xiaotime 0.2.1 → 0.3.0

package/dist/__tests__/tools.test.js

@@ -0,0 +1,381 @@
+"use strict";
+/**
+ * Tool-execution surface tests.
+ *
+ * SPRINT-CLI-APPROVAL-MENU-1 (#6509):
+ *   - PR1: ISC-6509-006 (read-only tools never prompt)
+ *           + write_file approval integration (#6532 CR-r1)
+ *   - PR2: ISC-6509-004 (allowlist match skips promptApprovalMenu +
+ *           auto-approved suffix)
+ *           + option-2 selection writes the derived pattern to
+ *           ~/.xiaotime/settings.json
+ *
+ * Tests redirect XIAOTIME_SETTINGS_PATH to a per-test tmpdir so
+ * the user's real ~/.xiaotime/settings.json is never read or
+ * written.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const tools_js_1 = require("../tools.js");
+const ui_state_js_1 = require("../ui_state.js");
+const settings_js_1 = require("../settings.js");
+let tmpDir;
+let settingsPath;
+let origSettingsEnv;
+(0, vitest_1.beforeEach)(() => {
+    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "xiaotime-tools-test-"));
+    (0, tools_js_1.setSessionCwd)(tmpDir);
+    // Redirect allowlist to a tmpfile so we never read or write the
+    // user's real ~/.xiaotime/settings.json.
+    settingsPath = path.join(tmpDir, ".xiaotime-test-settings.json");
+    origSettingsEnv = process.env.XIAOTIME_SETTINGS_PATH;
+    process.env.XIAOTIME_SETTINGS_PATH = settingsPath;
+    vitest_1.vi.spyOn(process.stdout, "write").mockImplementation(() => true);
+    vitest_1.vi.spyOn(console, "log").mockImplementation(() => { });
+    vitest_1.vi.spyOn(console, "error").mockImplementation(() => { });
+});
+(0, vitest_1.afterEach)(() => {
+    if (origSettingsEnv === undefined) {
+        delete process.env.XIAOTIME_SETTINGS_PATH;
+    }
+    else {
+        process.env.XIAOTIME_SETTINGS_PATH = origSettingsEnv;
+    }
+    vitest_1.vi.restoreAllMocks();
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+});
+(0, vitest_1.describe)("read-only tools never prompt (ISC-6509-006)", () => {
+    (0, vitest_1.test)("read_file does not call promptApprovalMenu", async () => {
+        const filePath = path.join(tmpDir, "sample.txt");
+        fs.writeFileSync(filePath, "line one\nline two\nline three\n");
+        const ui = new ui_state_js_1.SessionUI();
+        const spy = vitest_1.vi.spyOn(ui, "promptApprovalMenu");
+        try {
+            const result = await (0, tools_js_1.executeTool)({
+                tool_use_id: "test-1",
+                name: "read_file",
+                input: { path: filePath },
+            }, ui);
+            (0, vitest_1.expect)(result.is_error).toBe(false);
+            (0, vitest_1.expect)(result.content).toContain("line one");
+            (0, vitest_1.expect)(spy).not.toHaveBeenCalled();
+        }
+        finally {
+            ui.getRl().close();
+        }
+    });
+    (0, vitest_1.test)("list_directory does not call promptApprovalMenu", async () => {
+        fs.writeFileSync(path.join(tmpDir, "a.txt"), "a");
+        fs.writeFileSync(path.join(tmpDir, "b.txt"), "b");
+        const ui = new ui_state_js_1.SessionUI();
+        const spy = vitest_1.vi.spyOn(ui, "promptApprovalMenu");
+        try {
+            const result = await (0, tools_js_1.executeTool)({
+                tool_use_id: "test-2",
+                name: "list_directory",
+                input: { path: tmpDir },
+            }, ui);
+            (0, vitest_1.expect)(result.is_error).toBe(false);
+            (0, vitest_1.expect)(result.content).toContain("a.txt");
+            (0, vitest_1.expect)(result.content).toContain("b.txt");
+            (0, vitest_1.expect)(spy).not.toHaveBeenCalled();
+        }
+        finally {
+            ui.getRl().close();
+        }
+    });
+});
+(0, vitest_1.describe)("write_file approval integration (#6532 CR-r1)", () => {
+    (0, vitest_1.test)("rejection returns 'Rejected by user: <reason>' and does NOT write", async () => {
+        const target = path.join(tmpDir, "should-not-exist.txt");
