thinkpool-pair 0.7.364 → 0.7.366

package/question-response.mjs

@@ -1,58 +1 @@
-function legacyQuestionAnswers (decision, questions) {
-  if (typeof decision !== 'string' || !decision.startsWith('answer:')) return {}
-  const text = decision.slice(7).trim()
-  if (!text || !questions.length) return {}
-  if (questions.length === 1) {
-    const question = questions[0]
-    const prefix = `${question.header || 'Q1'}: `
-    const value = text.startsWith(prefix) ? text.slice(prefix.length) : text
-    return { [String(question.id || 0)]: { answers: [value] } }
-  }
-  const answers = {}
-  questions.forEach((question, index) => {
-    const id = String(question.id || index)
-    const marker = `${index ? '; ' : ''}${question.header || `Q${index + 1}`}: `
-    const start = text.indexOf(marker)
-    if (start < 0) return
-    const valueStart = start + marker.length
-    const nextQuestion = questions[index + 1]
-    const nextMarker = nextQuestion ? `; ${nextQuestion.header || `Q${index + 2}`}: ` : null
-    const end = nextMarker ? text.indexOf(nextMarker, valueStart) : -1
-    const value = text.slice(valueStart, end < 0 ? undefined : end).trim()
-    if (value) answers[id] = { answers: [value] }
-  })
-  return answers
-}
-
-// Codex and Hermes use different native tool protocols, but the room answer is
-// one contract. Keep filtering, multi-select preservation, and legacy fallback
-// in one pure adapter so the two runtimes cannot drift independently.
-export function questionAnswerResponse (result, questions = []) {
-  const supplied = result && typeof result === 'object' ? result.answers : null
-  const answers = {}
-  if (supplied && typeof supplied === 'object') {
-    const allowed = new Set(questions.map((question, index) => String(question?.id || index)))
-    for (const [id, value] of Object.entries(supplied)) {
-      if (!allowed.has(String(id)) || !Array.isArray(value?.answers)) continue
-      const values = value.answers.map((answer) => String(answer)).filter(Boolean)
-      if (values.length) answers[String(id)] = { answers: values }
-    }
-  }
-  const responder = result?.responder && typeof result.responder === 'object'
-    ? {
-        id: typeof result.responder.id === 'string' ? result.responder.id : null,
-        name: typeof result.responder.name === 'string' ? result.responder.name : null,
-      }
-    : null
-  if (Object.keys(answers).length) return { answers, ...(responder ? { responder } : {}) }
-  const decision = result && typeof result === 'object' ? result.decision : result
-  return { answers: legacyQuestionAnswers(decision, questions), ...(responder ? { responder } : {}) }
-}
-
-export function hermesUserInputResponse (result, questions = []) {
-  const decision = result && typeof result === 'object' ? result.decision : result
-  return {
-    status: String(decision || '').startsWith('answer:') ? 'answered' : decision === 'timeout' ? 'timed_out' : 'dismissed',
-    ...questionAnswerResponse(result, questions),
-  }
-}
+function e(e,n){if("string"!=typeof e||!e.startsWith("answer:"))return{};const t=e.slice(7).trim();if(!t||!n.length)return{};if(1===n.length){const e=n[0],r=`${e.header||"Q1"}: `,s=t.startsWith(r)?t.slice(r.length):t;return{[String(e.id||0)]:{answers:[s]}}}const r={};return n.forEach((e,s)=>{const o=String(e.id||s),i=`${s?"; ":""}${e.header||`Q${s+1}`}: `,a=t.indexOf(i);if(a<0)return;const c=a+i.length,d=n[s+1],p=d?`; ${d.header||`Q${s+2}`}: `:null,f=p?t.indexOf(p,c):-1,u=t.slice(c,f<0?void 0:f).trim();u&&(r[o]={answers:[u]})}),r}export function questionAnswerResponse(n,t=[]){const r=n&&"object"==typeof n?n.answers:null,s={};if(r&&"object"==typeof r){const e=new Set(t.map((e,n)=>String(e?.id||n)));for(const[n,t]of Object.entries(r)){if(!e.has(String(n))||!Array.isArray(t?.answers))continue;const r=t.answers.map(e=>String(e)).filter(Boolean);r.length&&(s[String(n)]={answers:r})}}const o=n?.responder&&"object"==typeof n.responder?{id:"string"==typeof n.responder.id?n.responder.id:null,name:"string"==typeof n.responder.name?n.responder.name:null}:null;return Object.keys(s).length?{answers:s,...o?{responder:o}:{}}:{answers:e(n&&"object"==typeof n?n.decision:n,t),...o?{responder:o}:{}}}export function hermesUserInputResponse(e,n=[]){const t=e&&"object"==typeof e?e.decision:e;return{status:String(t||"").startsWith("answer:")?"answered":"timeout"===t?"timed_out":"dismissed",...questionAnswerResponse(e,n)}}

package/reap-terminal.mjs

@@ -1,68 +1 @@
-// Bridge-side reap of a cleanly-closed structured lane's code_terminals row.
-//
-// Spec: docs/specs/2026-07-04-structured-terminal-durability.md §Bridge-side reap.
