token-goat 2.9.30 → 2.9.31

package/dist/token-goat-chunk-GGGG7RWB.mjs

@@ -0,0 +1,236 @@
+import { createRequire as __cjsRequire } from 'node:module';
+const require = __cjsRequire(import.meta.url);
+import {
+  displaySafeText
+} from "./token-goat-chunk-FNFBKLRD.mjs";
+import {
+  init_define_import_meta_env
+} from "./token-goat-chunk-A37V4PBF.mjs";
+
+// src/hint_suggestion_guard.ts
+init_define_import_meta_env();
+function looksLikeSuggestion(slice) {
+  return slice.includes('"');
+}
+var SAFE_OUTSIDE_QUOTES = /^[A-Za-z0-9 \t_./=:+-]*$/;
+var CONTROL_OR_BIDI = new RegExp("[\\u0000-\\u0008\\u000B\\u000C\\u000E-\\u001F\\u007F-\\u009F\\u200E\\u200F\\u202A-\\u202E\\u2066-\\u2069\\u061C\\u200B-\\u200D\\u2028\\u2029\\uFE00-\\uFE0F]|[\\u{E0000}-\\u{E007F}]|\\p{Cf}", "u");
+var POWERSHELL_DOUBLE_QUOTE = /[\u201C\u201D\u201E]/;
+function suggestionIsUnsafe(slice) {
+  if (slice.includes("\n") || slice.includes("\r") || slice.includes("`") || CONTROL_OR_BIDI.test(slice)) return true;
+  const scan = scanQuotes(slice);
+  if (scan.open !== null) return true;
+  if (scan.singleQuoted.some((body) => ENDS_SINGLE_QUOTES.test(body))) return true;
+  if ([...scan.gaps, ...scan.doubleQuoted].some((text) => text.includes("$") || POWERSHELL_DOUBLE_QUOTE.test(text))) return true;
+  if (scan.doubleQuoted.some((body) => body.includes('\\"'))) return true;
+  if ([...scan.singleQuoted, ...scan.doubleQuoted].some((body) => body.includes(UNQUOTABLE))) return true;
+  return scan.gaps.slice(1).some((gap) => !SAFE_OUTSIDE_QUOTES.test(gap));
+}
+function scanQuotes(slice, insideSingle = false, stopAtTick = false) {
+  const scan = { gaps: [], singleQuoted: [], doubleQuoted: [], open: null, tick: -1 };
+  let i = insideSingle ? slice.indexOf("'") + 1 : 0;
+  if (i === 0 && insideSingle) return scan;
+  let gapStart = i;
+  while (i < slice.length) {
+    const mark = slice[i];
+    if (mark === "\\") {
+      i += 2;
+      continue;
+    }
+    if (stopAtTick && mark === "`") {
+      scan.tick = i;
+      break;
+    }
+    if (mark === '"' || mark === "'" && /\s/.test(slice[i - 1] ?? " ")) {
+      scan.gaps.push(slice.slice(gapStart, i));
+      const close = closingMark(slice, mark, i + 1);
+      if (close === -1) {
+        scan.open = mark;
+        return scan;
+      }
+      ;
+      (mark === '"' ? scan.doubleQuoted : scan.singleQuoted).push(slice.slice(i + 1, close));
+      i = close + 1;
+      gapStart = i;
+      continue;
+    }
+    i++;
+  }
+  scan.gaps.push(slice.slice(gapStart, Math.min(i, slice.length)));
+  return scan;
+}
+function closingMark(slice, mark, from) {
+  if (mark === "'") return slice.indexOf("'", from);
+  for (let i = from; i < slice.length; i++) {
+    if (slice[i] === "\\") i++;
+    else if (slice[i] === '"') return i;
+  }
+  return -1;
+}
+function singleQuoteLeftOpen(slice, insideSingle) {
+  return scanQuotes(slice, insideSingle).open === "'";
+}
+function holdsCommandSubstitution(line) {
+  return line.includes("$(");
+}
+var TRAILING_FLAGS = /^(?: -{1,2}[A-Za-z][A-Za-z0-9-]*(?: [0-9]+)?)*$/;
+function fencedCommandEnd(line) {
+  const scan = scanQuotes(line, false, true);
+  if (scan.tick === -1 || !TRAILING_FLAGS.test(scan.gaps[scan.gaps.length - 1] ?? "")) return -1;
+  const tick = scan.tick;
+  const region = line.slice(0, line.lastIndexOf("`"));
+  return region.includes('"') && (ENDS_SINGLE_QUOTES.test(region) || CONTROL_OR_BIDI.test(region)) ? -1 : tick;
+}
+var SUGGESTED_PROGRAMS = ["pandoc", "duckdb", "rg"];
+var SUGGESTION_START = new RegExp(`token-goat |(?<![\\w./-])(?:${SUGGESTED_PROGRAMS.join("|")}) `);
+function nextSuggestionStart(text, from) {
+  const re = new RegExp(SUGGESTION_START.source, "g");
