@ai-studio-3d/vyasa 0.1.0

package/dist/core/cursor/scan.js

@@ -0,0 +1,79 @@
+import { stat } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import Database from 'better-sqlite3';
+import { indexProgress } from '../index/progress.js';
+/**
+ * Cursor stores chat data in TWO places (current schema, late-2025/early-2026):
+ *
+ *  1. ~/Library/Application Support/Cursor/User/globalStorage/state.vscdb
+ *     • cursorDiskKV rows keyed `composerData:<id>` and `bubbleId:<composerId>:<bubbleId>`
+ *     • This is where the actual conversation data lives.
+ *
+ *  2. ~/Library/Application Support/Cursor/User/workspaceStorage/<hash>/state.vscdb
+ *     • workspace.json sibling holds the `folder` URI (project mapping)
+ *     • ItemTable['composer.composerData'] lists composer IDs for that workspace
+ *     • cursorDiskKV in workspace storage is empty in this version
+ *
+ * scan() returns one entry per composer using synthetic path encoding
+ * `<global-vscdb-path>#<composerId>`. The parser splits on '#' and queries
+ * the global DB for that one composer. mtime is the global vscdb mtime —
+ * coarse (any Cursor write marks all composers dirty) but acceptable: a single
+ * composer parses in milliseconds and the indexer's mtime-skip keeps unchanged
+ * sessions out of re-ingest.
+ *
+ * `rootDir` is the workspaceStorage directory (kept for API symmetry with
+ * other adapters); the global DB is resolved as its sibling at
+ * `../globalStorage/state.vscdb`.
+ */
+export async function scanCursorWorkspaces(rootDir) {
+    const results = [];
+    // Global storage path: sibling of workspaceStorage under User/
+    const userDir = dirname(rootDir);
+    const globalDbPath = join(userDir, 'globalStorage', 'state.vscdb');
+    if (!existsSync(globalDbPath)) {
+        return results;
+    }
+    let mtimeMs;
+    try {
+        const s = await stat(globalDbPath);
+        mtimeMs = s.mtimeMs;
+    }
+    catch {
+        return results;
+    }
+    // Read all composerData:<id> keys from the global DB
+    let composerIds = [];
+    try {
+        const db = new Database(globalDbPath, { readonly: true, fileMustExist: true });
+        try {
+            // Verify table exists
+            const tables = db
+                .prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='cursorDiskKV'")
+                .all();
+            if (tables.length === 0) {
+                db.close();
+                return results;
+            }
+            const rows = db
+                .prepare("SELECT key FROM cursorDiskKV WHERE key LIKE 'composerData:%'")
+                .all();
+            composerIds = rows.map((r) => r.key.slice('composerData:'.length));
+        }
+        finally {
+            db.close();
+        }
+    }
+    catch (err) {
+        console.error(`[vyasa] cursor scan failed for ${globalDbPath}:`, err);
+        indexProgress.recordError();
+        return results;
+    }
+    // List everything from global; the parser will skip empties. The
+    // workspaceStorage walk happens at parse-time for project-name mapping.
+    for (const composerId of composerIds) {
+        results.push({ path: `${globalDbPath}#${composerId}`, mtimeMs });
+    }
+    return results;
+}
+//# sourceMappingURL=scan.js.map

package/dist/core/cursor/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../../src/core/cursor/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAEpD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAe;IAEf,MAAM,OAAO,GAA6C,EAAE,CAAA;IAE5D,+DAA+D;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;IAElE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAA;QAClC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,qDAAqD;IACrD,IAAI,WAAW,GAAa,EAAE,CAAA;IAC9B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9E,IAAI,CAAC;YACH,sBAAsB;YACtB,MAAM,MAAM,GAAG,EAAE;iBACd,OAAO,CAAC,2EAA2E,CAAC;iBACpF,GAAG,EAA6B,CAAA;YACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,EAAE,CAAC,KAAK,EAAE,CAAA;gBACV,OAAO,OAAO,CAAA;YAChB,CAAC;YACD,MAAM,IAAI,GAAG,EAAE;iBACZ,OAAO,CAAC,8DAA8D,CAAC;iBACvE,GAAG,EAA4B,CAAA;YAClC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAA;QACpE,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAA;QACZ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,YAAY,GAAG,EAAE,GAAG,CAAC,CAAA;QACrE,aAAa,CAAC,WAAW,EAAE,CAAA;QAC3B,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,iEAAiE;IACjE,wEAAwE;IACxE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,YAAY,IAAI,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;IAClE,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/core/decisions/index.d.ts

