiFocusProjectionInput {
     readonly pendingPrefix: boolean;
     readonly permission: boolean;
     readonly planApproval: boolean;
+    readonly cdTrust?: boolean;
     readonly question: boolean;
     readonly elicitation: 'plain' | 'url-waiting' | 'expanded-options' | false;
     readonly selectingSession: boolean;

package/dist/cli/tui/tui-focus-stack.js

@@ -19,6 +19,12 @@ export function projectTuiFocusStack(input) {
             layer: { kind: 'cancelable', target: 'plan-approval' },
         };
     }
+    else if (input.cdTrust) {
+        higher = {
+            id: 'cd-trust',
+            layer: { kind: 'cancelable', target: 'cd-trust' },
+        };
+    }
     else if (input.question) {
         higher = {
             id: 'question',

package/dist/cli/tui/tui-interaction-router.d.ts

@@ -1,7 +1,7 @@
 import { type ComposerKeyProjection } from './composer-key-router.js';
 import type { ComposerEditorState } from './composer-editor.js';
 export type TuiScrollIntent = 'page-older' | 'page-newer' | 'half-page-older' | 'half-page-newer' | 'line-older' | 'line-newer' | 'none';
-export type TuiCancellationTarget = 'permission' | 'plan-approval' | 'question' | 'elicitation' | 'elicitation-url-waiting' | 'elicitation-options' | 'file-picker' | 'command-palette';
+export type TuiCancellationTarget = 'permission' | 'plan-approval' | 'cd-trust' | 'question' | 'elicitation' | 'elicitation-url-waiting' | 'elicitation-options' | 'file-picker' | 'command-palette';
 export type TuiInteractionLayer = {
     readonly kind: 'none';
 } | {

package/dist/cli/tui/tui-interaction-router.js

@@ -44,7 +44,8 @@ export function routeTuiInteraction(snapshot, input) {
     if (snapshot.layer.kind === 'delegated')
         return delegated(confirmationEffects);
     const viewport = snapshot.viewport;
-    if (viewport.enabled && input.scrollIntent !== 'none') {
+    const scrollIsIncidental = input.action === undefined || input.action.startsWith('scroll:');
+    if (viewport.enabled && input.scrollIntent !== 'none' && scrollIsIncidental) {
         const pageRows = finiteNonNegativeInteger(viewport.pageRows);
         const offset = finiteNonNegativeInteger(viewport.offset);
         const maxOffset = finiteNonNegativeInteger(viewport.maxOffset);

package/dist/cli-runtime.d.ts

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { type ForkResult, type ManualCompactResult, type ManualCompactSelection, type RewindPoint, type SessionForkCheckpoint, type SessionInspection, type SessionRunResult, type SessionSummary, type SideQuestionForkResult, type SideQuestionResult } from './application/session-service.js';
+import { type CwdInspection, type ForkResult, type ManualCompactResult, type ManualCompactSelection, type RewindPoint, type SessionForkCheckpoint, type SessionInspection, type SessionRunResult, type SessionSummary, type SideQuestionForkResult, type SideQuestionResult } from './application/session-service.js';
 import type { TeamLeadOperations } from './application/team-lead-operations.js';
 import type { ClaudeSessionCostSnapshot } from './application/session-cost-tracker.js';
 import { type AgentColorName, type AgentColorSelection } from './core/agent-color.js';
@@ -43,7 +43,8 @@ interface SessionCommands {
     setPermissionMode?(sessionId: string, mode: ClaudePermissionMode): Promise<void>;
     rewindFiles?(sessionId: string, userMessageId: string): Promise<void>;
     rewindPoints?(sessionId: string): Promise<RewindPoint[]>;
-    changeCwd?(sessionId: string | undefined, cwd: string): Promise<string>;
+    changeCwd?(sessionId: string | undefined, cwd: string, expectedCanonicalTarget?: string): Promise<string>;
+    inspectCwd?(cwd: string): Promise<CwdInspection>;
     notify?(sessionId: string | undefined, message: string, notificationType: string, title?: string): void;
     recordCdUsage?(sessionId: string): Promise<void>;
     approveRecentlyDenied?(sessionId: string, display: string): Promise<void>;

