safeword 0.78.0 → 0.78.2

package/dist/chunk-FV2S4LAR.js

@@ -0,0 +1,122 @@
+// src/cli-protocol/policy.ts
+var EFFECT_NOUNS = {
+  files: "file",
+  packages: "package",
+  configuration: "configuration",
+  network: "network",
+  destructive: "destructive"
+};
+function firstNonEmptyEffect(effects) {
+  return Object.keys(effects).find(
+    (effectClass) => effects[effectClass].length > 0
+  );
+}
+function assertNetworkPolicy(definition, result, offline) {
+  if (offline && result.effects.network.length > 0) {
+    throw new Error(`Command ${definition.name} reported network effects while running offline`);
+  }
+  if (definition.networkPolicy === "never" && result.effects.network.length > 0) {
+    throw new Error(`Command ${definition.name} reported undeclared network effects`);
+  }
+}
+function assertEffectPolicy(definition, result, options) {
+  assertNetworkPolicy(definition, result, options.offline);
+  if (definition.effectClass === "observe" || definition.effectClass === "plan") {
+    const effectClass = firstNonEmptyEffect(result.effects);
+    if (effectClass !== void 0) {
+      throw new Error(
+        `The ${definition.effectClass} command ${definition.name} reported ${EFFECT_NOUNS[effectClass]} effects`
+      );
+    }
+  }
+  if (definition.effectClass === "hook" && (result.effects.packages.length > 0 || result.effects.network.length > 0 || result.effects.destructive.length > 0)) {
+    throw new Error(`Hook command ${definition.name} reported forbidden lifecycle effects`);
+  }
+}
+var MANAGED_PROGRESS_SIGNAL = "SAFEWORD_REVIEW_PROGRESS";
+function consumeManagedProgressSignal(environment) {
+  const enabled = environment[MANAGED_PROGRESS_SIGNAL] === "1";
+  Reflect.deleteProperty(environment, MANAGED_PROGRESS_SIGNAL);
+  return enabled;
+}
+function shouldReportProgress(options) {
+  return !options.quiet && (!options.json || options.managedReview);
+}
+function createBestEffortByteSink(write) {
+  return (buffer) => {
+    let offset = 0;
+    try {
+      while (offset < buffer.length) {
+        const written = write(buffer, offset, buffer.length - offset);
+        if (!Number.isSafeInteger(written) || written <= 0 || written > buffer.length - offset) {
+          return;
+        }
+        offset += written;
+      }
+    } catch {
+    }
+  };
+}
+function createBestEffortProgressSink(write) {
+  const writeBytes = createBestEffortByteSink(write);
+  return (message) => {
+    writeBytes(Buffer.from(`${message}
+`));
+  };
+}
+function createManagedReviewProgress(progress) {
+  return { ...progress, managed: true };
+}
+var PROGRESS_ANNOUNCE_DELAY_MS = 100;
+var PROGRESS_HEARTBEAT_INTERVAL_MS = 3e4;
+function resolveHeartbeatIntervalMs(environment = process.env) {
+  if (environment.NODE_ENV !== "test") return PROGRESS_HEARTBEAT_INTERVAL_MS;
+  const override = Number(environment.SAFEWORD_PROGRESS_HEARTBEAT_MS);
+  if (!Number.isSafeInteger(override) || override < 1 || override > PROGRESS_HEARTBEAT_INTERVAL_MS) {
+    return PROGRESS_HEARTBEAT_INTERVAL_MS;
+  }
+  return override;
+}
+function createProgressReporter(adapters) {
+  let announcementHandle;
+  let heartbeatHandle;
+  const heartbeatIntervalMs = resolveHeartbeatIntervalMs();
+  function scheduleHeartbeat(message) {
+    heartbeatHandle = adapters.schedule(() => {
+      adapters.emit(message);
+      scheduleHeartbeat(message);
+    }, heartbeatIntervalMs);
+  }
+  return {
+    start(message) {
+      if (announcementHandle !== void 0) adapters.cancel(announcementHandle);
+      if (heartbeatHandle !== void 0) adapters.cancel(heartbeatHandle);
+      heartbeatHandle = void 0;
+      announcementHandle = adapters.schedule(() => {
+        adapters.emit(message);
+        announcementHandle = void 0;
+      }, PROGRESS_ANNOUNCE_DELAY_MS);
+    },
+    heartbeat(message) {
+      if (heartbeatHandle !== void 0) adapters.cancel(heartbeatHandle);
+      scheduleHeartbeat(message);
+    },
+    stop() {
+      if (announcementHandle !== void 0) adapters.cancel(announcementHandle);
+      if (heartbeatHandle !== void 0) adapters.cancel(heartbeatHandle);
+      announcementHandle = void 0;
+      heartbeatHandle = void 0;
+    }
+  };
+}
+
+export {
+  assertEffectPolicy,
+  consumeManagedProgressSignal,
+  shouldReportProgress,
+  createBestEffortByteSink,
+  createBestEffortProgressSink,
+  createManagedReviewProgress,
+  createProgressReporter
+};
+//# sourceMappingURL=chunk-FV2S4LAR.js.map