@@ -0,0 +1,21 @@
+import type Database from 'better-sqlite3';
+import type { PlanEvent } from '../schema/index.js';
+/**
+ * Derive plan/decision events for one session from the messages it already has.
+ *
+ * Signals (all read from persisted data — no re-parsing of JSONL):
+ *  - plan_finalized   — an assistant ExitPlanMode tool_use (first occurrence)
+ *  - plan_reopened    — a later ExitPlanMode after a prior finalize (plan was re-entered + re-finalized)
+ *  - model_change     — the messages.model column changes between consecutive real assistant turns
+ *  - permission_change — the messages.permission_mode column changes between consecutive records
+ *                        that carry a mode (e.g. default → acceptEdits). The first observed mode
+ *                        sets the baseline and emits nothing (null → value boot is not a change).
+ *                        permission_mode is persisted only on user records; other roles store null
+ *                        and are skipped for this signal.
+ *
+ * tokensInSpan = input+output tokens accumulated from this event (inclusive of its own row)
+ * up to — but not including — the next event's row (or session end). Empty array is the
+ * common, correct result: only ~4% of sessions carry any of these signals.
+ */
+export declare function getDecisions(db: Database.Database, sessionId: string): PlanEvent[];
+//# sourceMappingURL=index.d.ts.map

package/dist/core/decisions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/decisions/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAiB,MAAM,oBAAoB,CAAA;AA6ClE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,CA4FlF"}