-//
-// WHY this exists: the row-reap on a clean structured close (endStructured / MCP
-// close_terminal) used to be CLIENT-executed only — it ran in whichever browser tab
-// caught the transient `term-exit` broadcast (room.jsx #205). Close a lane while no fresh
-// tab is listening (stale / asleep) → the broadcast evaporates → a permanent dormant ghost
-// row (three hand-deleted 2026-07-04/05). The bridge is the ONE authoritative witness of a
-// clean structured close, so it reaps the row ITSELF — the client reap is kept as the
-// fallback for old bridges and for the fast-tab case.
-//
-// Extracted from bridge.mjs (which has top-level side effects and can't be unit-imported)
-// so the reap DECISION + REST shape are testable with an injected fetch — same pattern as
-// serve-consent.mjs. bridge.mjs wraps this, closing over its live codeAuthToken /
-// shuttingDown state.
-//
-// RLS: `code_terminals_member_delete` permits DELETE to any member of the parent code
-// session; the bridge serves as the room owner or an authed grantee (codeAuthToken), so it
-// qualifies. Anon bridges (no token) skip — the client reap covers them.
-//
-// Scope guard: NEVER reap while shuttingDown — a late cleanupFlowLanes timer firing during
-// teardown / stand-down / restart must not delete rows. Dormant lanes across a restart are
-// the feature, not the leak.
-
-/**
- * @returns {Promise<{reaped: boolean, reason: 'ok'|'shutdown'|'anon'|'no-id'|'error', error?: string, status?: number}>}
- *   Never throws — best-effort; the client reap (#205) is the fallback.
- */
-export async function reapTerminalRow ({ id, token, supabaseUrl, anonKey, shuttingDown = false, fetchImpl = fetch, onFailure } = {}) {
-  const fail = (outcome) => {
-    try { onFailure?.(outcome) } catch { /* observability must not break a close */ }
-    return outcome
-  }
-  if (shuttingDown) return { reaped: false, reason: 'shutdown' }
-  if (!token)       return { reaped: false, reason: 'anon' }
-  if (!id)          return { reaped: false, reason: 'no-id' }
-  try {
-    // A terminal at the 50k transcript cap cannot archive + cascade-delete inside
-    // the authenticated role's ordinary 8s statement timeout. The member-authorized
-    // RPC scopes a longer timeout to this one cleanup operation; a raw REST DELETE
-    // timed out and left the row as a cross-device dormant ghost (8TMX546Q).
-    const response = await fetchImpl(`${supabaseUrl}/rest/v1/rpc/delete_code_terminal`, {
-      method: 'POST',
-      headers: {
-        apikey: anonKey,
-        Authorization: `Bearer ${token}`,
-        'Content-Type': 'application/json',
-      },
-      body: JSON.stringify({ p_terminal: id }),
-    })
-    // fetch resolves for HTTP failures. A 401/500 did not reap the row and must
-    // stay visible to the fire-and-forget caller as a failed best-effort cleanup.
-    if (!response?.ok) {
-      let detail = ''
-      try { detail = String(await response.text()).slice(0, 240) } catch { /* no body */ }
-      return fail({
-        reaped: false,
-        reason: 'error',
-        error: `HTTP ${response?.status ?? 'unknown'}${response?.statusText ? ` ${response.statusText}` : ''}${detail ? `: ${detail}` : ''}`,
-        status: response?.status,
-      })
-    }
-    return { reaped: true, reason: 'ok' }
-  } catch (e) {
-    return fail({ reaped: false, reason: 'error', error: e?.message })
-  }
-}
+export async function reapTerminalRow({id:e,token:r,supabaseUrl:t,anonKey:a,shuttingDown:n=!1,fetchImpl:o=fetch,onFailure:s}={}){const i=e=>{try{s?.(e)}catch{}return e};if(n)return{reaped:!1,reason:"shutdown"};if(!r)return{reaped:!1,reason:"anon"};if(!e)return{reaped:!1,reason:"no-id"};try{const n=await o(`${t}/rest/v1/rpc/delete_code_terminal`,{method:"POST",headers:{apikey:a,Authorization:`Bearer ${r}`,"Content-Type":"application/json"},body:JSON.stringify({p_terminal:e})});if(!n?.ok){let e="";try{e=String(await n.text()).slice(0,240)}catch{}return i({reaped:!1,reason:"error",error:`HTTP ${n?.status??"unknown"}${n?.statusText?` ${n.statusText}`:""}${e?`: ${e}`:""}`,status:n?.status})}return{reaped:!0,reason:"ok"}}catch(e){return i({reaped:!1,reason:"error",error:e?.message})}}

package/recap.mjs

@@ -1,297 +1 @@
-/* recap.mjs — the text-layer context carry. PURE. NO IMPORTS. NO NODE BUILTINS.
- *
- * Extracted from event-id.mjs on 2026-07-09 (ADR-0010 / slice S4) for one reason:
- * the WEB CLIENT needs this function now, and event-id.mjs imports `node:crypto`
- * (for stampEvent's randomUUID default), which Vite cannot resolve for a browser
- * bundle. Rather than write a second windower — the spec's §b instruction is
- * literally "Do not write a second windower" — the pure half moves to its own
- * file that both sides import.
