@agentdeck/shared 1.1.0 → 1.2.1

package/dist/action-fold.d.ts

@@ -0,0 +1,71 @@
+/**
+ * action-fold.ts — the SINGLE source of truth for folding a task's tool
+ * activity into one summary line: `Edit×9 Read×24 Bash×11 +2 · 3 files`.
+ *
+ * A task detail used to enumerate turns and steps; a list row has no room for
+ * that, and a bare total ("44 tools") says nothing about the SHAPE of the
+ * work. The fold is a pure projection over per-tool counts the store already
+ * holds (sample_events kind='tool' grouped by tool_name) — no schema change,
+ * no new collection.
+ *
+ * Consumers (keep in the same commit):
+ *   - GET /apme/tasks response `actionFold` field (bridge/src/apme/http.ts)
+ */
+export interface ActionFoldInput {
+    /** Per-tool call counts, any order. Names are the raw tool names the agent
+     *  reported (`Read`, `Bash`, `mcp__server__tool`). */
+    tools: ReadonlyArray<{
+        name: string;
+        count: number;
+    }>;
+    /** Distinct files the task touched (modified + created), when known. */
+    filesTouched?: number | null;
+}
+/** How many named tools the fold shows before collapsing the rest to `+N`.
+ *  Four keeps the line inside one row beside its chips at the dashboard's
+ *  default width. */
+export declare const ACTION_FOLD_MAX_TOOLS = 4;
+/** `mcp__claude-in-chrome__navigate` → `navigate`: the server prefix is
+ *  provenance, not shape, and at row width it would crowd out every other
+ *  tool. Non-MCP names pass through unchanged. */
+export declare function foldToolName(name: string): string;
+/** Tool names that DISPATCH another agent (fan-out). Measured on the real
+ *  store 2026-08-28: `Agent` (Claude Code subagent tool, 126 calls), `Task`
+ *  (its pre-rename spelling), `task` (OpenCode's), `Workflow` (multi-agent
+ *  orchestration — counted as ONE dispatch per call even though it fans out
+ *  internally, because parent-side hooks see only the call). TaskCreate /
+ *  TaskUpdate and friends are todo bookkeeping, not dispatch. */
+export declare const DISPATCH_TOOL_NAMES: ReadonlySet<string>;
+/** Tool names that MESSAGE another agent (peer/teammate traffic). */
+export declare const MESSAGING_TOOL_NAMES: ReadonlySet<string>;
+export interface AgentCoordinationSummary {
+    /** Subagent/workflow dispatch calls in this task. */
+    dispatches: number;
+    /** Agent-to-agent messages sent from this task. */
+    messages: number;
+}
+/**
+ * Count the coordination shape of a task from its per-tool counts: how often
+ * it fanned out to other agents and how often it messaged them. Returns null
+ * when the task did neither, so a plain single-agent task renders no
+ * coordination chip at all. Matches on RAW tool names (before `foldToolName`),
+ * since the dispatch/messaging sets are exact names, not display shapes.
+ */
+export declare function agentCoordinationSummary(tools: ReadonlyArray<{
+    name: string;
+    count: number;
+}>): AgentCoordinationSummary | null;
+/**
+ * Fold tool counts into the summary line. Returns null when there is nothing
+ * to say (no tools and no files) — callers render nothing rather than an
+ * empty string, matching the retain-on-absent display rules elsewhere.
+ *
+ * Determinism: ties sort by name so the same task always folds to the same
+ * line (renderer output is used as identity in dedup paths — see the
+ * session-slot renderer rule in CLAUDE.md). The tie-break is a plain
+ * code-unit compare, NOT localeCompare: localeCompare's order depends on the
+ * host locale (and case-folds, so `Bash` vs `apply` flips), which both breaks
+ * determinism across machines and cannot be mirrored by Swift's `<`.
+ */
+export declare function foldActionCounts(input: ActionFoldInput): string | null;
+//# sourceMappingURL=action-fold.d.ts.map