+  re.lastIndex = from;
+  const found = re.exec(text);
+  return found === null ? -1 : found.index;
+}
+function omitted(program) {
+  return program + " (command omitted: the path contains shell metacharacters)";
+}
+function suggestionProgram(text, start) {
+  return SUGGESTED_PROGRAMS.find((p) => text.startsWith(p + " ", start)) ?? "token-goat";
+}
+function stripUnsafeSuggestions(text) {
+  if (!SUGGESTION_START.test(text)) return text;
+  let out = "";
+  let at = 0;
+  for (; ; ) {
+    const start = nextSuggestionStart(text, at);
+    if (start === -1) return out + text.slice(at);
+    const lineBreak = text.slice(start).search(/[\r\n]/);
+    const line = lineBreak === -1 ? text.slice(start) : text.slice(start, start + lineBreak);
+    const firstTick = line.indexOf("`");
+    const narrow = firstTick === -1 ? line : line.slice(0, firstTick);
+    out += text.slice(at, start);
+    const placeholder = omitted(suggestionProgram(text, start));
+    if (!(looksLikeSuggestion(narrow) && suggestionIsUnsafe(narrow)) && !singleQuoteLeftOpen(narrow, text[start - 1] === "'") && !holdsCommandSubstitution(line)) {
+      out += narrow;
+      at = start + narrow.length;
+      continue;
+    }
+    const end = text[start - 1] === "`" ? fencedCommandEnd(line) : -1;
+    if (end !== -1) {
+      out += placeholder + "`";
+      at = start + end + 1;
+      continue;
+    }
+    const lastTick = line.lastIndexOf("`");
+    const wide = lastTick === -1 || text[start - 1] !== "`" ? line : line.slice(0, lastTick);
+    const tick = line.slice(wide.length).startsWith("`") ? "`" : "";
+    const paired = pairRemovedParens(out.slice(Math.max(out.lastIndexOf("\n"), out.lastIndexOf("\r")) + 1), wide, line.slice(wide.length + tick.length));
+    out += placeholder + tick + paired.close;
+    at = start + wide.length + tick.length + paired.skip;
+  }
+}
+function pairRemovedParens(before, removed, after) {
+  let open = 0;
+  for (const c of before) {
+    if (c === "(") open++;
+    else if (c === ")" && open > 0) open--;
+  }
+  let inner = 0;
+  for (let i = 0; i < after.length; i++) {
+    const c = after[i];
+    if (c === "(") inner++;
+    else if (c !== ")") continue;
+    else if (inner > 0) inner--;
+    else if (open > 0) open--;
+    else return { skip: i + 1, close: "" };
+  }
+  return { skip: 0, close: ")".repeat(Math.min(open, removed.split(")").length - 1)) };
+}
+var REWRITTEN_IN_DOUBLE_QUOTES = /[$`"\u201C-\u201E]|\\(?:\\|$)/;
+var ENDS_SINGLE_QUOTES = /['\u2018-\u201B\r\n]/;
+function quotedArg(value) {
+  if (unquotable(value)) return '"' + UNQUOTABLE + '"';
+  if (REWRITTEN_IN_DOUBLE_QUOTES.test(value)) return "'" + value + "'";
+  return '"' + value + '"';
+}
+function singleQuotable(value) {
+  return !ENDS_SINGLE_QUOTES.test(value) && !CONTROL_OR_BIDI.test(value);
+}
+function unquotable(value) {
+  return LINE_BREAK.test(value) || REWRITTEN_IN_DOUBLE_QUOTES.test(value) && !singleQuotable(value);
+}
+var LINE_BREAK = /[\r\n]/;
+function canQuoteArg(value) {
+  return !unquotable(value);
+}
+var UNQUOTABLE = "<a value no quote mark can hold>";
+function quotedArgs(...values) {
+  const held = values.map((v) => unquotable(v) ? UNQUOTABLE : v);
+  const single = held.some((v) => REWRITTEN_IN_DOUBLE_QUOTES.test(v)) && held.every(singleQuotable);
+  return held.map((v) => single ? "'" + v + "'" : '"' + (REWRITTEN_IN_DOUBLE_QUOTES.test(v) ? UNQUOTABLE : v) + '"');
+}
+function fileSubject(rest, shown, raw = shown) {
+  return rest.includes(raw) || rest.includes(shown) ? "this file" : proseQuoted(shown) ?? "this file";
+}
+function nameSubject(noun, value) {
+  const quoted = proseQuoted(displaySafeText(value));