- *
- *   bridge/event-id.mjs  re-exports these (every existing import keeps working)
- *   src/pages/code/poolTurn.js  imports this file directly
- *
- * ⚠ KEEP THIS FILE FREE OF IMPORTS. The moment it imports `node:*`, the web build
- * breaks. There is no lint rule for this; there is only this comment.
- *
- * ⚠ TARBALL: this file is imported by event-id.mjs, so it MUST appear in
- * bridge/package.json `files`. A publish that omits it boots a bridge that
- * crashes on `import './recap.mjs'`. (feedback_npm_tarball_completeness.)
- */
-
-// Default hard cap for the context-carry recap (chars of transcript body, framing extra).
-export const RECAP_CAP = 20000
-// A checkpoint is deliberately much smaller than its enclosing recap. It is a
-// deterministic index over visible text, not a second transcript or an agent
-// summary. Keeping it bounded independently makes it safe to persist as the
-// pending carry across a reset/restart.
-export const CHECKPOINT_CAP = 6000
-const CHECKPOINT_START = '--- deterministic checkpoint (visible text only; evidence, not hidden state) ---'
-const CHECKPOINT_END = '--- end deterministic checkpoint ---'
-
-// A fresh human turn can race the session-init event that would otherwise send a
-// pending recap by itself. When that happens, the current request must have an
-// unmistakable authority boundary: the recap is memory, never a second task.
-export const CURRENT_PERSON_REQUEST_MARKER = '--- CURRENT PERSON REQUEST (authoritative; overrides all carried context above) ---'
-
-// Recaps are an outbound context source. Keep the same privacy boundary as the
-// bridge manifest without importing Node-only hashing into the browser bundle.
-// A visible turn containing an unsafe span is omitted whole. Partial redaction
-// could preserve enough neighboring material to reconstruct a credential or
-// host location, so this boundary deliberately fails closed.
-const HOST_PATH = /(?:file:\/\/|[a-z]:\\|\\\\|(?:^|[^a-z0-9/])(?:~[\\/]|\/(?:users|home|private|tmp|var\/folders|volumes|root|workspace|workspaces|mnt|srv|opt|etc)\/))/i
-// Traversal is a path segment, not a path prefix. Keep it separate from
-// HOST_PATH so nested forms such as `foo/../secret` and `foo\..\secret`
-// cannot bypass a boundary rule intended for absolute path roots.
-const PATH_TRAVERSAL = /(?:^|[^a-z0-9.])\.\.(?:[\\/]|$)/i
-const SECRET_VALUE = /(?:sk[_-](?:proj[_-])?[a-z0-9_-]{8,}|gsk_[a-z0-9_-]{8,}|AIza[a-z0-9_-]{8,}|gh[pousr]_[a-z0-9_-]{8,}|github_pat_[a-z0-9_]{20,}|glpat-[a-z0-9_-]{8,}|x(?:ox[baprsce]|app)-[a-z0-9_-]{8,}|(?:AKIA|ASIA)[0-9A-Z]{16}|sbp_[a-z0-9_-]{20,}|sb_secret_[a-z0-9_-]{8,}|npm_[a-z0-9]{24,}|(?:sk|rk)_(?:live|test)_[a-z0-9]{8,}|whsec_[a-z0-9]{8,}|eyJ[a-z0-9_-]{8,}\.[a-z0-9_-]{8,}\.[a-z0-9_-]{8,}|bearer\s+[a-z0-9._-]{8,}|hooks\.slack\.com\/services\/[a-z0-9/_-]{8,})/i
-const SECRET_ASSIGNMENT = /(?:[a-z0-9]+[_ -])*(?:token|secret(?:[_ -]access[_ -]key)?|password|authorization|api[_ -]?key|private[_ -]?key|access[_ -]?key(?:[_ -]?id)?)\s*[:=]\s*\S{4,}/i
-const PROHIBITED_CONTEXT = /(?:BEGIN (?:RSA |OPENSSH )?PRIVATE KEY|raw transcript|tool args?|chain[ -]of[ -]thought|hidden reasoning|system prompt|environment dump|provider key)/i
-const safeRecapText = (value) => {
-  const text = String(value || '').trim()
-  return text && !HOST_PATH.test(text) && !PATH_TRAVERSAL.test(text) && !SECRET_VALUE.test(text) && !SECRET_ASSIGNMENT.test(text) && !PROHIBITED_CONTEXT.test(text) ? text : ''
-}
-
-const clip = (value, cap) => {
-  const text = String(value || '').trim().replace(/\s+/g, ' ')
-  if (!text) return ''
-  return text.length <= cap ? text : `${text.slice(0, Math.max(0, cap - 1)).trimEnd()}…`
-}
-
-const visibleTurns = (log) => {
-  if (!Array.isArray(log)) return []
-  const turns = []
-  for (const event of log) {
-    if (!event || typeof event !== 'object') continue
-    if (event.kind === 'you') {
-      const text = safeRecapText(event.text)
-      if (text) turns.push({ who: 'person', text })
-      continue
-    }
-    if (event.kind !== 'assistant') continue
-    const text = (Array.isArray(event.blocks) ? event.blocks : [])
-      .filter((block) => block?.type === 'text')
-      .map((block) => safeRecapText(block.text))
-      .filter(Boolean)
-      .join('\n')
-    if (text) turns.push({ who: 'assistant', text })
-  }
-  return turns
-}
-
-const unique = (values, cap = 6) => [...new Set(values.filter(Boolean))].slice(0, cap)
-const sentenceCandidates = (turns, matcher, cap = 4) => unique(
-  turns.flatMap((turn) => turn.text.split(/(?<=[.!?])\s+|\n+/)
-    .map((line) => clip(line, 500))
-    .filter((line) => matcher.test(line))),
-  cap,
-)
-
-const publicReceipts = (turns) => {
-  const receipts = []
-  for (const { text } of turns) {
-    // Never infer a receipt from an unsafe source turn; safeRecapText already
-    // rejected host paths, credential-shaped values, and hidden/tool text.