package/dist/action-fold.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-fold.d.ts","sourceRoot":"","sources":["../src/action-fold.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,eAAe;IAC9B;0DACsD;IACtD,KAAK,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;qBAEqB;AACrB,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC;;kDAEkD;AAClD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKjD;AAED;;;;;iEAKiE;AACjE,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAkD,CAAC;AAEvG,qEAAqE;AACrE,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAA4B,CAAC;AAElF,MAAM,WAAW,wBAAwB;IACvC,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GACpD,wBAAwB,GAAG,IAAI,CAUjC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAkBtE"}

package/dist/action-fold.js

@@ -0,0 +1,93 @@
+/**
+ * action-fold.ts — the SINGLE source of truth for folding a task's tool
+ * activity into one summary line: `Edit×9 Read×24 Bash×11 +2 · 3 files`.
+ *
+ * A task detail used to enumerate turns and steps; a list row has no room for
+ * that, and a bare total ("44 tools") says nothing about the SHAPE of the
+ * work. The fold is a pure projection over per-tool counts the store already
+ * holds (sample_events kind='tool' grouped by tool_name) — no schema change,
+ * no new collection.
+ *
+ * Consumers (keep in the same commit):
+ *   - GET /apme/tasks response `actionFold` field (bridge/src/apme/http.ts)
+ */
+/** How many named tools the fold shows before collapsing the rest to `+N`.
+ *  Four keeps the line inside one row beside its chips at the dashboard's
+ *  default width. */
+export const ACTION_FOLD_MAX_TOOLS = 4;
+/** `mcp__claude-in-chrome__navigate` → `navigate`: the server prefix is
+ *  provenance, not shape, and at row width it would crowd out every other
+ *  tool. Non-MCP names pass through unchanged. */
+export function foldToolName(name) {
+    const trimmed = name.trim();
+    if (!trimmed.toLowerCase().startsWith('mcp__'))
+        return trimmed;
+    const segments = trimmed.split('__').filter((s) => s.length > 0);
+    return segments.length > 0 ? segments[segments.length - 1] : trimmed;
+}
+/** Tool names that DISPATCH another agent (fan-out). Measured on the real
+ *  store 2026-08-28: `Agent` (Claude Code subagent tool, 126 calls), `Task`
+ *  (its pre-rename spelling), `task` (OpenCode's), `Workflow` (multi-agent
+ *  orchestration — counted as ONE dispatch per call even though it fans out
+ *  internally, because parent-side hooks see only the call). TaskCreate /
+ *  TaskUpdate and friends are todo bookkeeping, not dispatch. */
+export const DISPATCH_TOOL_NAMES = new Set(['Agent', 'Task', 'task', 'Workflow']);
+/** Tool names that MESSAGE another agent (peer/teammate traffic). */
+export const MESSAGING_TOOL_NAMES = new Set(['SendMessage']);
+/**
+ * Count the coordination shape of a task from its per-tool counts: how often
+ * it fanned out to other agents and how often it messaged them. Returns null
+ * when the task did neither, so a plain single-agent task renders no
+ * coordination chip at all. Matches on RAW tool names (before `foldToolName`),
+ * since the dispatch/messaging sets are exact names, not display shapes.
+ */
+export function agentCoordinationSummary(tools) {
+    let dispatches = 0;
+    let messages = 0;
+    for (const t of tools) {
+        if (!(t.count > 0))
+            continue;
+        if (DISPATCH_TOOL_NAMES.has(t.name.trim()))
+            dispatches += t.count;
+        if (MESSAGING_TOOL_NAMES.has(t.name.trim()))
+            messages += t.count;
+    }
+    if (dispatches === 0 && messages === 0)
+        return null;
+    return { dispatches, messages };
+}
+/**
+ * Fold tool counts into the summary line. Returns null when there is nothing
+ * to say (no tools and no files) — callers render nothing rather than an
+ * empty string, matching the retain-on-absent display rules elsewhere.
+ *
+ * Determinism: ties sort by name so the same task always folds to the same
+ * line (renderer output is used as identity in dedup paths — see the
+ * session-slot renderer rule in CLAUDE.md). The tie-break is a plain
+ * code-unit compare, NOT localeCompare: localeCompare's order depends on the
+ * host locale (and case-folds, so `Bash` vs `apply` flips), which both breaks
+ * determinism across machines and cannot be mirrored by Swift's `<`.
+ */
+export function foldActionCounts(input) {
+    const merged = new Map();
+    for (const t of input.tools) {
+        const name = foldToolName(t.name);
+        if (!name || !(t.count > 0))
+            continue;
+        merged.set(name, (merged.get(name) ?? 0) + t.count);
+    }
+    const sorted = [...merged.entries()].sort((a, b) => (b[1] - a[1]) || (a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0));
+    const parts = [];
+    if (sorted.length > 0) {
+        const shown = sorted.slice(0, ACTION_FOLD_MAX_TOOLS);
+        const rest = sorted.length - shown.length;
+        parts.push(shown.map(([name, count]) => `${name}×${count}`).join(' ') + (rest > 0 ? ` +${rest}` : ''));
+    }
+    const files = input.filesTouched ?? 0;
+    if (files > 0)
+        parts.push(`${files} file${files === 1 ? '' : 's'}`);
+    if (parts.length === 0)
+        return null;
+    return parts.join(' · ');
+}
+//# sourceMappingURL=action-fold.js.map