+        const ui = new ui_state_js_1.SessionUI();
+        vitest_1.vi.spyOn(ui, "promptApprovalMenu").mockResolvedValue({
+            approved: false,
+            rejectReason: "I don't want this written",
+        });
+        try {
+            const result = await (0, tools_js_1.executeTool)({
+                tool_use_id: "t-reject-1",
+                name: "write_file",
+                input: { path: target, content: "should never land" },
+            }, ui);
+            (0, vitest_1.expect)(result.is_error).toBe(false);
+            (0, vitest_1.expect)(result.content).toBe("Rejected by user: I don't want this written");
+            (0, vitest_1.expect)(fs.existsSync(target)).toBe(false);
+        }
+        finally {
+            ui.getRl().close();
+        }
+    });
+    (0, vitest_1.test)("rejection with empty reason returns 'Rejected by user.'", async () => {
+        const target = path.join(tmpDir, "empty-reason.txt");
+        const ui = new ui_state_js_1.SessionUI();
+        vitest_1.vi.spyOn(ui, "promptApprovalMenu").mockResolvedValue({
+            approved: false,
+            rejectReason: "",
+        });
+        try {
+            const result = await (0, tools_js_1.executeTool)({
+                tool_use_id: "t-reject-2",
+                name: "write_file",
+                input: { path: target, content: "x" },
+            }, ui);
+            (0, vitest_1.expect)(result.content).toBe("Rejected by user.");
+            (0, vitest_1.expect)(fs.existsSync(target)).toBe(false);
+        }
+        finally {
+            ui.getRl().close();
+        }
+    });
+    (0, vitest_1.test)("approval writes the file and returns 'File written: <path>'", async () => {
+        const target = path.join(tmpDir, "approved.txt");
+        const ui = new ui_state_js_1.SessionUI();
+        vitest_1.vi.spyOn(ui, "promptApprovalMenu").mockResolvedValue({
+            approved: true,
+            allowlistRequested: false,
+        });
+        try {
+            const result = await (0, tools_js_1.executeTool)({
+                tool_use_id: "t-approve-1",
+                name: "write_file",
+                input: { path: target, content: "content here" },
+            }, ui);
+            (0, vitest_1.expect)(result.is_error).toBe(false);
+            (0, vitest_1.expect)(result.content).toBe(`File written: ${target}`);
+            (0, vitest_1.expect)(fs.readFileSync(target, "utf-8")).toBe("content here");
+        }
+        finally {
+            ui.getRl().close();
+        }
+    });
+});
+(0, vitest_1.describe)("allowlist persistence on option-2 selection (ISC-6509-003)", () => {
+    (0, vitest_1.test)("write_file: allowlistRequested=true persists derived pattern", async () => {
+        const target = path.join(tmpDir, "nested", "deep", "approved.txt");
+        const ui = new ui_state_js_1.SessionUI();
+        vitest_1.vi.spyOn(ui, "promptApprovalMenu").mockResolvedValue({
+            approved: true,
+            allowlistRequested: true,
+        });
+        try {
+            await (0, tools_js_1.executeTool)({
+                tool_use_id: "t-allowlist-1",
+                name: "write_file",
+                input: { path: target, content: "x" },
+            }, ui);
+            const loaded = (0, settings_js_1.loadAllowlist)();
+            (0, vitest_1.expect)(loaded).toHaveLength(1);
+            (0, vitest_1.expect)(loaded[0]).toMatchObject({
+                tool: "write_file",
+                pattern: `${path.dirname(target)}/**`,
+            });
+        }
+        finally {
+            ui.getRl().close();
+        }
+    });
+    (0, vitest_1.test)("shell_command: allowlistRequested=true persists 'echo hello' for 'echo hello world'", async () => {
+        // Real `echo` command — benign, no side effects, exits 0
+        // immediately. Avoids needing to mock child_process.execSync
+        // (which is hard to redefine on an ESM module namespace).