package/dist/core/decisions/index.js

@@ -0,0 +1,133 @@
+/** Synthetic assistant turns (stop/error placeholders) carry model '<synthetic>'.
+ *  They are not real model selections, so they must never trigger a model_change. */
+function isRealModel(m) {
+    return !!m && m !== '<synthetic>';
+}
+/** True if a stored assistant message envelope contains an ExitPlanMode tool_use.
+ *  content_json is JSON.stringify(message) → { ..., content: ContentBlock[] }. */
+function hasExitPlanMode(contentJson) {
+    // Cheap string pre-filter before paying for JSON.parse on every assistant row.
+    if (contentJson.indexOf('ExitPlanMode') === -1)
+        return false;
+    let parsed;
+    try {
+        parsed = JSON.parse(contentJson);
+    }
+    catch {
+        return false;
+    }
+    const content = parsed?.content;
+    if (!Array.isArray(content))
+        return false;
+    return content.some((b) => b && typeof b === 'object' &&
+        b.type === 'tool_use' &&
+        b.name === 'ExitPlanMode');
+}
+function shortModel(m) {
+    // claude-opus-4-7 → opus-4-7; leave bare aliases (sonnet, etc.) as-is.
+    return m.replace(/^claude-/, '');
+}
+/**
+ * Derive plan/decision events for one session from the messages it already has.
+ *
+ * Signals (all read from persisted data — no re-parsing of JSONL):
+ *  - plan_finalized   — an assistant ExitPlanMode tool_use (first occurrence)
+ *  - plan_reopened    — a later ExitPlanMode after a prior finalize (plan was re-entered + re-finalized)
+ *  - model_change     — the messages.model column changes between consecutive real assistant turns
+ *  - permission_change — the messages.permission_mode column changes between consecutive records
+ *                        that carry a mode (e.g. default → acceptEdits). The first observed mode
+ *                        sets the baseline and emits nothing (null → value boot is not a change).
+ *                        permission_mode is persisted only on user records; other roles store null
+ *                        and are skipped for this signal.
+ *
+ * tokensInSpan = input+output tokens accumulated from this event (inclusive of its own row)
+ * up to — but not including — the next event's row (or session end). Empty array is the
+ * common, correct result: only ~4% of sessions carry any of these signals.
+ */
+export function getDecisions(db, sessionId) {
+    // All roles, in idx order: assistant rows carry model/ExitPlanMode signals; user rows
+    // carry the persisted permission_mode. Token usage only ever joins on assistant rows.
+    const rows = db
+        .prepare(`SELECT m.idx        AS idx,
+              m.ts         AS ts,
+              m.role       AS role,
+              m.model      AS model,
+              m.permission_mode AS permission_mode,
+              m.content_json AS content_json,
+              u.input_tokens  AS input_tokens,
+              u.output_tokens AS output_tokens
+         FROM messages m
+         LEFT JOIN usage u ON u.message_id = m.id
+        WHERE m.session_id = ?
+        ORDER BY m.idx ASC`)
+        .all(sessionId);
+    if (rows.length === 0)
+        return [];
+    const events = [];
+    let lastRealModel = null;
+    let lastPermMode = null;
+    let seenFinalize = false;
+    for (const r of rows) {
+        // permission_change — fire only between two records that both carry a mode.
+        // The first observed mode sets the baseline (null → value boot emits nothing).
+        if (r.permission_mode) {
+            if (lastPermMode !== null && r.permission_mode !== lastPermMode) {
+                events.push({
+                    msgIdx: r.idx,
+                    ts: r.ts,
+                    kind: 'permission_change',
+                    detail: `${lastPermMode} → ${r.permission_mode}`,
+                    tokensInSpan: null,
+                });
+            }
+            lastPermMode = r.permission_mode;
+        }
+        if (r.role !== 'assistant')
+            continue;
+        // model_change — fire only between two real (non-synthetic) models.
+        if (isRealModel(r.model)) {
+            if (lastRealModel !== null && r.model !== lastRealModel) {
+                events.push({
+                    msgIdx: r.idx,
+                    ts: r.ts,
+                    kind: 'model_change',
+                    detail: `${shortModel(lastRealModel)} → ${shortModel(r.model)}`,
+                    tokensInSpan: null,
+                });
+            }
+            lastRealModel = r.model;
+        }
+        // plan_finalized / plan_reopened — an ExitPlanMode tool_use in this assistant turn.
+        if (hasExitPlanMode(r.content_json)) {
+            const kind = seenFinalize ? 'plan_reopened' : 'plan_finalized';
+            events.push({
+                msgIdx: r.idx,
+                ts: r.ts,
+                kind,
+                detail: seenFinalize ? 'plan revised' : 'plan accepted',
+                tokensInSpan: null,
+            });
+            seenFinalize = true;
+        }
+    }
+    if (events.length === 0)
+        return events;
+    // Order by msgIdx (model_change and an ExitPlanMode can land on the same row; stable enough).
+    events.sort((a, b) => a.msgIdx - b.msgIdx);
+    // tokensInSpan: walk the assistant rows once, bucketing token totals into the span that
+    // starts at each event. A row belongs to the most recent event whose msgIdx <= row.idx.
+    let cursor = 0;
+    for (const r of rows) {
+        // advance cursor to the last event that has started by this row
+        while (cursor + 1 < events.length && events[cursor + 1].msgIdx <= r.idx)
+            cursor++;
+        if (events[cursor].msgIdx > r.idx)
+            continue; // row precedes the first event — no span yet
+        const tok = (r.input_tokens ?? 0) + (r.output_tokens ?? 0);
+        if (tok > 0) {
+            events[cursor].tokensInSpan = (events[cursor].tokensInSpan ?? 0) + tok;
+        }
+    }
+    return events;
+}
+//# sourceMappingURL=index.js.map