+  return quoted === null ? "this " + noun : noun + " " + quoted;
+}
+function echoedValue(value) {
+  const safe = displaySafeText(value);
+  const quoted = quotedArg(safe);
+  return quoted.includes(UNQUOTABLE) ? safe : quoted;
+}
+var BLANK_LOOKING = /\u00a0|\u034f|\u115f|\u1160|\u17b4|\u17b5|\u2800|\u3164|\ufe0f|\uffa0|[\ud800-\udbff](?![\udc00-\udfff])|(?<![\ud800-\udbff])[\udc00-\udfff]/g;
+function echoedCommand(value) {
+  return echoedValue(value.replace(BLANK_LOOKING, (ch) => String.fromCharCode(92) + "u" + ch.charCodeAt(0).toString(16).padStart(4, "0")));
+}
+function couldNotRead(file) {
+  return `Could not read: ${echoedValue(file)}`;
+}
+function proseQuoted(value) {
+  const quoted = quotedArg(value);
+  return quoted.includes("`") || quoted.includes(UNQUOTABLE) ? null : quoted;
+}
+function sentenceStart(subject) {
+  return subject.charAt(0).toUpperCase() + subject.slice(1);
+}
+function fencedCommand(command) {
+  return "`" + command + "`";
+}
+function leadWithCommand(command, purpose = "", reason = "") {
+  const tail = reason.trim();
+  return "Run " + fencedCommand(command) + (purpose === "" ? "" : " " + purpose) + "." + (tail === "" ? "" : (tail.includes("`") ? "\n" : " ") + tail);
+}
+function docNavigation(filePath) {
+  const ext = /\.(txt|rst)$/i.exec(filePath)?.[1]?.toLowerCase();
+  return { section: ext !== "txt", outline: ext === void 0 };
+}
+function grepLinesHint(pattern, shownPath, reason = "") {
+  const [quotedPattern, quotedPath] = quotedArgs(pattern, shownPath);
+  return leadWithCommand("token-goat grep " + quotedPattern + " " + quotedPath + " -C 3", "to read the matching lines", reason);
+}
+function configGetCommand(shownPath, key) {
+  return "token-goat config-get " + quotedArgs(shownPath, key).join(" ");
+}
+function docSectionHint(shownPath, heading, reason = "") {
+  const nav = docNavigation(shownPath);
+  if (!nav.section) return grepLinesHint("<pattern>", shownPath, reason);
+  return leadWithCommand("token-goat section " + quotedArg(shownPath + "::" + heading), "to read one section" + (nav.outline ? ", or " + fencedCommand("token-goat outline " + quotedArg(shownPath)) + " for every heading with line ranges" : ""), reason);
+}
+
+export {
+  stripUnsafeSuggestions,
+  quotedArg,
+  canQuoteArg,
+  quotedArgs,
+  fileSubject,
+  nameSubject,
+  echoedValue,
+  echoedCommand,
+  couldNotRead,
+  sentenceStart,
+  fencedCommand,
+  leadWithCommand,
+  docNavigation,
+  grepLinesHint,
+  configGetCommand,
+  docSectionHint
+};

package/dist/{token-goat-chunk-C63JQV5K.mjs → token-goat-chunk-GL3ETKSC.mjs}

@@ -2,13 +2,16 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   redactSecrets
-} from "./token-goat-chunk-4FVIAHSI.mjs";
+} from "./token-goat-chunk-T5P5ACNQ.mjs";
 import {
   shortFingerprint
-} from "./token-goat-chunk-7IN2MKDS.mjs";
+} from "./token-goat-chunk-4GBVPH3D.mjs";
 import {
   registerReset
 } from "./token-goat-chunk-YZAAZU2S.mjs";
+import {
+  quotedArg
+} from "./token-goat-chunk-GGGG7RWB.mjs";
 import {
   foldPath
 } from "./token-goat-chunk-AM5V6GSX.mjs";
@@ -24,6 +27,127 @@ import {
 init_define_import_meta_env();
 import { randomBytes, randomUUID } from "node:crypto";
 import * as fs from "node:fs";
+
+// src/read_range_evasion.ts
+init_define_import_meta_env();
+var states = /* @__PURE__ */ new Map();
+var clock = 0;
+function stamp() {
+  clock = Math.max(Date.now(), clock + 1);
+  return clock;
+}
+function stateFor(key) {
+  const state = states.get(key) ?? { resetAt: 0, denied: [], recent: [] };
+  states.set(key, state);
+  return state;
+}
+function evaluateRangeEvasion(options) {
+  if (options.locked) return "locked";