+        const ui = new ui_state_js_1.SessionUI();
+        vitest_1.vi.spyOn(ui, "promptApprovalMenu").mockResolvedValue({
+            approved: true,
+            allowlistRequested: true,
+        });
+        try {
+            await (0, tools_js_1.executeTool)({
+                tool_use_id: "t-allowlist-2",
+                name: "shell_command",
+                input: { command: "echo hello world" },
+            }, ui);
+            const loaded = (0, settings_js_1.loadAllowlist)();
+            (0, vitest_1.expect)(loaded).toHaveLength(1);
+            (0, vitest_1.expect)(loaded[0]).toMatchObject({
+                tool: "shell_command",
+                pattern: "echo hello",
+            });
+        }
+        finally {
+            ui.getRl().close();
+        }
+    });
+    (0, vitest_1.test)("appendAllowlist failure does NOT abort the tool run (#6538 CR-r1)", async () => {
+        // Force the settings file to be unwritable by pointing
+        // XIAOTIME_SETTINGS_PATH at a non-existent directory under a
+        // read-only parent. The tool was already approved; persist
+        // failure should log to stderr and let the tool execute.
+        const readOnlyDir = path.join(tmpDir, "read-only");
+        fs.mkdirSync(readOnlyDir);
+        fs.chmodSync(readOnlyDir, 0o400); // r--
+        process.env.XIAOTIME_SETTINGS_PATH = path.join(readOnlyDir, "child", "settings.json");
+        const stderrSpy = vitest_1.vi
+            .spyOn(process.stderr, "write")
+            .mockImplementation(() => true);
+        const target = path.join(tmpDir, "still-written.txt");
+        const ui = new ui_state_js_1.SessionUI();
+        vitest_1.vi.spyOn(ui, "promptApprovalMenu").mockResolvedValue({
+            approved: true,
+            allowlistRequested: true,
+        });
+        try {
+            const result = await (0, tools_js_1.executeTool)({
+                tool_use_id: "t-persist-fail",
+                name: "write_file",
+                input: { path: target, content: "should still land" },
+            }, ui);
+            // Tool ran despite persist failure.
+            (0, vitest_1.expect)(result.is_error).toBe(false);
+            (0, vitest_1.expect)(fs.readFileSync(target, "utf-8")).toBe("should still land");
+            // Stderr received the failure warning.
+            const stderrCalls = stderrSpy.mock.calls
+                .map((c) => String(c[0]))
+                .join("");
+            (0, vitest_1.expect)(stderrCalls).toContain("failed to persist allowlist");
+        }
+        finally {
+            ui.getRl().close();
+            // Restore mode so cleanup can rm -rf.
+            fs.chmodSync(readOnlyDir, 0o700);
+        }
+    });
+    (0, vitest_1.test)("allowlistRequested=false does NOT persist", async () => {
+        const target = path.join(tmpDir, "no-persist.txt");
+        const ui = new ui_state_js_1.SessionUI();
+        vitest_1.vi.spyOn(ui, "promptApprovalMenu").mockResolvedValue({
+            approved: true,
+            allowlistRequested: false,
+        });
+        try {
+            await (0, tools_js_1.executeTool)({
+                tool_use_id: "t-no-persist",
+                name: "write_file",
+                input: { path: target, content: "x" },
+            }, ui);
+            (0, vitest_1.expect)((0, settings_js_1.loadAllowlist)()).toEqual([]);
+            (0, vitest_1.expect)(fs.existsSync(settingsPath)).toBe(false);
+        }
+        finally {
+            ui.getRl().close();
+        }
+    });
+});
+(0, vitest_1.describe)("allowlist match skips promptApprovalMenu (ISC-6509-004)", () => {
+    (0, vitest_1.test)("write_file: matching dir glob skips menu + writes file", async () => {
+        // Pre-seed the allowlist with a write_file dir-glob entry.