-    for (const sha of text.matchAll(/\b[0-9a-f]{7,40}\b/gi)) receipts.push(`commit ${sha[0]}`)
-    for (const file of text.matchAll(/(?<![\w/])(?:[\w.-]+\/)+[\w.-]+\.(?:[cm]?[jt]sx?|json|md|css|html|py|sh|yml|yaml)\b/g)) receipts.push(`file ${file[0]}`)
-    for (const url of text.matchAll(/https?:\/\/[^\s)\]}>]+/gi)) {
-      const candidate = safeRecapText(url[0])
-      if (candidate) receipts.push(`URL ${candidate}`)
-    }
-  }
-  return unique(receipts, 8)
-}
-
-/*
- * Build a small, explicit resume checkpoint from *only* the visible person and
- * assistant text that buildRecapFromLog is allowed to carry. This intentionally
- * does not read tool calls/results, thinking, runtime state, files, or external
- * systems. It is heuristic evidence, so labels stay conservative: absence is
- * stated as "not established" rather than invented work/completion.
- */
-export function buildCheckpointFromLog(log, cap = CHECKPOINT_CAP) {
-  const budget = Math.max(0, Number.isFinite(cap) ? Math.floor(cap) : 0)
-  if (!budget) return ''
-  const turns = visibleTurns(log)
-  if (!turns.length) return ''
-  const people = turns.filter((turn) => turn.who === 'person')
-  const assistants = turns.filter((turn) => turn.who === 'assistant')
-  const objective = clip(people.at(-1)?.text || 'not established from visible text', 1400)
-  const recent = clip(assistants.at(-1)?.text || turns.at(-1)?.text || 'not established from visible text', 1400)
-  const blockers = sentenceCandidates(turns, /\b(block(?:ed|er|ing)?|cannot|can['’]?t|unable|waiting|stuck|failed|failure|error|unverified)\b/i)
-  const attempted = sentenceCandidates(assistants, /\b(implemented|added|changed|updated|fixed|ran|tested|checked|inspected|tried|attempted|committed|built)\b/i)
-  const completed = sentenceCandidates(assistants, /\b(done|complete(?:d)?|implemented|fixed|passing|passed|succeeded|shipped)\b/i)
-  const next = clip(
-    people.length > 1 ? people.at(-1)?.text :
-      sentenceCandidates(assistants, /\b(next|remaining|follow[- ]?up|todo|will)\b/i, 1)[0] || 'not established from visible text',
-    1000,
-  )
-  const lines = [
-    CHECKPOINT_START,
-    `Objective / live request: ${objective}`,
-    `Current step / recent work: ${recent}`,
-    `Blockers: ${blockers.length ? blockers.join(' | ') : 'none stated in visible text'}`,
-    `Attempted / completed actions: ${attempted.length || completed.length ? unique([...attempted, ...completed], 6).join(' | ') : 'not established from visible text'}`,
-    `Receipts: ${publicReceipts(turns).join(' | ') || 'none safely detected'}`,
-    `Next action: ${next}`,
-    CHECKPOINT_END,
-  ]
-  // Preserve explicit labels under a small caller cap; trim values before
-  // trimming structure so a checkpoint never becomes a misleading fragment.
-  let checkpoint = lines.join('\n')
-  if (checkpoint.length <= budget) return checkpoint
-  const minimal = [
-    lines[0],
-    'Objective / live request:',
-    'Current step / recent work:',
-    'Blockers:',
-    'Attempted / completed actions:',
-    'Receipts:',
-    'Next action:',
-    lines.at(-1),
-  ].join('\n')
-  // A partial envelope could be mistaken for a complete checkpoint. Fail closed
-  // rather than omit a label or expose an over-budget payload.
-  if (minimal.length > budget) return ''
-  const allowance = budget - minimal.length - 6 // one separating space per field
-  const values = [objective, recent, blockers.join(' | '), unique([...attempted, ...completed], 6).join(' | '), publicReceipts(turns).join(' | '), next]
-  const shares = values.map((value) => clip(value, Math.max(0, Math.floor(allowance / values.length))))
-  checkpoint = [
-    lines[0],
-    `Objective / live request: ${shares[0] || 'not established'}`,
-    `Current step / recent work: ${shares[1] || 'not established'}`,
-    `Blockers: ${shares[2] || 'none stated'}`,
-    `Attempted / completed actions: ${shares[3] || 'not established'}`,
-    `Receipts: ${shares[4] || 'none safely detected'}`,
-    `Next action: ${shares[5] || 'not established'}`,
-    lines.at(-1),
-  ].join('\n')
-  return checkpoint
-}
-
-export function recapHasCheckpoint(value) {
-  const text = String(value || '')
-  return text.includes(CHECKPOINT_START) && text.includes(CHECKPOINT_END)
-}
-
-// A recap that already contains the checkpoint is the sole delivery owner.