+  const [start, end] = options.span;
+  const denied = options.denied ?? [];
+  const recent = [...options.served.slice(-3), ...denied].slice(-3);
+  const overlap = ([s, e]) => Math.max(0, Math.min(end, e) - Math.max(start, s) + 1);
+  const anchored = recent.filter(([s]) => s === start);
+  if (anchored.length >= 3 || anchored.some(([, e]) => Math.abs(end - e) <= 20)) return "same_anchor";
+  const microCandidates = [...options.served.slice(-2), ...denied.slice(-1)];
+  if (microCandidates.some(([s, e]) => {
+    const startDelta = Math.abs(start - s);
+    const endDelta = Math.abs(end - e);
+    return startDelta >= 1 && startDelta <= 15 && endDelta >= 1 && endDelta <= 15 && overlap([s, e]) > 0;
+  })) return "micro_shift";
+  if (recent.some(([s, e]) => {
+    if (s === start && end - e > 20) return false;
+    return overlap([s, e]) >= Math.min(end - start + 1, e - s + 1) / 2;
+  })) return "overlap";
+  return null;
+}
+function getReadRangeDenials(key) {
+  return states.get(key)?.denied.map((v) => v.span) ?? [];
+}
+function lockReadRange(key, span, identity) {
+  const state = stateFor(key);
+  state.denied.push({ span: [span[0], span[1]], at: stamp() });
+  state.denied = state.denied.slice(-3);
+  if (identity) state.identity = identity;
+}
+function recordRecentReadRange(key, span) {
+  const state = stateFor(key);
+  const last = state.recent.at(-1)?.span;
+  if (last?.[0] === span[0] && last[1] === span[1]) return;
+  const resync = state.resetAt > 0 && state.recent.length === 0 && state.denied.length === 0;
+  state.recent.push({ span: [span[0], span[1]], at: stamp(), ...resync ? { resync: true } : {} });
+  state.recent = state.recent.slice(-3);
+}
+function getRecentReadRanges(key) {
+  return states.get(key)?.recent.filter((v) => v.resync !== true).map((v) => v.span) ?? [];
+}
+function clearReadRangeIfChanged(key, identity) {
+  const prior = states.get(key)?.identity;
+  if (prior && identity && (prior.size !== identity.size || prior.mtimeMs !== identity.mtimeMs)) clearReadRangeEvasion(key);
+}
+function clearReadRangeEvasion(key) {
+  states.set(key, { resetAt: stamp(), denied: [], recent: [] });
+}
+function clearAllReadRangeEvasion() {
+  states.clear();
+}
+function exportReadRangeEvasion() {
+  return structuredClone(Array.from(states));
+}
+function importReadRangeEvasion(entries) {
+  states = new Map(structuredClone(entries));
+  for (const [, state] of states) {
+    clock = Math.max(clock, state.resetAt, ...state.recent.map((v) => v.at), ...state.denied.map((v) => v.at));
+  }
+}
+function coerceReadRangeEvasion(raw) {
+  if (!Array.isArray(raw)) return [];
+  const finite = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0;
+  const visits = (rawVisits) => {
+    if (!Array.isArray(rawVisits)) return [];
+    return rawVisits.flatMap((v) => {
+      if (typeof v !== "object" || v === null || !("span" in v) || !("at" in v)) return [];
+      const span = v.span;
+      if (!Array.isArray(span) || span.length !== 2 || !finite(span[0]) || !finite(span[1]) || !Number.isInteger(span[0]) || !Number.isInteger(span[1]) || span[0] < 1 || span[1] < span[0] || !finite(v.at)) return [];
+      return [{ span: [span[0], span[1]], at: v.at, ..."resync" in v && v.resync === true ? { resync: true } : {} }];
+    }).slice(-3);
+  };
+  return raw.flatMap((pair) => {
+    if (!Array.isArray(pair) || typeof pair[0] !== "string") return [];
+    const value = pair[1];
+    if (typeof value !== "object" || value === null || !("resetAt" in value) || !finite(value.resetAt)) return [];
+    const state = {
+      resetAt: value.resetAt,
+      denied: visits("denied" in value ? value.denied : void 0),