package/dist/action-fold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-fold.js","sourceRoot":"","sources":["../src/action-fold.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH;;qBAEqB;AACrB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEvC;;kDAEkD;AAClD,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC/D,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED;;;;;iEAKiE;AACjE,MAAM,CAAC,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAEvG,qEAAqE;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;AASlF;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAqD;IAErD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;YAAE,SAAS;QAC7B,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAAE,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC;QAClE,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAAE,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC;IACnE,CAAC;IACD,IAAI,UAAU,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAsB;IACrD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;YAAE,SAAS;QACtC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/G,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;IACtC,IAAI,KAAK,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC"}

package/dist/apme-graph.d.ts

@@ -18,7 +18,8 @@
  *     session held 127 runs). Now `runs.parent_run_id`.
  *
  * What is still denormalized, and is therefore DERIVED here rather than read:
- * session, project, model, agent, tool and file are string columns, not rows.
+ * session, project, model, agent, tool, subagent and file are string/payload
+ * identities, not rows.
  * They are exactly the interesting hubs — they connect work units that share no
  * ancestor — so this projection materializes them as nodes. That is a deliberate
  * choice: they are cheap to derive, they change meaning as the schema evolves,
@@ -33,7 +34,7 @@
  * can be reshaped without a migration.
  */
 /** Node kinds. Containment nodes mirror rows; entity nodes are derived hubs. */
-export type ApmeGraphNodeKind = 'run' | 'task' | 'turn' | 'session' | 'project' | 'model' | 'agent' | 'tool' | 'file';
+export type ApmeGraphNodeKind = 'run' | 'task' | 'turn' | 'session' | 'project' | 'model' | 'agent' | 'tool' | 'subagent' | 'file';
 export type ApmeGraphEdgeKind = 
 /** Containment: run→task, task→turn. */
 'contains'
@@ -43,6 +44,8 @@ export type ApmeGraphEdgeKind =
  | 'produced'
 /** turn→tool, task→tool — the turn invoked this tool. */
  | 'used'
+/** task/turn→subagent — the parent delegated part of this work. */
+ | 'delegated'
 /** turn→file, task→file — the turn read or wrote this path. */
  | 'touched';
 export interface ApmeGraphNode {
@@ -97,6 +100,7 @@ export declare const apmeGraphNodeId: {
     readonly model: (id: string) => string;
     readonly agent: (t: string) => string;
     readonly tool: (name: string) => string;
+    readonly subagent: (id: string) => string;
     readonly file: (path: string) => string;
 };
 //# sourceMappingURL=apme-graph.d.ts.map