+        (0, settings_js_1.appendAllowlist)({
+            tool: "write_file",
+            pattern: `${tmpDir}/**`,
+        });
+        const target = path.join(tmpDir, "auto-approved.txt");
+        const ui = new ui_state_js_1.SessionUI();
+        const spy = vitest_1.vi.spyOn(ui, "promptApprovalMenu");
+        try {
+            const result = await (0, tools_js_1.executeTool)({
+                tool_use_id: "t-skip-1",
+                name: "write_file",
+                input: { path: target, content: "via allowlist" },
+            }, ui);
+            (0, vitest_1.expect)(result.is_error).toBe(false);
+            (0, vitest_1.expect)(result.content).toBe(`File written: ${target}`);
+            (0, vitest_1.expect)(fs.readFileSync(target, "utf-8")).toBe("via allowlist");
+            (0, vitest_1.expect)(spy).not.toHaveBeenCalled();
+        }
+        finally {
+            ui.getRl().close();
+        }
+    });
+    (0, vitest_1.test)("shell_command: matching derived pattern skips menu + runs", async () => {
+        (0, settings_js_1.appendAllowlist)({
+            tool: "shell_command",
+            pattern: "echo hello",
+        });
+        const ui = new ui_state_js_1.SessionUI();
+        const spy = vitest_1.vi.spyOn(ui, "promptApprovalMenu");
+        try {
+            const result = await (0, tools_js_1.executeTool)({
+                tool_use_id: "t-skip-2",
+                name: "shell_command",
+                input: { command: "echo hello world" },
+            }, ui);
+            (0, vitest_1.expect)(result.is_error).toBe(false);
+            (0, vitest_1.expect)(result.content).toBe("hello world\n");
+            (0, vitest_1.expect)(spy).not.toHaveBeenCalled();
+        }
+        finally {
+            ui.getRl().close();
+        }
+    });
+    // NOTE: git_commit auto-approve happy-path is covered by the
+    // PR-body manual walkthrough (requires a real git repo with staged
+    // changes; setting that up in a vitest fixture is heavier than the
+    // marginal coverage gain). The skip-menu invariant is exercised
+    // here via shell_command + write_file; git_commit shares the
+    // _gateApproval helper one switch case over.
+    (0, vitest_1.test)("non-matching allowlist entry → menu IS called", async () => {
+        // Allowlist has a write_file entry for a DIFFERENT dir; shouldn't
+        // authorize a write to tmpDir.
+        (0, settings_js_1.appendAllowlist)({
+            tool: "write_file",
+            pattern: "/some/other/**",
+        });
+        const target = path.join(tmpDir, "needs-prompt.txt");
+        const ui = new ui_state_js_1.SessionUI();
+        vitest_1.vi.spyOn(ui, "promptApprovalMenu").mockResolvedValue({
+            approved: true,
+            allowlistRequested: false,
+        });
+        try {
+            const result = await (0, tools_js_1.executeTool)({
+                tool_use_id: "t-skip-4",
+                name: "write_file",
+                input: { path: target, content: "x" },
+            }, ui);
+            (0, vitest_1.expect)(result.is_error).toBe(false);
+            (0, vitest_1.expect)(fs.readFileSync(target, "utf-8")).toBe("x");
+            // The mocked promptApprovalMenu WAS called, confirming the
+            // non-matching allowlist didn't authorize.
+            (0, vitest_1.expect)(ui.promptApprovalMenu).toHaveBeenCalledTimes(1);
+        }
+        finally {
+            ui.getRl().close();
+        }
+    });
+});
+//# sourceMappingURL=tools.test.js.map

package/dist/__tests__/tools.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.test.js","sourceRoot":"","sources":["../../src/__tests__/tools.test.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,mCAA2E;AAC3E,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,0CAAyD;AACzD,gDAA2C;AAC3C,gDAAgE;AAEhE,IAAI,MAAc,CAAC;AACnB,IAAI,YAAoB,CAAC;AACzB,IAAI,eAAmC,CAAC;AAExC,IAAA,mBAAU,EAAC,GAAG,EAAE;IACd,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACxE,IAAA,wBAAa,EAAC,MAAM,CAAC,CAAC;IACtB,gEAAgE;IAChE,yCAAyC;IACzC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;IACjE,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,YAAY,CAAC;IAClD,WAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACjE,WAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACtD,WAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,IAAA,kBAAS,EAAC,GAAG,EAAE;IACb,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,eAAe,CAAC;IACvD,CAAC;IACD,WAAE,CAAC,eAAe,EAAE,CAAC;IACrB,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,IAAA,aAAI,EAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACjD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,kCAAkC,CAAC,CAAC;QAE/D,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,WAAE,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAW,EAC9B;gBACE,WAAW,EAAE,QAAQ;gBACrB,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC1B,EACD,EAAE,CACH,CAAC;YACF,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAC7C,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACrC,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QACjE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAClD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAElD,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,WAAE,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAW,EAC9B;gBACE,WAAW,EAAE,QAAQ;gBACrB,IAAI,EAAE,gBAAgB;gBACtB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aACxB,EACD,EAAE,CACH,CAAC;YACF,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACrC,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,IAAA,aAAI,EAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;QACzD,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,WAAE,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC,iBAAiB,CAAC;YACnD,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,2BAA2B;SAC1C,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAW,EAC9B;gBACE,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,EAAE;aACtD,EACD,EAAE,CACH,CAAC;YACF,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CACzB,6CAA6C,CAC9C,CAAC;YACF,IAAA,eAAM,EAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