+      recent: visits("recent" in value ? value.recent : void 0)
+    };
+    if ("identity" in value && typeof value.identity === "object" && value.identity !== null && "size" in value.identity && "mtimeMs" in value.identity && finite(value.identity.size) && finite(value.identity.mtimeMs)) {
+      state.identity = { size: value.identity.size, mtimeMs: value.identity.mtimeMs };
+    }
+    return [[pair[0], state]];
+  });
+}
+function mergeReadRangeEvasion(disk, mem) {
+  const merged = new Map(structuredClone(disk));
+  const mergeVisits = (a, b) => Array.from(new Map([...a, ...b].map((v) => [JSON.stringify(v), v])).values()).sort((a2, b2) => a2.at - b2.at).slice(-3);
+  for (const [key, state] of mem) {
+    const prior = merged.get(key);
+    if (!prior || state.resetAt > prior.resetAt) {
+      merged.set(key, state);
+    } else if (state.resetAt === prior.resetAt) {
+      const denied = mergeVisits(prior.denied, state.denied);
+      const recent = mergeVisits(prior.recent, state.recent);
+      const newestIdentity = (state.denied.at(-1)?.at ?? 0) >= (prior.denied.at(-1)?.at ?? 0) ? state.identity : prior.identity;
+      merged.set(key, { resetAt: state.resetAt, denied, recent, ...newestIdentity ? { identity: newestIdentity } : {} });
+    }
+  }
+  return Array.from(merged);
+}
+function rangeLockMessage(shown, span) {
+  return "Line-range reads of this file are locked for this compaction epoch. Run `token-goat read " + quotedArg(shown + "@" + span[0] + "-" + span[1]) + "` for this window, or `token-goat skeleton " + quotedArg(shown) + "` for structure. Do not shrink, grow, or shift the Read range.";
+}
+
+// src/session.ts
 var _files = /* @__PURE__ */ new Map();
 var _filesAtLoad = /* @__PURE__ */ new Map();
 var _filesFullReadCountAtLoad = /* @__PURE__ */ new Map();
@@ -35,6 +159,7 @@ var _grepQueries = /* @__PURE__ */ new Map();
 var _globQueries = /* @__PURE__ */ new Map();
 var _lastTabContext = null;
 var _seenImageHashes = [];
+var _verificationRuns = [];
 var _outstandingAgentSpawns = [];
 var _outstandingAgentSpawnsAtLoad = [];
 var _bashReruns = /* @__PURE__ */ new Set();
@@ -44,6 +169,8 @@ var _fileLineRanges = /* @__PURE__ */ new Map();
 var _fileServedOutputs = /* @__PURE__ */ new Map();
 var _fileLineRangesAtLoad = /* @__PURE__ */ new Map();
 var _fileServedOutputsAtLoad = /* @__PURE__ */ new Map();
+var _fileLineRangesReset = /* @__PURE__ */ new Set();
+var _fileLineRangeIdentities = /* @__PURE__ */ new Map();
 var _compactedAt = 0;
 var _cliReads = /* @__PURE__ */ new Set();
 var _pendingLargeFileHints = /* @__PURE__ */ new Map();
@@ -68,6 +195,9 @@ function resolveFilesKey(normalized) {
   }
   return normalized;
 }
+function newEntryEpochBase() {
+  return _compactedAt > 0 ? { epochBase: { at: _compactedAt, readCount: 0, fullReadCount: 0 } } : {};
+}
 function recordFileRead(filePath, isFullRead = true) {
   const normalized = normalizePath(filePath);
   const key = resolveFilesKey(normalized);
@@ -81,16 +211,35 @@ function recordFileRead(filePath, isFullRead = true) {
       lastReadAt: now,
       wasEdited: false,
       sizeBytes: size,
-      ...isFullRead ? { lastFullReadAt: now, fullReadCount: 1 } : {}
+      ...isFullRead ? { lastFullReadAt: now, fullReadCount: 1 } : {},
+      ...newEntryEpochBase()
     });
     return;
   }
+  const opensEpoch = _compactedAt > 0 && prev.lastReadAt < _compactedAt && (prev.epochBase?.at ?? 0) < _compactedAt;
   _files.set(key, {
     ...prev,
     readCount: prev.readCount + 1,
     lastReadAt: now,
     sizeBytes: size,
-    ...isFullRead ? { lastFullReadAt: now, fullReadCount: (prev.fullReadCount ?? 0) + 1 } : {}