package/dist/chunk-FV2S4LAR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli-protocol/policy.ts"],"sourcesContent":["import type { CommandDefinition } from './catalog.js';\nimport type { ProgressReporter } from './handler.js';\nimport type { CliResult, Effects } from './result.js';\n\nconst EFFECT_NOUNS: Readonly<Record<keyof Effects, string>> = {\n  files: 'file',\n  packages: 'package',\n  configuration: 'configuration',\n  network: 'network',\n  destructive: 'destructive',\n};\n\nfunction firstNonEmptyEffect(effects: Effects): keyof Effects | undefined {\n  return (Object.keys(effects) as (keyof Effects)[]).find(\n    effectClass => effects[effectClass].length > 0,\n  );\n}\n\nfunction assertNetworkPolicy(\n  definition: CommandDefinition,\n  result: CliResult,\n  offline: boolean,\n): void {\n  if (offline && result.effects.network.length > 0) {\n    throw new Error(`Command ${definition.name} reported network effects while running offline`);\n  }\n  if (definition.networkPolicy === 'never' && result.effects.network.length > 0) {\n    throw new Error(`Command ${definition.name} reported undeclared network effects`);\n  }\n}\n\nexport function assertEffectPolicy(\n  definition: CommandDefinition,\n  result: CliResult,\n  options: { offline: boolean },\n): void {\n  assertNetworkPolicy(definition, result, options.offline);\n\n  if (definition.effectClass === 'observe' || definition.effectClass === 'plan') {\n    const effectClass = firstNonEmptyEffect(result.effects);\n    if (effectClass !== undefined) {\n      throw new Error(\n        `The ${definition.effectClass} command ${definition.name} reported ${EFFECT_NOUNS[effectClass]} effects`,\n      );\n    }\n  }\n\n  if (\n    definition.effectClass === 'hook' &&\n    (result.effects.packages.length > 0 ||\n      result.effects.network.length > 0 ||\n      result.effects.destructive.length > 0)\n  ) {\n    throw new Error(`Hook command ${definition.name} reported forbidden lifecycle effects`);\n  }\n}\n\ninterface ProgressAdapters {\n  readonly schedule: (callback: () => void, delayMilliseconds: number) => unknown;\n  readonly cancel: (handle: unknown) => void;\n  readonly emit: (message: string) => void;\n}\n\nconst MANAGED_PROGRESS_SIGNAL = 'SAFEWORD_REVIEW_PROGRESS';\n\nexport function consumeManagedProgressSignal(environment: NodeJS.ProcessEnv): boolean {\n  const enabled = environment[MANAGED_PROGRESS_SIGNAL] === '1';\n  Reflect.deleteProperty(environment, MANAGED_PROGRESS_SIGNAL);\n  return enabled;\n}\n\nexport function shouldReportProgress(options: {\n  readonly json: boolean;\n  readonly managedReview: boolean;\n  readonly quiet: boolean;\n}): boolean {\n  return !options.quiet && (!options.json || options.managedReview);\n}\n\nexport function createBestEffortByteSink(\n  write: (buffer: Uint8Array, offset: number, length: number) => number,\n): (buffer: Uint8Array) => void {\n  return buffer => {\n    let offset = 0;\n    try {\n      while (offset < buffer.length) {\n        const written = write(buffer, offset, buffer.length - offset);\n        if (!Number.isSafeInteger(written) || written <= 0 || written > buffer.length - offset) {\n          return;\n        }\n        offset += written;\n      }\n    } catch {\n      // Progress is advisory and must never affect the typed command result.\n    }\n  };\n}\n\nexport function createBestEffortProgressSink(\n  write: (buffer: Uint8Array, offset: number, length: number) => number,\n): (message: string) => void {\n  const writeBytes = createBestEffortByteSink(write);\n  return message => {\n    writeBytes(Buffer.from(`${message}\\n`));\n  };\n}\n\nexport function createManagedReviewProgress(progress: ProgressReporter): ProgressReporter {\n  return { ...progress, managed: true };\n}\n\n/** Operations finishing faster than this are not worth announcing. */\nconst PROGRESS_ANNOUNCE_DELAY_MS = 100;\n/** A long wait needs proof that the coordinator is still responsive. */\nconst PROGRESS_HEARTBEAT_INTERVAL_MS = 30_000;\n\n/**\n * Shorten the heartbeat so a test can observe a real one without waiting 30\n * seconds. Internal and test-only: production always uses the bounded default.\n */\nexport function resolveHeartbeatIntervalMs(environment: NodeJS.ProcessEnv = process.env): number {\n  if (environment.NODE_ENV !== 'test') return PROGRESS_HEARTBEAT_INTERVAL_MS;\n  const override = Number(environment.SAFEWORD_PROGRESS_HEARTBEAT_MS);\n  if (\n    !Number.isSafeInteger(override) ||\n    override < 1 ||\n    override > PROGRESS_HEARTBEAT_INTERVAL_MS\n  ) {\n    return PROGRESS_HEARTBEAT_INTERVAL_MS;\n  }\n  return override;\n}\n\nexport function createProgressReporter(adapters: ProgressAdapters): ProgressReporter {\n  let announcementHandle: unknown;\n  let heartbeatHandle: unknown;\n  const heartbeatIntervalMs = resolveHeartbeatIntervalMs();\n\n  function scheduleHeartbeat(message: string): void {\n    heartbeatHandle = adapters.schedule(() => {\n      adapters.emit(message);\n      scheduleHeartbeat(message);\n    }, heartbeatIntervalMs);\n  }\n\n  return {\n    start(message: string): void {\n      if (announcementHandle !== undefined) adapters.cancel(announcementHandle);\n      if (heartbeatHandle !== undefined) adapters.cancel(heartbeatHandle);\n      heartbeatHandle = undefined;\n      announcementHandle = adapters.schedule(() => {\n        adapters.emit(message);\n        announcementHandle = undefined;\n      }, PROGRESS_ANNOUNCE_DELAY_MS);\n    },\n    heartbeat(message: string): void {\n      if (heartbeatHandle !== undefined) adapters.cancel(heartbeatHandle);\n      scheduleHeartbeat(message);\n    },\n    stop(): void {\n      if (announcementHandle !