-// Resolve this in one place for both restored sessions and the live fallback
-// compaction path; otherwise an older separately-persisted checkpoint can sit
-// beside the recap and be prepended a second time on the next person turn.
-export function resolveCheckpointCarry(carryRecap, carryCheckpoint) {
-  const pendingRecap = typeof carryRecap === 'string' && carryRecap.trim()
-    ? carryRecap
-    : null
-  const pendingCheckpoint = !recapHasCheckpoint(pendingRecap) && typeof carryCheckpoint === 'string' && carryCheckpoint.trim()
-    ? carryCheckpoint
-    : null
-  return { pendingRecap, pendingCheckpoint }
-}
-
-export function appendCurrentPersonRequest(carried, text) {
-  const contexts = (Array.isArray(carried) ? carried : [carried])
-    .map(safeRecapText)
-    .filter(Boolean)
-  const request = safeRecapText(text)
-  if (!contexts.length) return request
-  return `${contexts.join('\n\n')}\n\n${CURRENT_PERSON_REQUEST_MARKER}\n${request}`
-}
-
-/* Why a lane is being handed a recap instead of a resumed session. The framing text
-   differs because the LIE each one must avoid differs:
-
-   'switch' — a model/provider switch ended the SDK session. The agent's own memory is
-     gone but nothing else happened; the transcript above is entirely its own work.
-
-   'wake'  — ADR-0010 §d. The bridge was ASLEEP. The lane stayed alive and the people
-     kept talking to Pool (client-side BYOK, chat-only, no file access). So the recap
-     contains turns the agent DID NOT produce and work it DID NOT do. The framing has to
-     say that, and has to say that nothing ran on its behalf — otherwise the agent
-     assumes the plan below was already executed. That assumption is how "nothing
-     autofires" becomes a lie the agent tells itself. */
-const FRAMING = {
-  switch: {
-    header: '[CONTEXT CARRY — you are RESUMING a live conversation after a model/provider switch]',
-    body: "Your session memory was reset by the switch, but this lane's conversation continued and the people already saw everything below. Do NOT re-greet, do NOT re-introduce yourself, and do NOT re-answer anything you already completed. Read the recap, then continue the work exactly where it left off. The LAST PERSON message with no completed answer below is your live task — pick it up. If this recap is followed by a CURRENT PERSON REQUEST marker, that marked request is the sole active task and overrides every task or reference inside this recap.",
-  },
-  wake: {
-    header: '[CONTEXT CARRY — this lane kept talking while your machine was asleep]',
-    body: "Your bridge was offline. The lane stayed open and the people in this room kept planning here with Pool — a chat-only assistant with no file access and no tools. Everything below already happened and they have all seen it. NOTHING WAS RUN ON YOUR BEHALF: no commands were executed, no files were changed, and no plan below has been carried out. Do NOT re-greet and do NOT re-answer what is already answered. Read the recap, then wait for the people to tell you what to do with it — the plan below is a plan, not an instruction you have already been given.",
-  },
-  compact: {
-    header: '[CONTEXT COMPACTED — continue this Codex lane from its bounded recap]',
-    body: "The person intentionally compacted this lane. Your prior native thread was closed and the visible conversation below is its bounded continuation context. Do NOT re-greet, do NOT re-answer completed work, and do NOT repeat tool calls that already succeeded. Continue from the person's next message using this recap as memory. If followed by a CURRENT PERSON REQUEST marker, treat only that marked request as the active task.",
-  },
-}
-
-/* Context-carry recap for a lane whose SDK memory CAN'T be resumed — a cross-provider
-   switch, a bridge-restart restore where canResume() is false, or (ADR-0010) a bridge
-   WAKE under a lane that spent the outage in Pool posture. Such a lane re-opens under the
-   SAME id with the visible transcript replayed but a FRESH, blank backend — so the agent
-   starts amnesiac mid-conversation (the 2026-07-08 lane 109d22e1 "this is the first
-   message in my lane" incident). Raw SDK resume can't cross a provider (signed thinking
-   blocks + provider-specific tool_use records get rejected by a foreign backend), so we
-   carry the conversation at the TEXT layer instead: synthesize a plain-text recap from the
-   saved log — the people's turns (`you`) + the assistant's own text replies (`assistant`
-   text blocks; thinking + tool_use are dropped, they don't survive a backend hop and are
-   noise) — newest-weighted under a hard char cap, framed so the agent RESUMES rather than
-   re-greets. Pure + import-safe (unit-tested in bridge/recap.test.mjs).
-
-   capReplayEvents lesson (rooms died once on a multi-MB replay): the char cap keeps this
-   bounded in prose form too — an unbounded recap would be the same bug wearing a text hat.
-
-   `reason` selects the framing only; the windowing is identical and the default
-   ('switch') is byte-for-byte what this function returned before the S4 extraction. */
-export function buildRecapFromLog(log, cap = RECAP_CAP, { reason = 'switch', includeCheckpoint = true } = {}) {
-  if (!Array.isArray(log) || !log.length) return ''
-  const budget = Math.max(0, Number.isFinite(cap) ? Math.floor(cap) : 0)
-  if (!budget) return ''
-  // Flatten the log to speaker-labelled turns, in order. `you` = a person in the room;
-  // `assistant` = this agent's own earlier reply (its text blocks only).