,WAAE,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC,iBAAiB,CAAC;YACnD,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,EAAE;SACjB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAW,EAC9B;gBACE,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE;aACtC,EACD,EAAE,CACH,CAAC;YACF,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACjD,IAAA,eAAM,EAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,WAAE,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC,iBAAiB,CAAC;YACnD,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,KAAK;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAW,EAC9B;gBACE,WAAW,EAAE,aAAa;gBAC1B,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE;aACjD,EACD,EAAE,CACH,CAAC;YACF,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC;YACvD,IAAA,eAAM,EAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,4DAA4D,EAAE,GAAG,EAAE;IAC1E,IAAA,aAAI,EAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QACnE,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,WAAE,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC,iBAAiB,CAAC;YACnD,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,IAAA,sBAAW,EACf;gBACE,WAAW,EAAE,eAAe;gBAC5B,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE;aACtC,EACD,EAAE,CACH,CAAC;YACF,MAAM,MAAM,GAAG,IAAA,2BAAa,GAAE,CAAC;YAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC9B,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;aACtC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACrG,yDAAyD;QACzD,6DAA6D;QAC7D,0DAA0D;QAC1D,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,WAAE,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC,iBAAiB,CAAC;YACnD,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,IAAA,sBAAW,EACf;gBACE,WAAW,EAAE,eAAe;gBAC5B,IAAI,EAAE,eAAe;gBACrB,KAAK,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE;aACvC,EACD,EAAE,CACH,CAAC;YACF,MAAM,MAAM,GAAG,IAAA,2BAAa,GAAE,CAAC;YAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC9B,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,YAAY;aACtB,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACnF,uDAAuD;QACvD,6DAA6D;QAC7D,2DAA2D;QAC3D,yDAAyD;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACnD,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC1B,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM;QACxC,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,IAAI,CAAC,IAAI,CAC5C,WAAW,EACX,OAAO,EACP,eAAe,CAChB,CAAC;QACF,MAAM,SAAS,GAAG,WAAE;aACjB,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;aAC9B,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAElC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,WAAE,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC,iBAAiB,CAAC;YACnD,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAW,EAC9B;gBACE,WAAW,EAAE,gBAAgB;gBAC7B,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,EAAE;aACtD,EACD,EAAE,CACH,CAAC;YACF,oCAAoC;YACpC,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,IAAA,eAAM,EAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACnE,uCAAuC;YACvC,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK;iBACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBACxB,IAAI,CAAC,EAAE,CAAC,CAAC;YACZ,IAAA,eAAM,EAAC,WAAW,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QAC/D,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;YACnB,sCAAsC;YACtC,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,WAAE,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC,iBAAiB,CAAC;YACnD,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,KAAK;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,IAAA,sBAAW,EACf;gBACE,WAAW,EAAE,cAAc;gBAC3B,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE;aACtC,EACD,EAAE,CACH,CAAC;YACF,IAAA,eAAM,EAAC,IAAA,2BAAa,GAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACpC,IAAA,eAAM,EAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,yDAAyD,EAAE,GAAG,EAAE;IACvE,IAAA,aAAI,EAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACxE,2DAA2D;QAC3D,IAAA,6BAAe,EAAC;YACd,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,GAAG,MAAM,KAAK;SACxB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,WAAE,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAW,EAC9B;gBACE,WAAW,EAAE,UAAU;gBACvB,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE;aAClD,EACD,EAAE,CACH,CAAC;YACF,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC;YACvD,IAAA,eAAM,EAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC/D,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACrC,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QAC3E,IAAA,6BAAe,EAAC;YACd,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,YAAY;SACtB,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,WAAE,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAW,EAC9B;gBACE,WAAW,EAAE,UAAU;gBACvB,IAAI,EAAE,eAAe;gBACrB,KAAK,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE;aACvC,EACD,EAAE,CACH,CAAC;YACF,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC7C,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACrC,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,mEAAmE;IACnE,mEAAmE;IACnE,gEAAgE;IAChE,6DAA6D;IAC7D,6CAA6C;IAE7C,IAAA,aAAI,EAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC/D,kEAAkE;QAClE,+BAA+B;QAC/B,IAAA,6BAAe,EAAC;YACd,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,WAAE,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC,iBAAiB,CAAC;YACnD,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,KAAK;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAW,EAC9B;gBACE,WAAW,EAAE,UAAU;gBACvB,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE;aACtC,EACD,EAAE,CACH,CAAC;YACF,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,IAAA,eAAM,EAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnD,2DAA2D;YAC3D,2CAA2C;YAC3C,IAAA,eAAM,EAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/display.d.ts

@@ -8,4 +8,23 @@ export declare function printTurnEnd(costUsd: number): void;
 export declare function printError(message: string): void;
 export declare function printSessionList(sessions: Session[]): void;
 export declare function printPrompt(): void;
+/**
+ * Render a single inline log line for a server-side tool invocation.