package/dist/cli-runtime.js

@@ -2049,7 +2049,8 @@ const createDefaultService = async ({ eventSink, requireProvider, hooksOnly = fa
             setPermissionMode: (sessionId, permissionMode) => service.setPermissionMode(sessionId, permissionMode),
             rewindFiles: (sessionId, userMessageId) => service.rewindFiles(sessionId, userMessageId),
             rewindPoints: (sessionId) => service.rewindPoints(sessionId),
-            changeCwd: (sessionId, cwd) => service.changeCwd(sessionId, cwd),
+            changeCwd: (sessionId, cwd, expectedCanonicalTarget) => service.changeCwd(sessionId, cwd, expectedCanonicalTarget),
+            inspectCwd: (cwd) => service.inspectCwd(cwd),
             notify: (sessionId, message, notificationType, title) => service.notifyDetached(sessionId, message, notificationType, title),
             recordCdUsage: (sessionId) => service.recordCdUsage(sessionId),
             approveRecentlyDenied: (sessionId, display) => service.approveRecentlyDenied(sessionId, display),

package/dist/native/schema.d.ts

@@ -7,8 +7,4 @@
 export type NativeTranscriptEntry = Record<string, unknown> & {
     type: string;
 };
-export declare function isNativeForkableEntryType(type: string): boolean;
-/** Copy only projection metadata; persisted native events are copied by
- * NativeSessionTranscript.forkTo and retain their event identity semantics. */
-export declare function copyNativeEntryWithSessionId(entry: NativeTranscriptEntry, sessionId: string): NativeTranscriptEntry;
 //# sourceMappingURL=schema.d.ts.map

package/dist/native/schema.js

@@ -1,24 +1,2 @@
-const FORKABLE_ENTRY_TYPES = new Set([
-    'agent-color',
-    'agent-name',
-    'agent-setting',
-    'ai-title',
-    'assistant',
-    'attachment',
-    'custom-title',
-    'last-prompt',
-    'mode',
-    'permission-mode',
-    'pr-link',
-    'system',
-    'user',
-]);
-export function isNativeForkableEntryType(type) {
-    return FORKABLE_ENTRY_TYPES.has(type);
-}
-/** Copy only projection metadata; persisted native events are copied by
- * NativeSessionTranscript.forkTo and retain their event identity semantics. */
-export function copyNativeEntryWithSessionId(entry, sessionId) {
-    return { ...entry, sessionId };
-}
+export {};
 //# sourceMappingURL=schema.js.map