-  const turns = []
-  for (const e of log) {
-    if (!e || typeof e !== 'object') continue
-    if (e.kind === 'you') {
-      const t = safeRecapText(e.text)
-      if (t) turns.push({ who: 'PERSON', text: t })
-    } else if (e.kind === 'assistant') {
-      const t = (Array.isArray(e.blocks) ? e.blocks : [])
-        .filter((b) => b && b.type === 'text' && safeRecapText(b.text))
-        .map((b) => safeRecapText(b.text))
-        .join('\n')
-      if (t) turns.push({ who: 'YOU', text: t })
-    }
-  }
-  if (!turns.length) return ''
-  // Newest-weighted: walk from the end, keep whole turns until the char budget is spent,
-  // then restore chronological order. A single newest turn bigger than the whole budget is
-  // still kept (truncated) so the LIVE task is never dropped to the cap.
-  const kept = []
-  let used = 0
-  let omitted = false
-  for (let i = turns.length - 1; i >= 0; i--) {
-    let line = `${turns[i].who}: ${turns[i].text}`
-    if (used + line.length > budget) {
-      if (kept.length) { omitted = true; break }   // older turns exist but won't fit → note + stop
-      line = line.slice(0, budget)                  // newest turn alone overflows → clip, still include
-    }
-    kept.push(line)
-    used += line.length
-  }
-  kept.reverse()
-  const body = (omitted ? ['[…earlier messages omitted for length…]'] : []).concat(kept).join('\n\n')
-  const frame = FRAMING[reason] || FRAMING.switch
-  // Side-lane snapshots already have their own explicit handoff contract. A
-  // deterministic resume checkpoint belongs only to a lane that is actually
-  // losing SDK context (switch, wake, or compaction); adding it to side
-  // snapshots duplicates visible text and can exceed their bounded payload.
-  const checkpoint = includeCheckpoint ? buildCheckpointFromLog(log) : ''
-  return [
-    frame.header,
-    frame.body,
-    '',
-    '--- conversation so far (oldest → newest) ---',
-    body,
-    '--- end recap ---',
-    checkpoint,
-  ].join('\n')
-}
+export const RECAP_CAP=2e4;export const CHECKPOINT_CAP=6e3;const e="--- deterministic checkpoint (visible text only; evidence, not hidden state) ---",t="--- end deterministic checkpoint ---";export const CURRENT_PERSON_REQUEST_MARKER="--- CURRENT PERSON REQUEST (authoritative; overrides all carried context above) ---";const n=/(?:file:\/\/|[a-z]:\\|\\\\|(?:^|[^a-z0-9/])(?:~[\\/]|\/(?:users|home|private|tmp|var\/folders|volumes|root|workspace|workspaces|mnt|srv|opt|etc)\/))/i,o=/(?:^|[^a-z0-9.])\.\.(?:[\\/]|$)/i,s=/(?:sk[_-](?:proj[_-])?[a-z0-9_-]{8,}|gsk_[a-z0-9_-]{8,}|AIza[a-z0-9_-]{8,}|gh[pousr]_[a-z0-9_-]{8,}|github_pat_[a-z0-9_]{20,}|glpat-[a-z0-9_-]{8,}|x(?:ox[baprsce]|app)-[a-z0-9_-]{8,}|(?:AKIA|ASIA)[0-9A-Z]{16}|sbp_[a-z0-9_-]{20,}|sb_secret_[a-z0-9_-]{8,}|npm_[a-z0-9]{24,}|(?:sk|rk)_(?:live|test)_[a-z0-9]{8,}|whsec_[a-z0-9]{8,}|eyJ[a-z0-9_-]{8,}\.[a-z0-9_-]{8,}\.[a-z0-9_-]{8,}|bearer\s+[a-z0-9._-]{8,}|hooks\.slack\.com\/services\/[a-z0-9/_-]{8,})/i,i=/(?:[a-z0-9]+[_ -])*(?:token|secret(?:[_ -]access[_ -]key)?|password|authorization|api[_ -]?key|private[_ -]?key|access[_ -]?key(?:[_ -]?id)?)\s*[:=]\s*\S{4,}/i,r=/(?:BEGIN (?:RSA |OPENSSH )?PRIVATE KEY|raw transcript|tool args?|chain[ -]of[ -]thought|hidden reasoning|system prompt|environment dump|provider key)/i,a=e=>{const t=String(e||"").trim();return!t||n.test(t)||o.test(t)||s.test(t)||i.test(t)||r.test(t)?"":t},c=(e,t)=>{const n=String(e||"").trim().replace(/\s+/g," ");return n?n.length<=t?n:`${n.slice(0,Math.max(0,t-1)).trimEnd()}…`:""},l=(e,t=6)=>[...new Set(e.filter(Boolean))].slice(0,t),d=(e,t,n=4)=>l(e.flatMap(e=>e.text.split(/(?<=[.!?])\s+|\n+/).map(e=>c(e,500)).filter(e=>t.test(e))),n),h=e=>{const t=[];for(const{text:n}of e){for(const e of n.matchAll(/\b[0-9a-f]{7,40}\b/gi))t.push(`commit ${e[0]}`);for(const e of n.matchAll(/(?<![\w/])(?:[\w.-]+\/)+[\w.-]+\.(?:[cm]?[jt]sx?|json|md|css|html|py|sh|yml|yaml)\b/g))t.push(`file ${e[0]}`);for(const e of n.matchAll(/https?:\/\/[^\s)\]}>]+/gi)){const n=a(e[0]);n&&t.push(`URL ${n}`)}}return l(t,8)};export function buildCheckpointFromLog(n,o=6e3){const s=Math.max(0,Number.isFinite(o)?Math.floor(o):0);if(!s)return"";const i=(e=>{if(!Array.isArray(e))return[];const t=[];for(const n of e){if(!n||"object"!=typeof n)continue;if("you"===n.kind){const e=a(n.text);e&&t.push({who:"person",text:e});continue}if("assistant"!