+    ...isFullRead ? { lastFullReadAt: now, fullReadCount: (prev.fullReadCount ?? 0) + 1 } : {},
+    ...opensEpoch ? { epochBase: { at: _compactedAt, readCount: prev.readCount, fullReadCount: prev.fullReadCount ?? 0 } } : {}
+  });
+}
+function unrecordRefusedRead(filePath, before) {
+  const key = resolveFilesKey(normalizePath(filePath));
+  const current = _files.get(key);
+  if (current === void 0) return;
+  if (before === void 0) {
+    _files.delete(key);
+    return;
+  }
+  const { fullReadCount: _fullReadCount, lastFullReadAt: _lastFullReadAt, ...rest } = current;
+  _files.set(key, {
+    ...rest,
+    readCount: before.readCount,
+    ...before.fullReadCount !== void 0 ? { fullReadCount: before.fullReadCount } : {},
+    ...before.lastFullReadAt !== void 0 ? { lastFullReadAt: before.lastFullReadAt } : {}
   });
 }
 var MAX_SYMBOLS_PER_FILE = 25;
@@ -105,7 +254,8 @@ function recordSymbolRead(filePath, symbol) {
       lastReadAt: Date.now(),
       wasEdited: false,
       sizeBytes: fileSize(normalized),
-      symbols_read: [symbol]
+      symbols_read: [symbol],
+      ...newEntryEpochBase()
     });
     return;
   }
@@ -123,19 +273,21 @@ function filesFullReadCountAtLoad() {
 function recordFileEdit(filePath) {
   const normalized = normalizePath(filePath);
   const key = resolveFilesKey(normalized);
-  _fileLineRanges.delete(foldPath(normalized));
+  resetFileLineRanges(normalized);
   const prev = _files.get(key);
+  const now = Date.now();
   if (prev === void 0) {
     _files.set(key, {
       path: key,
       readCount: 0,
       lastReadAt: 0,
       wasEdited: true,
+      lastEditedAt: now,
       sizeBytes: fileSize(normalized)
     });
     return;
   }
-  _files.set(key, { ...prev, wasEdited: true });
+  _files.set(key, { ...prev, wasEdited: true, lastEditedAt: now });
 }
 function getSessionFiles() {
   return _files;
@@ -148,6 +300,24 @@ function wasFileFullyReadThisSession(filePath) {
   const entry = _files.get(resolveFilesKey(normalizePath(filePath)));
   return entry !== void 0 && entry.lastFullReadAt !== void 0 && entry.lastFullReadAt >= _compactedAt;
 }
+function epochReadCounts(entry, compactedAt = _compactedAt) {
+  if (entry.lastReadAt < compactedAt) return { reads: 0, fullReads: 0 };
+  const base = entry.epochBase !== void 0 && entry.epochBase.at === compactedAt ? entry.epochBase : void 0;
+  const fullInEpoch = entry.lastFullReadAt !== void 0 && entry.lastFullReadAt >= compactedAt;
+  if (base === void 0 && compactedAt > 0) return { reads: Math.min(entry.readCount, 1), fullReads: fullInEpoch ? 1 : 0 };
+  const reads = Math.max(0, entry.readCount - (base?.readCount ?? 0));
+  const fullReads = fullInEpoch ? Math.max(0, (entry.fullReadCount ?? 0) - (base?.fullReadCount ?? 0)) : 0;
+  return { reads, fullReads };
+}
+function wasEditedSinceCompaction(entry, compactedAt = _compactedAt) {
+  return entry.wasEdited && (entry.lastEditedAt === void 0 || entry.lastEditedAt >= compactedAt);
+}
+function mergeEpochBase(a, b) {
+  if (a === void 0) return b;
+  if (b === void 0 || a.at > b.at) return a;
+  if (b.at > a.at) return b;
+  return { at: a.at, readCount: Math.max(a.readCount, b.readCount), fullReadCount: Math.max(a.fullReadCount, b.fullReadCount) };
+}
 function getCompactedAt() {
   return _compactedAt;
 }
@@ -155,6 +325,8 @@ function markCompacted(now = Date.now()) {
   if (now <= _compactedAt) return;
   _compactedAt = now;
   _fileLineRanges = /* @__PURE__ */ new Map();
+  _fileLineRangeIdentities = /* @__PURE__ */ new Map();
+  clearAllReadRangeEvasion();
   _fileServedOutputs = /* @__PURE__ */ new Map();
   _cliReads = /* @__PURE__ */ new Set();
 }
@@ -276,6 +448,12 @@ function setLastTabContext(text) {