+ *
+ * SPRINT-CLI-APPROVAL-MENU-1 (#6509) PR3 — pre-#6509 the 15 tools in
+ * terminal_orchestrator/main.py's SERVER_TOOLS set executed silently
+ * from the user's perspective. This helper renders the
+ * `server_tool_call` WS event the orchestrator now emits before each
+ * server-side dispatch, matching the visual style of the existing
+ * client-tool inline logs in cli/src/tools.ts (`[read_file] /path
+ * (N lines)`, `[git_status]`, etc.).
+ *
+ * `inputSummary` is built server-side (see
+ * `terminal_orchestrator/main.py::_build_server_tool_input_summary`)
+ * — ≤120 chars, preferred-keys-per-tool, middle-truncated values,
+ * no newlines. Empty inputSummary (e.g. librarian_list_collections,
+ * which has no meaningful input to render) drops to just the
+ * `[server:<name>]` prefix.
+ */
+export declare function printServerToolCall(name: string, inputSummary: string): void;
 //# sourceMappingURL=display.d.ts.map

package/dist/display.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"display.d.ts","sourceRoot":"","sources":["../src/display.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,QAQjH;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,QAE1C;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,QAG3C;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,QAEzC;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,QAoBnD;AAED,wBAAgB,WAAW,SAE1B"}
+{"version":3,"file":"display.d.ts","sourceRoot":"","sources":["../src/display.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,QAQjH;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,QAE1C;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,QAG3C;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,QAEzC;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,QAoBnD;AAED,wBAAgB,WAAW,SAE1B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAG5E"}

package/dist/display.js

@@ -12,6 +12,7 @@ exports.printTurnEnd = printTurnEnd;
 exports.printError = printError;
 exports.printSessionList = printSessionList;
 exports.printPrompt = printPrompt;
+exports.printServerToolCall = printServerToolCall;
 const chalk_1 = __importDefault(require("chalk"));
 function printWelcome(sessionId, sessionName, resumed, messageCount) {
     const name = sessionName || sessionId.slice(0, 8);
@@ -55,4 +56,26 @@ function printSessionList(sessions) {
 function printPrompt() {
     process.stdout.write(chalk_1.default.bold("you: "));
 }
+/**
+ * Render a single inline log line for a server-side tool invocation.
+ *
+ * SPRINT-CLI-APPROVAL-MENU-1 (#6509) PR3 — pre-#6509 the 15 tools in
+ * terminal_orchestrator/main.py's SERVER_TOOLS set executed silently
+ * from the user's perspective. This helper renders the
+ * `server_tool_call` WS event the orchestrator now emits before each
+ * server-side dispatch, matching the visual style of the existing
+ * client-tool inline logs in cli/src/tools.ts (`[read_file] /path
+ * (N lines)`, `[git_status]`, etc.).
+ *
+ * `inputSummary` is built server-side (see
+ * `terminal_orchestrator/main.py::_build_server_tool_input_summary`)
+ * — ≤120 chars, preferred-keys-per-tool, middle-truncated values,
+ * no newlines. Empty inputSummary (e.g. librarian_list_collections,
+ * which has no meaningful input to render) drops to just the
+ * `[server:<name>]` prefix.