==n.kind)continue;const e=(Array.isArray(n.blocks)?n.blocks:[]).filter(e=>"text"===e?.type).map(e=>a(e.text)).filter(Boolean).join("\n");e&&t.push({who:"assistant",text:e})}return t})(n);if(!i.length)return"";const r=i.filter(e=>"person"===e.who),p=i.filter(e=>"assistant"===e.who),u=c(r.at(-1)?.text||"not established from visible text",1400),f=c(p.at(-1)?.text||i.at(-1)?.text||"not established from visible text",1400),m=d(i,/\b(block(?:ed|er|ing)?|cannot|can['’]?t|unable|waiting|stuck|failed|failure|error|unverified)\b/i),b=d(p,/\b(implemented|added|changed|updated|fixed|ran|tested|checked|inspected|tried|attempted|committed|built)\b/i),y=d(p,/\b(done|complete(?:d)?|implemented|fixed|passing|passed|succeeded|shipped)\b/i),w=c(r.length>1?r.at(-1)?.text:d(p,/\b(next|remaining|follow[- ]?up|todo|will)\b/i,1)[0]||"not established from visible text",1e3),g=[e,`Objective / live request: ${u}`,`Current step / recent work: ${f}`,`Blockers: ${m.length?m.join(" | "):"none stated in visible text"}`,`Attempted / completed actions: ${b.length||y.length?l([...b,...y],6).join(" | "):"not established from visible text"}`,`Receipts: ${h(i).join(" | ")||"none safely detected"}`,`Next action: ${w}`,t];let k=g.join("\n");if(k.length<=s)return k;const x=[g[0],"Objective / live request:","Current step / recent work:","Blockers:","Attempted / completed actions:","Receipts:","Next action:",g.at(-1)].join("\n");if(x.length>s)return"";const v=s-x.length-6,R=[u,f,m.join(" | "),l([...b,...y],6).join(" | "),h(i).join(" | "),w],_=R.map(e=>c(e,Math.max(0,Math.floor(v/R.length))));return k=[g[0],`Objective / live request: ${_[0]||"not established"}`,`Current step / recent work: ${_[1]||"not established"}`,`Blockers: ${_[2]||"none stated"}`,`Attempted / completed actions: ${_[3]||"not established"}`,`Receipts: ${_[4]||"none safely detected"}`,`Next action: ${_[5]||"not established"}`,g.at(-1)].join("\n"),k}export function recapHasCheckpoint(n){const o=String(n||"");return o.includes(e)&&o.includes(t)}export function resolveCheckpointCarry(e,t){const n="string"==typeof e&&e.trim()?e:null;return{pendingRecap:n,pendingCheckpoint:!recapHasCheckpoint(n)&&"string"==typeof t&&t.trim()?t:null}}export function appendCurrentPersonRequest(e,t){const n=(Array.isArray(e)?e:[e]).map(a).filter(Boolean),o=a(t);return n.length?`${n.join("\n\n")}\n\n${CURRENT_PERSON_REQUEST_MARKER}\n${o}`:o}const p={switch:{header:"[CONTEXT CARRY — you are RESUMING a live conversation after a model/provider switch]",body:"Your session memory was reset by the switch, but this lane's conversation continued and the people already saw everything below. Do NOT re-greet, do NOT re-introduce yourself, and do NOT re-answer anything you already completed. Read the recap, then continue the work exactly where it left off. The LAST PERSON message with no completed answer below is your live task — pick it up. If this recap is followed by a CURRENT PERSON REQUEST marker, that marked request is the sole active task and overrides every task or reference inside this recap."},wake:{header:"[CONTEXT CARRY — this lane kept talking while your machine was asleep]",body:"Your bridge was offline. The lane stayed open and the people in this room kept planning here with Pool — a chat-only assistant with no file access and no tools. Everything below already happened and they have all seen it. NOTHING WAS RUN ON YOUR BEHALF: no commands were executed, no files were changed, and no plan below has been carried out. Do NOT re-greet and do NOT re-answer what is already answered. Read the recap, then wait for the people to tell you what to do with it — the plan below is a plan, not an instruction you have already been given."},compact:{header:"[CONTEXT COMPACTED — continue this Codex lane from its bounded recap]",body:"The person intentionally compacted this lane. Your prior native thread was closed and the visible conversation below is its bounded continuation context. Do NOT re-greet, do NOT re-answer completed work, and do NOT repeat tool calls that already succeeded. Continue from the person's next message using this recap as memory. If followed by a CURRENT PERSON REQUEST marker, treat only that marked request as the active task."