 function lastTabContextMatches(text) {
   return _lastTabContext !== null && _lastTabContext === shortFingerprint(text);
 }
+var MAX_VERIFICATION_RUNS = 8;
+function recordVerificationRun(command, exitCode, at = Date.now()) {
+  _verificationRuns = _verificationRuns.filter((r) => r.command !== command);
+  _verificationRuns.push({ command, exitCode, at });
+  if (_verificationRuns.length > MAX_VERIFICATION_RUNS) _verificationRuns = _verificationRuns.slice(-MAX_VERIFICATION_RUNS);
+}
 var MAX_SEEN_IMAGE_HASHES = 16;
 function hasSeenImage(hash) {
   return _seenImageHashes.includes(hash);
@@ -340,11 +518,11 @@ function consumedCurlDownloadKeys() {
   return consumed;
 }
 function consumedFileLineRangeKeys() {
-  const consumed = [];
+  const consumed = new Set(_fileLineRangesReset);
   for (const key of _fileLineRangesAtLoad.keys()) {
-    if (!_fileLineRanges.has(key)) consumed.push(key);
+    if (!_fileLineRanges.has(key)) consumed.add(key);
   }
-  return consumed;
+  return [...consumed];
 }
 function consumedFileServedOutputKeys() {
   const consumed = [];
@@ -365,22 +543,34 @@ function statIdentity(absPath) {
 function recordFileLineRange(filePath, start, end) {
   const normalized = normalizePath(filePath);
   const key = foldPath(normalized);
+  const entryKey = resolveFilesKey(normalized);
+  const entry = _files.get(entryKey);
+  const identity = dropFileLineRangesIfChanged(normalized);
   const ranges = _fileLineRanges.get(key) ?? [];
   if (!ranges.some(([s, e]) => s === start && e === end)) {
     ranges.push([start, end]);
     if (ranges.length > MAX_RANGES_PER_FILE) ranges.splice(0, ranges.length - MAX_RANGES_PER_FILE);
     _fileLineRanges.set(key, ranges);
   }
-  const entryKey = resolveFilesKey(normalized);
-  const entry = _files.get(entryKey);
-  const identity = statIdentity(normalized);
+  if (identity) _fileLineRangeIdentities.set(key, identity);
   if (entry && identity) _files.set(entryKey, { ...entry, rangeFileIdentity: identity });
 }
+function dropFileLineRangesIfChanged(filePath) {
+  const normalized = normalizePath(filePath);
+  const identity = statIdentity(normalized);
+  const prior = _fileLineRangeIdentities.get(foldPath(normalized)) ?? _files.get(resolveFilesKey(normalized))?.rangeFileIdentity;
+  if (prior !== void 0 && identity !== void 0 && (prior.size !== identity.size || prior.mtimeMs !== identity.mtimeMs)) resetFileLineRanges(normalized);
+  return identity;
+}
 function getFileLineRanges(filePath) {
   return _fileLineRanges.get(foldPath(normalizePath(filePath))) ?? [];
 }
 function resetFileLineRanges(filePath) {
-  _fileLineRanges.delete(foldPath(normalizePath(filePath)));
+  const key = foldPath(normalizePath(filePath));
+  clearReadRangeEvasion(key);
+  _fileLineRanges.delete(key);
+  _fileLineRangeIdentities.delete(key);
+  _fileLineRangesReset.add(key);
 }
 var MAX_SERVED_OUTPUTS_PER_FILE = 8;
 var GENERIC_SERVED_OUTPUT_KEY = "\0<bash-generic-served>";
@@ -410,7 +600,8 @@ function markFileTruncated(filePath, isFullRead = true) {
       wasEdited: false,
       sizeBytes: fileSize(normalized),
       wasTruncated: true,
-      ...isFullRead ? { lastFullReadAt: now, fullReadCount: 1 } : {}
+      ...isFullRead ? { lastFullReadAt: now, fullReadCount: 1 } : {},
+      ...newEntryEpochBase()
     });
     return;
   }
@@ -451,6 +642,8 @@ function exportSessionState() {
     bashReruns: Array.from(_bashReruns),
     curlDownloads: Array.from(_curlDownloads.entries()),
     fileLineRanges: Array.from(_fileLineRanges.entries()),
+    readRangeEvasion: exportReadRangeEvasion(),
+    ..._fileLineRangeIdentities.size > 0 ? { fileLineRangeIdentities: Array.from(_fileLineRangeIdentities.entries()) } : {},