== undefined) adapters.cancel(announcementHandle);\n      if (heartbeatHandle !== undefined) adapters.cancel(heartbeatHandle);\n      announcementHandle = undefined;\n      heartbeatHandle = undefined;\n    },\n  };\n}\n"],"mappings":";AAIA,IAAM,eAAwD;AAAA,EAC5D,OAAO;AAAA,EACP,UAAU;AAAA,EACV,eAAe;AAAA,EACf,SAAS;AAAA,EACT,aAAa;AACf;AAEA,SAAS,oBAAoB,SAA6C;AACxE,SAAQ,OAAO,KAAK,OAAO,EAAwB;AAAA,IACjD,iBAAe,QAAQ,WAAW,EAAE,SAAS;AAAA,EAC/C;AACF;AAEA,SAAS,oBACP,YACA,QACA,SACM;AACN,MAAI,WAAW,OAAO,QAAQ,QAAQ,SAAS,GAAG;AAChD,UAAM,IAAI,MAAM,WAAW,WAAW,IAAI,iDAAiD;AAAA,EAC7F;AACA,MAAI,WAAW,kBAAkB,WAAW,OAAO,QAAQ,QAAQ,SAAS,GAAG;AAC7E,UAAM,IAAI,MAAM,WAAW,WAAW,IAAI,sCAAsC;AAAA,EAClF;AACF;AAEO,SAAS,mBACd,YACA,QACA,SACM;AACN,sBAAoB,YAAY,QAAQ,QAAQ,OAAO;AAEvD,MAAI,WAAW,gBAAgB,aAAa,WAAW,gBAAgB,QAAQ;AAC7E,UAAM,cAAc,oBAAoB,OAAO,OAAO;AACtD,QAAI,gBAAgB,QAAW;AAC7B,YAAM,IAAI;AAAA,QACR,OAAO,WAAW,WAAW,YAAY,WAAW,IAAI,aAAa,aAAa,WAAW,CAAC;AAAA,MAChG;AAAA,IACF;AAAA,EACF;AAEA,MACE,WAAW,gBAAgB,WAC1B,OAAO,QAAQ,SAAS,SAAS,KAChC,OAAO,QAAQ,QAAQ,SAAS,KAChC,OAAO,QAAQ,YAAY,SAAS,IACtC;AACA,UAAM,IAAI,MAAM,gBAAgB,WAAW,IAAI,uCAAuC;AAAA,EACxF;AACF;AAQA,IAAM,0BAA0B;AAEzB,SAAS,6BAA6B,aAAyC;AACpF,QAAM,UAAU,YAAY,uBAAuB,MAAM;AACzD,UAAQ,eAAe,aAAa,uBAAuB;AAC3D,SAAO;AACT;AAEO,SAAS,qBAAqB,SAIzB;AACV,SAAO,CAAC,QAAQ,UAAU,CAAC,QAAQ,QAAQ,QAAQ;AACrD;AAEO,SAAS,yBACd,OAC8B;AAC9B,SAAO,YAAU;AACf,QAAI,SAAS;AACb,QAAI;AACF,aAAO,SAAS,OAAO,QAAQ;AAC7B,cAAM,UAAU,MAAM,QAAQ,QAAQ,OAAO,SAAS,MAAM;AAC5D,YAAI,CAAC,OAAO,cAAc,OAAO,KAAK,WAAW,KAAK,UAAU,OAAO,SAAS,QAAQ;AACtF;AAAA,QACF;AACA,kBAAU;AAAA,MACZ;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEO,SAAS,6BACd,OAC2B;AAC3B,QAAM,aAAa,yBAAyB,KAAK;AACjD,SAAO,aAAW;AAChB,eAAW,OAAO,KAAK,GAAG,OAAO;AAAA,CAAI,CAAC;AAAA,EACxC;AACF;AAEO,SAAS,4BAA4B,UAA8C;AACxF,SAAO,EAAE,GAAG,UAAU,SAAS,KAAK;AACtC;AAGA,IAAM,6BAA6B;AAEnC,IAAM,iCAAiC;AAMhC,SAAS,2BAA2B,cAAiC,QAAQ,KAAa;AAC/F,MAAI,YAAY,aAAa,OAAQ,QAAO;AAC5C,QAAM,WAAW,OAAO,YAAY,8BAA8B;AAClE,MACE,CAAC,OAAO,cAAc,QAAQ,KAC9B,WAAW,KACX,WAAW,gCACX;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,uBAAuB,UAA8C;AACnF,MAAI;AACJ,MAAI;AACJ,QAAM,sBAAsB,2BAA2B;AAEvD,WAAS,kBAAkB,SAAuB;AAChD,sBAAkB,SAAS,SAAS,MAAM;AACxC,eAAS,KAAK,OAAO;AACrB,wBAAkB,OAAO;AAAA,IAC3B,GAAG,mBAAmB;AAAA,EACxB;AAEA,SAAO;AAAA,IACL,MAAM,SAAuB;AAC3B,UAAI,uBAAuB,OAAW,UAAS,OAAO,kBAAkB;AACxE,UAAI,oBAAoB,OAAW,UAAS,OAAO,eAAe;AAClE,wBAAkB;AAClB,2BAAqB,SAAS,SAAS,MAAM;AAC3C,iBAAS,KAAK,OAAO;AACrB,6BAAqB;AAAA,MACvB,GAAG,0BAA0B;AAAA,IAC/B;AAAA,IACA,UAAU,SAAuB;AAC/B,UAAI,oBAAoB,OAAW,UAAS,OAAO,eAAe;AAClE,wBAAkB,OAAO;AAAA,IAC3B;AAAA,IACA,OAAa;AACX,UAAI,uBAAuB,OAAW,UAAS,OAAO,kBAAkB;AACxE,UAAI,oBAAoB,OAAW,UAAS,OAAO,eAAe;AAClE,2BAAqB;AACrB,wBAAkB;AAAA,IACpB;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-C377VEWH.js → chunk-GZ36UZJG.js}