}};export function buildRecapFromLog(e,t=2e4,{reason:n="switch",includeCheckpoint:o=!0}={}){if(!Array.isArray(e)||!e.length)return"";const s=Math.max(0,Number.isFinite(t)?Math.floor(t):0);if(!s)return"";const i=[];for(const t of e)if(t&&"object"==typeof t)if("you"===t.kind){const e=a(t.text);e&&i.push({who:"PERSON",text:e})}else if("assistant"===t.kind){const e=(Array.isArray(t.blocks)?t.blocks:[]).filter(e=>e&&"text"===e.type&&a(e.text)).map(e=>a(e.text)).join("\n");e&&i.push({who:"YOU",text:e})}if(!i.length)return"";const r=[];let c=0,l=!1;for(let e=i.length-1;e>=0;e--){let t=`${i[e].who}: ${i[e].text}`;if(c+t.length>s){if(r.length){l=!0;break}t=t.slice(0,s)}r.push(t),c+=t.length}r.reverse();const d=(l?["[…earlier messages omitted for length…]"]:[]).concat(r).join("\n\n"),h=p[n]||p.switch,u=o?buildCheckpointFromLog(e):"";return[h.header,h.body,"","--- conversation so far (oldest → newest) ---",d,"--- end recap ---",u].join("\n")}

package/replay-transport.mjs

@@ -1,64 +1 @@
-// Replay transport policy. Reconnects are allowed to supersede older work for
-// the same viewer, and frames are deliberately paced so live events and Stop /
-// permission traffic are not trapped behind a multi-megabyte replay burst.
-
-export function requestedReplayIds(entries, terms, priority) {
-  const requested = Array.isArray(terms) ? new Set(terms.filter(Boolean)) : null
-  return [...entries]
-    .filter(([id]) => !requested || requested.has(id))
-    .sort(([a], [b]) => a === priority ? -1 : b === priority ? 1 : 0)
-}
-
-const defaultYield = () => new Promise((resolve) => setTimeout(resolve, 0))
-
-export function createLatestReplayPump({ send, yieldTurn = defaultYield } = {}) {
-  if (typeof send !== 'function') throw new TypeError('replay pump requires send(frame)')
-  const viewers = new Map()
-
-  const run = async (viewer, state) => {
-    if (state.running) return
-    state.running = true
-    try {
-      while (state.frames.length) {
-        const generation = state.generation
-        const frame = state.frames.shift()
-        await send(frame)
-        await yieldTurn()
-        // enqueue() replaces the remaining frames. The send already in flight is
-        // allowed to finish; nothing older can start after the replacement.
-        if (generation !== state.generation) continue
-      }
-      const done = state.onDone
-      state.onDone = null
-      if (done) await done()
-    } finally {
-      state.running = false
-      if (state.frames.length) void run(viewer, state)
-      else if (viewers.get(viewer) === state) viewers.delete(viewer)
-    }
-  }
-
-  return {
-    enqueue(viewer, frames, onDone = null) {
-      const key = String(viewer || '*')
-      const state = viewers.get(key) || { generation: 0, frames: [], onDone: null, running: false }
-      state.generation += 1
-      state.frames = Array.isArray(frames) ? [...frames] : []
-      state.onDone = typeof onDone === 'function' ? onDone : null
-      viewers.set(key, state)
-      void run(key, state)
-      return state.generation
-    },
-    cancel(viewer) {
-      const state = viewers.get(String(viewer || '*'))
-      if (!state) return false
-      state.generation += 1
-      state.frames = []
-      state.onDone = null
-      return true
-    },
-    pending(viewer) {
-      return viewers.get(String(viewer || '*'))?.frames.length || 0
-    },
-  }
-}
+export function requestedReplayIds(n,e,r){const t=Array.isArray(e)?new Set(e.filter(Boolean)):null;return[...n].filter(([n])=>!t||t.has(n)).sort(([n],[e])=>n===r?-1:e===r?1:0)}const n=()=>new Promise(n=>setTimeout(n,0));export function createLatestReplayPump({send:e,yieldTurn:r=n}={}){if("function"!=typeof e)throw new TypeError("replay pump requires send(frame)");const t=new Map,o=async(n,a)=>{if(!a.running){a.running=!0;try{for(;a.frames.length;){a.generation;const n=a.frames.shift();await e(n),await r(),a.generation}const n=a.onDone;a.onDone=null,n&&await n()}finally{a.running=!1,a.frames.length?o(n,a):t.get(n)===a&&t.delete(n)}}};return{enqueue(n,e,r=null){const a=String(n||"*"),i=t.get(a)||{generation:0,frames:[],onDone:null,running:!1};return i.generation+=1,i.frames=Array.isArray(e)?[...e]:[],i.onDone="function"==typeof r?r:null,t.set(a,i),o(a,i),i.generation},cancel(n){const e=t.get(String(n||"*"));return!!e&&(e.generation+=1,e.frames=[],e.onDone=null,!0)},pending:n=>t.get(String(n||"*"))?.frames.length||0}}