     ..._fileServedOutputs.size > 0 ? { fileServedOutputs: Array.from(_fileServedOutputs.entries()) } : {},
     cliReads: Array.from(_cliReads),
     pendingLargeFileHints: Array.from(_pendingLargeFileHints.entries()),
@@ -460,10 +653,12 @@ function exportSessionState() {
     outstandingAgentSpawns: _outstandingAgentSpawns.map((e) => [e.prompt, e.ts]),
     ..._lastTabContext !== null ? { lastTabContextDigest: _lastTabContext } : {},
     ..._seenImageHashes.length > 0 ? { seenImageHashes: [..._seenImageHashes] } : {},
+    ..._verificationRuns.length > 0 ? { verificationRuns: [..._verificationRuns] } : {},
     ..._compactedAt > 0 ? { compactedAt: _compactedAt } : {}
   };
 }
 function importSessionState(s) {
+  importReadRangeEvasion(s.readRangeEvasion ?? []);
   _files = /* @__PURE__ */ new Map();
   for (const e of s.files) {
     if (e && typeof e.path === "string") _files.set(e.path, e);
@@ -479,6 +674,8 @@ function importSessionState(s) {
   _curlDownloadsAtLoad = new Map(_curlDownloads);
   _fileLineRanges = new Map(s.fileLineRanges ?? []);
   _fileLineRangesAtLoad = new Map(_fileLineRanges);
+  _fileLineRangesReset = /* @__PURE__ */ new Set();
+  _fileLineRangeIdentities = new Map(s.fileLineRangeIdentities ?? []);
   _fileServedOutputs = new Map(s.fileServedOutputs ?? []);
   _fileServedOutputsAtLoad = new Map(_fileServedOutputs);
   _cliReads = new Set(s.cliReads ?? []);
@@ -492,9 +689,11 @@ function importSessionState(s) {
   _outstandingAgentSpawnsAtLoad = [..._outstandingAgentSpawns];
   _lastTabContext = s.lastTabContextDigest ?? null;
   _seenImageHashes = [...s.seenImageHashes ?? []];
+  _verificationRuns = [...s.verificationRuns ?? []];
   _compactedAt = s.compactedAt ?? 0;
 }
 registerReset(() => {
+  clearAllReadRangeEvasion();
   _files = /* @__PURE__ */ new Map();
   _filesAtLoad = /* @__PURE__ */ new Map();
   _filesFullReadCountAtLoad = /* @__PURE__ */ new Map();
@@ -507,6 +706,8 @@ registerReset(() => {
   _curlDownloadsAtLoad = /* @__PURE__ */ new Map();
   _fileLineRanges = /* @__PURE__ */ new Map();
   _fileLineRangesAtLoad = /* @__PURE__ */ new Map();
+  _fileLineRangesReset = /* @__PURE__ */ new Set();
+  _fileLineRangeIdentities = /* @__PURE__ */ new Map();
   _fileServedOutputs = /* @__PURE__ */ new Map();
   _fileServedOutputsAtLoad = /* @__PURE__ */ new Map();
   _cliReads = /* @__PURE__ */ new Set();
@@ -520,13 +721,24 @@ registerReset(() => {
   _outstandingAgentSpawnsAtLoad = [];
   _lastTabContext = null;
   _seenImageHashes = [];
+  _verificationRuns = [];
   _compactedAt = 0;
   _sessionId = null;
   _transcriptPath = null;
 }, { perRequest: true });
 
 export {
+  evaluateRangeEvasion,
+  getReadRangeDenials,
+  lockReadRange,
+  recordRecentReadRange,
+  getRecentReadRanges,
+  clearReadRangeIfChanged,
+  coerceReadRangeEvasion,
+  mergeReadRangeEvasion,
+  rangeLockMessage,
   recordFileRead,
+  unrecordRefusedRead,
   recordSymbolRead,
   filesReadCountAtLoad,
   filesFullReadCountAtLoad,
@@ -534,6 +746,9 @@ export {
   getSessionFiles,
   wasFileReadThisSession,
   wasFileFullyReadThisSession,
+  epochReadCounts,
+  wasEditedSinceCompaction,
+  mergeEpochBase,
   getCompactedAt,
   markCompacted,
   getSessionFileEntry,
@@ -567,6 +782,8 @@ export {
   getGlobMatchCount,
   setLastTabContext,
   lastTabContextMatches,
+  MAX_VERIFICATION_RUNS,
+  recordVerificationRun,
   MAX_SEEN_IMAGE_HASHES,
   hasSeenImage,
   recordSeenImage,
@@ -586,6 +803,7 @@ export {
   consumedFileServedOutputKeys,
   MAX_RANGES_PER_FILE,
   recordFileLineRange,
+  dropFileLineRangesIfChanged,
   getFileLineRanges,
   resetFileLineRanges,
   MAX_SERVED_OUTPUTS_PER_FILE,