@@ -2,7 +2,7 @@ import {
   assertSafeClaudeCleanupTarget,
   containedClaudeCleanupPath,
   observeClaudeLegacy
-} from "./chunk-JZFZWY3K.js";
+} from "./chunk-4CKCRZDO.js";
 import {
   canonicalClaudeProjectRoot
 } from "./chunk-34NCOTP5.js";
@@ -19,7 +19,7 @@ import {
   cataloguedClaudeLegacyPaths,
   isAcceptedHistoricalFile,
   isAcceptedHistoricalHook
-} from "./chunk-E4UMSKEX.js";
+} from "./chunk-NSZGI7HK.js";
 import {
   writeDurableFile,
   writeDurableFileExclusive
@@ -833,4 +833,4 @@ export {
   migrateClaudeLegacyAutomatically,
   recoverClaudeCleanup
 };
-//# sourceMappingURL=chunk-C377VEWH.js.map
+//# sourceMappingURL=chunk-GZ36UZJG.js.map

package/dist/{chunk-FASTWBPY.js → chunk-J7UDLLTK.js}

@@ -2,10 +2,10 @@ import {
   ReconcileExecutionError,
   createProjectContext,
   reconcile
-} from "./chunk-AQU52TJM.js";
+} from "./chunk-NOTBZCKG.js";
 import {
   SAFEWORD_SCHEMA
-} from "./chunk-4AIRSIOH.js";
+} from "./chunk-BSOUMHMQ.js";
 import {
   uninstallDependencies
 } from "./chunk-6S7CTKGC.js";
@@ -349,4 +349,4 @@ export {
   diffFileSnapshots,
   removeProject
 };
-//# sourceMappingURL=chunk-FASTWBPY.js.map
+//# sourceMappingURL=chunk-J7UDLLTK.js.map

package/dist/{chunk-RXQJH4LM.js → chunk-KXHVFCDT.js}

@@ -25,11 +25,11 @@ import {
   createProjectContext,
   getMissingPacks,
   reconcile
-} from "./chunk-AQU52TJM.js";
+} from "./chunk-NOTBZCKG.js";
 import {
   legacyObservationIsEmpty,
   observeClaudeLegacy
-} from "./chunk-JZFZWY3K.js";
+} from "./chunk-4CKCRZDO.js";
 import {
   hasLegacyClaudePluginMode,
   readClaudePluginMode
@@ -43,7 +43,7 @@ import {
   isCursorProjectPath,
   schemaForProjectSurfaces,
   typescriptPackages
-} from "./chunk-4AIRSIOH.js";
+} from "./chunk-BSOUMHMQ.js";
 import {
   codexFinalizationIsComplete
 } from "./chunk-AXAGJLMP.js";
@@ -962,4 +962,4 @@ export {
   observeCursorProject,
   unselectedCursorFinding
 };
-//# sourceMappingURL=chunk-RXQJH4LM.js.map
+//# sourceMappingURL=chunk-KXHVFCDT.js.map

package/dist/{chunk-AQU52TJM.js → chunk-NOTBZCKG.js}

@@ -3,8 +3,9 @@ import {
   getWorkspacePackageNames
 } from "./chunk-Q5KLE6ZF.js";
 import {
+  parse,
   setupPythonTooling
-} from "./chunk-4AIRSIOH.js";
+} from "./chunk-BSOUMHMQ.js";
 import {
   SAFEWORD_PRIMARY_LINT_SCRIPT,
   detect
@@ -886,7 +887,6 @@ import {
   writeFileSync
 } from "fs";
 import nodePath2 from "path";
-import { parse } from "smol-toml";
 var SAFEWORD_CLIPPY_LINTS = `[lints.clippy]
 # Enable pedantic for stricter linting (priority -1 allows individual overrides)
 pedantic = { level = "deny", priority = -1 }
@@ -1646,4 +1646,4 @@ export {
   LEFTHOOK_CONFIGS,
   createProjectContext
 };
-//# sourceMappingURL=chunk-AQU52TJM.js.map
+//# sourceMappingURL=chunk-NOTBZCKG.js.map