package/dist/apme-graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apme-graph.d.ts","sourceRoot":"","sources":["../src/apme-graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GAEzB,KAAK,GACL,MAAM,GACN,MAAM,GAEN,SAAS,GACT,SAAS,GACT,OAAO,GACP,OAAO,GACP,MAAM,GACN,MAAM,CAAC;AAEX,MAAM,MAAM,iBAAiB;AAC3B,wCAAwC;AACtC,UAAU;AACZ,iEAAiE;GAC/D,WAAW;AACb,sDAAsD;GACpD,UAAU;AACZ,yDAAyD;GACvD,MAAM;AACR,+DAA+D;GAC7D,SAAS,CAAC;AAEd,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,iBAAiB,CAAC;IACxB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB;2DACuD;IACvD,KAAK,EAAE;QACL,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,0EAA0E;QAC1E,cAAc,EAAE,MAAM,CAAC;QACvB,qEAAqE;QACrE,YAAY,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;KACxD,CAAC;CACH;AAED,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,yEAAyE;AACzE,eAAO,MAAM,eAAe;uBAChB,MAAM;wBACL,MAAM;wBACN,MAAM;2BACH,MAAM;6BACJ,MAAM;yBACV,MAAM;wBACP,MAAM;0BACJ,MAAM;0BACN,MAAM;CACX,CAAC"}
+{"version":3,"file":"apme-graph.d.ts","sourceRoot":"","sources":["../src/apme-graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GAEzB,KAAK,GACL,MAAM,GACN,MAAM,GAEN,SAAS,GACT,SAAS,GACT,OAAO,GACP,OAAO,GACP,MAAM,GACN,UAAU,GACV,MAAM,CAAC;AAEX,MAAM,MAAM,iBAAiB;AAC3B,wCAAwC;AACtC,UAAU;AACZ,iEAAiE;GAC/D,WAAW;AACb,sDAAsD;GACpD,UAAU;AACZ,yDAAyD;GACvD,MAAM;AACR,mEAAmE;GACjE,WAAW;AACb,+DAA+D;GAC7D,SAAS,CAAC;AAEd,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,iBAAiB,CAAC;IACxB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB;2DACuD;IACvD,KAAK,EAAE;QACL,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,0EAA0E;QAC1E,cAAc,EAAE,MAAM,CAAC;QACvB,qEAAqE;QACrE,YAAY,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;KACxD,CAAC;CACH;AAED,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,yEAAyE;AACzE,eAAO,MAAM,eAAe;uBAChB,MAAM;wBACL,MAAM;wBACN,MAAM;2BACH,MAAM;6BACJ,MAAM;yBACV,MAAM;wBACP,MAAM;0BACJ,MAAM;4BACJ,MAAM;0BACR,MAAM;CACX,CAAC"}

package/dist/apme-graph.js

@@ -18,7 +18,8 @@
  *     session held 127 runs). Now `runs.parent_run_id`.
  *
  * What is still denormalized, and is therefore DERIVED here rather than read:
- * session, project, model, agent, tool and file are string columns, not rows.
+ * session, project, model, agent, tool, subagent and file are string/payload
+ * identities, not rows.
  * They are exactly the interesting hubs — they connect work units that share no
  * ancestor — so this projection materializes them as nodes. That is a deliberate
  * choice: they are cheap to derive, they change meaning as the schema evolves,
@@ -42,6 +43,7 @@ export const apmeGraphNodeId = {
     model: (id) => `model:${id}`,
     agent: (t) => `agent:${t}`,
     tool: (name) => `tool:${name}`,
+    subagent: (id) => `subagent:${id}`,
     file: (path) => `file:${path}`,
 };
 //# sourceMappingURL=apme-graph.js.map

package/dist/apme-graph.js.map

@@ -1 +1 @@
-{"version":3,"file":"apme-graph.js","sourceRoot":"","sources":["../src/apme-graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAuEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,GAAG,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE;IAChC,IAAI,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE;IAClC,IAAI,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE;IAClC,OAAO,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE;IACxC,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,WAAW,IAAI,EAAE;IAC5C,KAAK,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,SAAS,EAAE,EAAE;IACpC,KAAK,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE;IAClC,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE;IACtC,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE;CAC9B,CAAC"}
+{"version":3,"file":"apme-graph.js","sourceRoot":"","sources":["../src/apme-graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AA0EH,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,GAAG,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE;IAChC,IAAI,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE;IAClC,IAAI,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE;IAClC,OAAO,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE;IACxC,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,WAAW,IAAI,EAAE;IAC5C,KAAK,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,SAAS,EAAE,EAAE;IACpC,KAAK,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE;IAClC,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE;IACtC,QAAQ,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,YAAY,EAAE,EAAE;IAC1C,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE;CAC9B,CAAC"}