+ */
+function printServerToolCall(name, inputSummary) {
+    const tail = inputSummary ? ` ${inputSummary}` : "";
+    console.log(chalk_1.default.dim(`  [server:${name}]${tail}`));
+}
 //# sourceMappingURL=display.js.map

package/dist/display.js.map

@@ -1 +1 @@
-{"version":3,"file":"display.js","sourceRoot":"","sources":["../src/display.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;AAKH,oCAQC;AAED,wCAEC;AAED,oCAGC;AAED,gCAEC;AAED,4CAoBC;AAED,kCAEC;AAlDD,kDAA0B;AAG1B,SAAgB,YAAY,CAAC,SAAiB,EAAE,WAA0B,EAAE,OAAgB,EAAE,YAAoB;IAChH,MAAM,IAAI,GAAG,WAAW,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,KAAK,YAAY,kBAAkB,CAAC,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAgB,cAAc,CAAC,IAAY;IACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAgB,YAAY,CAAC,OAAe;IAC1C,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,SAAgB,UAAU,CAAC,OAAe;IACxC,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,YAAY,OAAO,IAAI,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,gBAAgB,CAAC,QAAmB;IAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,IAAI,eAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,eAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,aAAa,QAAQ,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,cAAc,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEzE,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,kBAAkB,UAAU,EAAE,CAAC,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAgB,WAAW;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"display.js","sourceRoot":"","sources":["../src/display.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;AAKH,oCAQC;AAED,wCAEC;AAED,oCAGC;AAED,gCAEC;AAED,4CAoBC;AAED,kCAEC;AAoBD,kDAGC;AAzED,kDAA0B;AAG1B,SAAgB,YAAY,CAAC,SAAiB,EAAE,WAA0B,EAAE,OAAgB,EAAE,YAAoB;IAChH,MAAM,IAAI,GAAG,WAAW,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,KAAK,YAAY,kBAAkB,CAAC,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAgB,cAAc,CAAC,IAAY;IACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAgB,YAAY,CAAC,OAAe;IAC1C,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,SAAgB,UAAU,CAAC,OAAe;IACxC,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,YAAY,OAAO,IAAI,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,gBAAgB,CAAC,QAAmB;IAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,IAAI,eAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,eAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,aAAa,QAAQ,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,cAAc,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEzE,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,kBAAkB,UAAU,EAAE,CAAC,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAgB,WAAW;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,mBAAmB,CAAC,IAAY,EAAE,YAAoB;IACpE,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC"}

package/dist/settings.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Per-user CLI settings + approval allowlist.
+ *
+ * SPRINT-CLI-APPROVAL-MENU-1 (#6509) PR2.
+ *
+ * Backs the option-2 "Run and don't ask again" path of
+ * `promptApprovalMenu`. Allowlist is persisted to
+ * `~/.xiaotime/settings.json` (mode 0600) and consulted before every
+ * `executeTool` invocation of the three prompting client-side tools
+ * (`shell_command` / `write_file` / `git_commit`). A match short-
+ * circuits the menu entirely; the inline log line gets an
+ * ` (auto-approved)` suffix so the user can still see what ran.
+ *
+ * Schema is `version: 1`; missing/malformed/unknown-version files
+ * fall back to an empty allowlist (with a stderr warning for
+ * malformed/unknown cases) — never crash the CLI on corrupted local
+ * config (ISC-6509-007).
+ *
+ * Pattern derivation differs per tool (see D2 in the sprint spec):
+ *   - shell_command: argv[0] + leading flags + first subcommand
+ *     token. `npm install --no-save lodash` → "npm install".
+ *     Multi-level subcommand grammars (gh issue list) collapse to
+ *     the first 2 tokens; users can hand-edit settings.json for
+ *     finer-grained patterns.
+ *   - write_file: `dirname(path) + "/**"`. Glob-matched against
+ *     subsequent write_file invocations so allowlisting a write to
+ *     `/repo/foo.ts` covers `/repo/bar.ts`.
+ *   - git_commit: literal `"*"` — allowlisting one commit
+ *     allowlists all future commits (the commit message + staged
+ *     files vary by definition; there's no meaningful pattern
+ *     parameter to narrow on).