package/dist/tools/team-lead-tools.js

@@ -304,11 +304,12 @@ function validate(input, name) {
         for (const member of input.roster) {
             if (!member || typeof member !== 'object' || Array.isArray(member))
                 throw new Error('Invalid Team member');
-            objectInput(member, [
-                'name',
-                'agentType',
-                'access',
-            ]);
+            const value = member;
+            objectInput(value, ['name', 'agentType', 'access']);
+            stringValue(value, 'name');
+            stringValue(value, 'agentType');
+            if (value.access !== 'read-only' && value.access !== 'write')
+                throw new Error('Invalid Team member access');
         }
         for (const task of input.tasks) {
             if (!task || typeof task !== 'object' || Array.isArray(task))
@@ -321,6 +322,12 @@ function validate(input, name) {
                 'blockedBy',
                 'claims',
             ]);
+            stringValue(value, 'id');
+            stringValue(value, 'description');
+            stringValue(value, 'assignee');
+            if (!Array.isArray(value.blockedBy) ||
+                value.blockedBy.some((entry) => typeof entry !== 'string' || entry.trim() === ''))
+                throw new Error('Invalid Team blockedBy');
             if (!value.claims ||
                 typeof value.claims !== 'object' ||
                 Array.isArray(value.claims))
@@ -332,6 +339,18 @@ function validate(input, name) {
                 'migrations',
                 'mergeTargets',
             ]);
+            for (const key of [
+                'files',
+                'publicContracts',
+                'generatedArtifacts',
+                'migrations',
+                'mergeTargets',
+            ]) {
+                const entries = value.claims[key];
+                if (!Array.isArray(entries) ||
+                    entries.some((entry) => typeof entry !== 'string' || entry.trim() === ''))
+                    throw new Error(`Invalid Team claim list: ${key}`);
+            }
         }
         return input;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "praxis-agent",
-  "version": "0.46.0",
+  "version": "0.46.2",
   "description": "Local-first, single-user general agent for the command line.",
   "license": "MIT",
   "author": "wuqisen",
@@ -29,7 +29,7 @@
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
-    "check": "npm run format:check && npm run lint && npm run test:docs && npm run verify:release-automation && npm run verify:ci-coverage && npm run check:boundaries && npm run typecheck && npm run build:native && npm run build && npm test",
+    "check": "npm run format:check && npm run lint && npm run test:docs && npm run verify:release-automation && npm run verify:ci-coverage && npm run verify:fixture-contracts && npm run check:boundaries && npm run typecheck && npm run build:native && npm run build && npm test",
     "check:boundaries": "node scripts/check-boundaries.mjs",
     "dev": "tsx src/cli.ts",
     "format": "prettier --write .",
@@ -44,11 +44,11 @@
     "release:artifacts": "node scripts/build-release-artifacts.mjs",
     "release:verify": "node scripts/verify-release-ref.mjs",
     "test": "vitest run",
-    "test:coverage": "vitest run --coverage",
+    "test:coverage": "vitest run --coverage && node scripts/verify-nonzero-runtime-coverage.mjs",
     "test:docs": "node scripts/verify-docs.mjs",
     "test:tui:pty": "npm run build && node scripts/verify-fullscreen-rendering.mjs && node scripts/verify-interactive-ansi.mjs",
     "test:self-update": "npm run build && node scripts/verify-self-update-contract.mjs",
-    "test:core-completion": "npm run build && node scripts/verify-core-completion-audit.mjs",
+    "test:core-completion": "npm run test:fixtures",
     "test:performance": "npm run build && node scripts/verify-projection-scaling.mjs && node scripts/verify-projection-regression.mjs && node scripts/verify-quiet-frame-performance.mjs",
     "test:performance:projection": "npm run build && node scripts/verify-projection-scaling.mjs",
     "test:performance:projection-regression": "npm run build && node scripts/verify-projection-regression.mjs",
@@ -56,9 +56,12 @@
     "test:prompt-suggestions": "npm run build && node scripts/verify-prompt-suggestions.mjs",
     "test:mcp-oauth-serve": "npm run build && node scripts/verify-mcp-oauth-serve.mjs",
     "test:package": "npm run build && node scripts/verify-native-release-package.mjs",
+    "test:security": "npm audit --omit=dev",
     "typecheck": "tsc --noEmit",
     "verify:release-automation": "node scripts/verify-release-automation.mjs",
-    "verify:ci-coverage": "node scripts/verify-ci-coverage.mjs"
+    "verify:ci-coverage": "node scripts/verify-ci-coverage.mjs",
+    "verify:fixture-contracts": "node scripts/verify-fixture-contracts.mjs",
+    "test:fixtures": "node scripts/run-fixture-contracts.mjs"
   },
   "engines": {
     "node": ">=24"

package/dist/native/fork.d.ts

@@ -1,9 +0,0 @@
-import { type NativeTranscriptEntry } from './schema.js';
-export interface ClaudeNativeForkOptions {
-    source: readonly NativeTranscriptEntry[];
-    sourceSessionId: string;
-    sessionId: string;
-    resumeSessionAt?: string;
-}
-export declare function createClaudeNativeFork({ source, sourceSessionId, sessionId, resumeSessionAt, }: ClaudeNativeForkOptions): NativeTranscriptEntry[];
-//# sourceMappingURL=fork.d.ts.map