package/dist/claude-permission-rules.d.ts

@@ -0,0 +1,181 @@
+/**
+ * Claude Code permission prediction — the single source of truth for "would
+ * Claude Code actually prompt the user for this tool call?".
+ *
+ * Both daemons hold an observed session's PreToolUse for a device decision
+ * ONLY when this module predicts a genuine prompt. A false hold costs the user
+ * twice: the deck shows PERM for a decision Claude never asked for, and the
+ * hook response is held for the whole timeout (25 s) before Claude's own
+ * allow rule lets the call through. Measured 2026-09-05: two `acceptEdits`
+ * worker sessions whose every `curl`/`mkdir` was allowlisted by
+ * `Bash(curl *)` / `Bash(mkdir *)` were held on every batch, because the
+ * predictor understood only the legacy `Bash(curl:*)` spelling — 67 of the
+ * 73 Bash rules in the user's settings were in the space form and matched
+ * nothing. The Swift daemon carried the same defect as a hand mirror, which
+ * is why the matcher now lives here and is GENERATED into Swift
+ * (`pnpm generate-claude-permission-rules`), with behavior pinned by
+ * `shared/claude-permission-vectors.json` that both suites replay.
+ *
+ * Rule semantics follow the Claude Code permissions reference
+ * (https://code.claude.com/docs/en/permissions):
+ *   - `Bash`, `Bash(*)`        → every Bash call
+ *   - `Bash(npm run build)`    → the exact command
+ *   - `Bash(npm run *)`        → `*` matches any text INCLUDING spaces; a rule
+ *                                whose only wildcard is a trailing ` *` also
+ *                                matches the bare command (`ls *` ⇒ `ls`)
+ *   - `Bash(ls:*)`             → legacy end-only spelling; the docs now define
+ *                                it as `Bash(ls *)`, older builds read it as a
+ *                                raw prefix (`npm run test:*` ⇒ `npm run
+ *                                test:watch`), so it matches under EITHER —
+ *                                over-matching only ever costs a missed hold
+ *   - `Bash(git * main)`       → wildcards anywhere
+ *   - compound commands split on `&&` `||` `;` `|` `|&` `&` and newlines, and
+ *     EVERY subcommand must be covered for Claude to skip the prompt
+ *   - a built-in read-only set (`ls`, `cat`, `git status`, …) never prompts in
+ *     any mode, and `acceptEdits` additionally auto-approves the filesystem
+ *     commands `mkdir touch rm rmdir mv cp sed`
+ *   - `timeout`/`nice`/`nohup`/… wrappers and leading `VAR=value` assignments
+ *     are stripped before matching
+ *
+ * Every uncertainty resolves toward "don't hold": a missed hold means the user
+ * answers in the terminal exactly as before, while a false hold nags them with
+ * a prompt Claude never showed and stalls the agent for the hold timeout.
+ */
+/** Values Claude Code writes into a hook payload's `permission_mode`. */
+export declare const CLAUDE_PERMISSION_MODES: readonly ["default", "acceptEdits", "plan", "auto", "dontAsk", "bypassPermissions"];
+export type ClaudePermissionMode = typeof CLAUDE_PERMISSION_MODES[number];
+/** Tools that never trigger a permission prompt — holding them can only ever
+ *  be a false positive. Kept intentionally tight (unknown tools are excluded
+ *  by the prompt-prone check, not this list). */
+export declare const NEVER_PROMPT_TOOLS: ReadonlySet<string>;
+/** Tools that DO prompt in default/acceptEdits mode unless allowlisted.
+ *  Anything outside this set (including every mcp__* tool, whose per-server
+ *  trust state we cannot see) is never held. */
+export declare const PROMPT_PRONE_TOOLS: ReadonlySet<string>;
+/** Edit-family tools that Claude auto-approves in `acceptEdits` mode. */
+export declare const EDIT_FAMILY_TOOLS: ReadonlySet<string>;
+/**
+ * Should the daemon consider HOLDING a PreToolUse at all, given the session's
+ * `permission_mode`? Claude's PreToolUse hook fires for EVERY tool call
+ * regardless of mode, so gate only in modes where Claude could still surface
+ * its own prompt.
+ *
+ *  - `bypassPermissions` / `dontAsk` → never prompts                → no
+ *  - `auto`   → the classifier decides outside the settings files; the rule
+ *               predictor cannot see it, so every unlisted call would
+ *               false-hold. The rare genuine prompt still arrives as a
+ *               Notification `permission_prompt`                    → no
+ *  - `plan`   → tools don't execute (classifier or read-only only)  → no
+ *  - `acceptEdits` → edits + filesystem commands auto-approved, other
+ *               Bash still prompts                                  → non-edit tools
+ *  - `default` / unknown → Claude may prompt                        → yes
+ *
+ * Unknown/absent mode is treated as `default` to preserve behavior on older
+ * Claude versions that don't send the field.
+ */
+export declare function shouldGatePreToolUse(permissionMode: string | undefined, tool: string): boolean;
+/** Bash programs Claude Code runs without a prompt in every mode (the
+ *  documented built-in read-only set plus its obviously read-only kin). Being
+ *  generous here is the SAFE direction: an entry that Claude actually prompts
+ *  for costs a missed hold, never a false one. */
+export declare const READ_ONLY_BASH_COMMANDS: readonly string[];
+/** `git <subcommand>` forms that are read-only regardless of arguments. */
+export declare const READ_ONLY_GIT_SUBCOMMANDS: readonly string[];
+/** `git <subcommand>` forms that are read-only only when they carry no