+ *
+ * Distinct from `terminal_orchestrator/task_manager.py:57`'s
+ * server-side allowlist (EXACT-NAME on argv[0] basename, binary `gh`
+ * only). That's a security perimeter for `task_create`'s long-running
+ * managed-task envelope; this is a UX gate for client-side tool
+ * approvals. Two allowlists, two audiences, two update cadences.
+ */
+export type AllowlistTool = "shell_command" | "write_file" | "git_commit";
+export interface AllowlistEntry {
+    tool: AllowlistTool;
+    pattern: string;
+    added_at: string;
+}
+/**
+ * Settings-file location. Resolved lazily per call so the
+ * `XIAOTIME_SETTINGS_PATH` env-var override can redirect (used by
+ * tests to avoid touching the real `~/.xiaotime/settings.json`).
+ * Default: `~/.xiaotime/settings.json`.
+ */
+export declare function _settingsPath(): string;
+/**
+ * Read the allowlist from disk. Returns [] for any of:
+ *   - file missing (first run; not an error)
+ *   - file unreadable (permissions; logged + treated as empty)
+ *   - malformed JSON (logged + treated as empty)
+ *   - unknown schema version (logged + treated as empty)
+ *   - shape doesn't match SettingsV1 (silently treated as empty)
+ *
+ * Never throws. The CLI must remain usable when the user has a
+ * corrupted local config (ISC-6509-007).
+ */
+export declare function loadAllowlist(): AllowlistEntry[];
+/**
+ * Append a new entry to the allowlist + persist. Creates
+ * ~/.xiaotime/ with mode 0700 if it doesn't exist; writes
+ * settings.json with mode 0600. Idempotent on duplicate
+ * (tool, pattern) — duplicate appends are silently dropped.
+ */
+export declare function appendAllowlist(entry: {
+    tool: AllowlistTool;
+    pattern: string;
+}): void;
+/**
+ * Derive the allowlist pattern for a tool invocation. Returns null
+ * if the input shape is unusable (empty command, missing path). The
+ * pattern is used both at write time (option-2 selection persists
+ * `derivePattern(tool, input)`) and at read time (the next call's
+ * derived pattern feeds `matchAllowlist`).
+ *
+ * Per D2 in the sprint spec, derivation is coarse on purpose. For
+ * shell_command, the v1 rule captures argv[0] + leading flags + at
+ * most one subcommand token. Multi-level grammars (gh issue list,
+ * git remote add) collapse to 2-token prefixes; users who want finer
+ * patterns can hand-edit settings.json. For write_file, the directory
+ * the file lives in is allowlisted (`/**` suffix); writes deeper in
+ * the tree match. For git_commit, the literal `"*"` allowlists all
+ * future commits.
+ */
+export declare function derivePattern(tool: AllowlistTool, input: Record<string, unknown>): string | null;
+/**
+ * Check whether a tool invocation matches any entry in the
+ * allowlist. Matching semantics differ per tool:
+ *   - shell_command: exact equality between derived pattern and
+ *     stored pattern (`npm install` matches only `npm install`,
+ *     not `npm install lodash` directly — but the derived pattern
+ *     for `npm install lodash` IS `npm install`, so it matches.)
+ *   - write_file: glob-match the incoming path against each
+ *     `write_file` entry's stored glob.
+ *   - git_commit: any `git_commit` entry matches (stored pattern
+ *     is `"*"`).
+ *
+ * The cross-tool isolation invariant (PR3 ISC-spec): an entry with
+ * `tool === "shell_command"` can never authorize a `write_file` call
+ * even if patterns coincidentally match — the tool field is checked
+ * first.
+ */
+export declare function matchAllowlist(tool: AllowlistTool, input: Record<string, unknown>, allowlist: AllowlistEntry[]): AllowlistEntry | null;
+//# sourceMappingURL=settings.d.ts.map

package/dist/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAMH,MAAM,MAAM,aAAa,GAAG,eAAe,GAAG,YAAY,GAAG,YAAY,CAAC;AAQ1E,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AASD;;;;;GAKG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAKtC;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,IAAI,cAAc,EAAE,CAoChD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC9C,IAAI,CAwCN;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,GAAG,IAAI,CA+Cf;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,SAAS,EAAE,cAAc,EAAE,GAC1B,cAAc,GAAG,IAAI,CAsBvB"}