+ *  arguments or only these flags (`git branch` lists; `git branch x` writes). */
+export declare const READ_ONLY_GIT_LISTING_SUBCOMMANDS: Readonly<Record<string, readonly string[]>>;
+/** Filesystem commands `acceptEdits` mode auto-approves (in-scope paths). */
+export declare const ACCEPT_EDITS_FS_COMMANDS: readonly string[];
+/** Strip leading `VAR=value` assignments and process wrappers so `LANG=C
+ *  timeout 30 npm test` is matched as `npm test`. Returns the stripped
+ *  command text (tokens re-joined by single spaces). */
+export declare function stripCommandWrappers(segment: string): string;
+/**
+ * Split a compound command on shell operators, quote-aware. Returns `null`
+ * when the split is not trustworthy — a heredoc, command substitution, an
+ * unbalanced quote, or an operator with nothing after it — in which case
+ * Claude Code itself does not split either.
+ */
+export declare function splitCompoundCommand(command: string): string[] | null;
+/**
+ * Does one Bash rule spec match one command text? Implements the documented
+ * wildcard rules: `*` matches any text including spaces; a trailing ` *` that
+ * is the rule's only wildcard also matches the bare command; the legacy `:*`
+ * suffix is an alias for ` *`; no wildcard means exact match.
+ */
+export declare function bashRuleMatches(spec: string, command: string): boolean;
+/** `*`-only glob over code points. Iterative two-pointer form so a rule with
+ *  several wildcards cannot go exponential on a long command. */
+export declare function globMatch(pattern: string, text: string): boolean;
+export interface ParsedPermissionRule {
+    tool: string;
+    spec?: string;
+}
+/** `Tool` or `Tool(spec)` → parts; anything else → null. */
+export declare function parsePermissionRule(rule: string): ParsedPermissionRule | null;
+/** Rules merged from every settings file Claude reads for a cwd. `null`
+ *  ("unknown") when any existing file failed to parse — the daemon can no
+ *  longer trust its picture of the allowlist and must hold nothing. */
+export interface MergedPermissionRules {
+    allow: string[];
+    deny: string[];
+    ask: string[];
+}
+/** Loose match (allow/deny direction): a tool-name match with ANY spec counts
+ *  for tools whose spec grammar we do not replicate (paths, domains); Bash
+ *  specs are compared precisely against the (wrapper-stripped) segment. */
+export declare function ruleMatchesLoose(rule: ParsedPermissionRule, tool: string, segment: string | undefined): boolean;
+/** Strict match (ask direction): only patterns we can evaluate exactly, since
+ *  an ask match CAUSES a hold. */
+export declare function ruleMatchesStrict(rule: ParsedPermissionRule, tool: string, segment: string | undefined): boolean;
+/**
+ * Is this one (already split) segment in Claude Code's built-in read-only set,
+ * so it runs without a prompt in every mode?
+ */
+export declare function isBuiltinReadOnlyCommand(segment: string): boolean;
+/** Is this segment one of the filesystem commands `acceptEdits` auto-approves? */
+export declare function isAcceptEditsFsCommand(segment: string): boolean;
+export type PermissionRuleVerdict = 'allow' | 'deny' | 'ask' | 'none' | 'unknown';
+/**
+ * Predict Claude's permission-RULE verdict for one tool call (rules only; the
+ * mode and built-in sets are applied by `predictPreToolUseHold`).
+ *   'deny'    → a deny rule may match: Claude auto-denies — don't hold
+ *   'allow'   → allow rules cover every subcommand — don't hold
+ *   'ask'     → an ask rule definitely matches — hold-eligible
+ *   'none'    → no rule decides — default behavior for the tool applies
+ *   'unknown' → settings unreadable — don't hold
+ */
+export declare function evaluatePermissionRules(tool: string, command: string | undefined, rules: MergedPermissionRules | null, opts?: {
+    permissionMode?: string;
+}): PermissionRuleVerdict;
+export interface PreToolUseHoldInput {
+    tool: string;
+    toolInput?: Record<string, unknown> | undefined;
+    permissionMode?: string | undefined;
+    /** Merged rules, or `null` when unreadable. */
+    rules: MergedPermissionRules | null;
+}
+export interface PreToolUseHoldPrediction {
+    hold: boolean;
+    reason: string;
+}
+/**
+ * The stateless half of the device-approval gate: given the tool, its input,
+ * the session's mode and the merged rules, would Claude Code genuinely prompt?
+ * The daemons layer session state on top (connected clients, one held gate
+ * per session, learned auto-approvals).
+ */
+export declare function predictPreToolUseHold(input: PreToolUseHoldInput): PreToolUseHoldPrediction;
+/** Bash signature = first two command tokens (the granularity of Claude's own
+ *  "always allow `git push`"-style session approvals); other tools = tool name. */
+export declare function gateSignature(tool: string, toolInput: Record<string, unknown> | undefined): string;
+/**
+ * How long after an undecided gate release a PostToolUse still teaches the
+ * daemon "Claude auto-approved this signature". A `permission_prompt`
+ * Notification in between clears the pending release, so the window bounds
+ * only how long a slow TOOL may take — it was 8 s, and a `curl` fetching a
+ * web page routinely exceeds that, so the same `curl -sL` signature was held
+ * on every batch of one session (measured 2026-09-05).
+ */
+export declare const GATE_LEARN_WINDOW_MS: number;
+//# sourceMappingURL=claude-permission-rules.d.ts.map

package/dist/claude-permission-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-permission-rules.d.ts","sourceRoot":"","sources":["../src/claude-permission-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAIH,yEAAyE;AACzE,eAAO,MAAM,uBAAuB,qFAE1B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAE1E;;iDAEiD;AACjD,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAIjD,CAAC;AAEH;;gDAEgD;AAChD,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAEjD,CAAC;AAEH,yEAAyE;AACzE,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAEhD,CAAC;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAY9F;AAID;;;kDAGkD;AAClD,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAKpD,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAItD,CAAC;AAEF;iFACiF;AACjF,eAAO,MAAM,iCAAiC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAQzF,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAErD,CAAC;AAeF;;wDAEwD;AACxD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAiC5D;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAoDrE;AAID;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAatE;AAED;iEACiE;AACjE,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAyBhE;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,4DAA4D;AAC5D,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAI7E;AAED;;uEAEuE;AACvE,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AAED;;2EAE2E;AAC3E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAQ/G;AAED;kCACkC;AAClC,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKhH;AA2BD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAkBjE;AAED,kFAAkF;AAClF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG/D;AAID,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAElF;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,KAAK,EAAE,qBAAqB,GAAG,IAAI,EACnC,IAAI,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAO,GACrC,qBAAqB,CAmCvB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAChD,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,+CAA+C;IAC/C,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,mBAAmB,GAAG,wBAAwB,CAe1F;AAID;mFACmF;AACnF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,CAMlG;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,QAAc,CAAC"}