package/dist/core/decisions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/decisions/index.ts"],"names":[],"mappings":"AAcA;qFACqF;AACrF,SAAS,WAAW,CAAC,CAAgB;IACnC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,aAAa,CAAA;AACnC,CAAC;AAED;kFACkF;AAClF,SAAS,eAAe,CAAC,WAAmB;IAC1C,+EAA+E;IAC/E,IAAI,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAC5D,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,OAAO,GAAI,MAAgC,EAAE,OAAO,CAAA;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,OAAO,OAAO,CAAC,IAAI,CACjB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QACzB,CAAuB,CAAC,IAAI,KAAK,UAAU;QAC3C,CAAuB,CAAC,IAAI,KAAK,cAAc,CACnD,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,uEAAuE;IACvE,OAAO,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;AAClC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,YAAY,CAAC,EAAqB,EAAE,SAAiB;IACnE,sFAAsF;IACtF,sFAAsF;IACtF,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN;;;;;;;;;;;2BAWqB,CACtB;SACA,GAAG,CAAC,SAAS,CAAU,CAAA;IAE1B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEhC,MAAM,MAAM,GAAgB,EAAE,CAAA;IAC9B,IAAI,aAAa,GAAkB,IAAI,CAAA;IACvC,IAAI,YAAY,GAAkB,IAAI,CAAA;IACtC,IAAI,YAAY,GAAG,KAAK,CAAA;IAExB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,4EAA4E;QAC5E,+EAA+E;QAC/E,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;YACtB,IAAI,YAAY,KAAK,IAAI,IAAI,CAAC,CAAC,eAAe,KAAK,YAAY,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC;oBACV,MAAM,EAAE,CAAC,CAAC,GAAG;oBACb,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,IAAI,EAAE,mBAAmB;oBACzB,MAAM,EAAE,GAAG,YAAY,MAAM,CAAC,CAAC,eAAe,EAAE;oBAChD,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAA;YACJ,CAAC;YACD,YAAY,GAAG,CAAC,CAAC,eAAe,CAAA;QAClC,CAAC;QAED,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;YAAE,SAAQ;QAEpC,oEAAoE;QACpE,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,aAAa,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CAAC;oBACV,MAAM,EAAE,CAAC,CAAC,GAAG;oBACb,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,IAAI,EAAE,cAAc;oBACpB,MAAM,EAAE,GAAG,UAAU,CAAC,aAAa,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;oBAC/D,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAA;YACJ,CAAC;YACD,aAAa,GAAG,CAAC,CAAC,KAAK,CAAA;QACzB,CAAC;QAED,oFAAoF;QACpF,IAAI,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,GAAkB,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAA;YAC7E,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM,EAAE,CAAC,CAAC,GAAG;gBACb,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI;gBACJ,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe;gBACvD,YAAY,EAAE,IAAI;aACnB,CAAC,CAAA;YACF,YAAY,GAAG,IAAI,CAAA;QACrB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAEtC,8FAA8F;IAC9F,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAA;IAE1C,wFAAwF;IACxF,wFAAwF;IACxF,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,gEAAgE;QAChE,OAAO,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG;YAAE,MAAM,EAAE,CAAA;QACjF,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG;YAAE,SAAQ,CAAC,6CAA6C;QACzF,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,CAAA;QAC1D,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,GAAG,CAAA;QACxE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/core/dlp/index.d.ts

@@ -0,0 +1,7 @@
+import type Database from 'better-sqlite3';
+import type { DlpFinding } from '../schema/index.js';
+/** Scan one session's stored content for secrets/PII (for the nudge). */
+export declare function scanSession(db: Database.Database, sessionId: string): DlpFinding[];
+/** Scan sessions active since `sinceMs` (for the recap). Bounded to recently-touched sessions. */
+export declare function scanRecent(db: Database.Database, sinceMs: number): DlpFinding[];
+//# sourceMappingURL=index.d.ts.map

package/dist/core/dlp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/dlp/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAgIpD,yEAAyE;AACzE,wBAAgB,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CAKlF;AAED,kGAAkG;AAClG,wBAAgB,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,CAe/E"}

package/dist/core/dlp/index.js

@@ -0,0 +1,115 @@
+import { getSessionMeta } from '../tags/index.js';
+// Structured, high-entropy credential shapes. Anchored on vendor prefixes + length so random
+// prose doesn't trip them. `g` flag so we can scan each text once for multiple hits.
+const PATTERNS = [
+    { re: /\bsk-(?:proj-|ant-)?[A-Za-z0-9_-]{20,}/g, kind: 'secret', reason: 'possible API key (sk-…)' },
+    { re: /\bgh[pousr]_[A-Za-z0-9]{30,}/g, kind: 'secret', reason: 'possible GitHub token' },
+    { re: /\bAKIA[0-9A-Z]{16}\b/g, kind: 'secret', reason: 'possible AWS access key' },
+    { re: /\bASIA[0-9A-Z]{16}\b/g, kind: 'secret', reason: 'possible AWS temporary key' },
+    { re: /\bxox[baprs]-[A-Za-z0-9-]{20,}/g, kind: 'secret', reason: 'possible Slack token' },
+    { re: /\bAIza[0-9A-Za-z_-]{35}\b/g, kind: 'secret', reason: 'possible Google API key' },
+    { re: /\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g, kind: 'secret', reason: 'possible JWT' },
+    { re: /-----BEGIN (?:RSA |EC |OPENSSH |DSA |PGP )?PRIVATE KEY-----/g, kind: 'secret', reason: 'possible private key' },
+    // Gated email: only when it sits in a credential assignment (password/secret/token = …),
+    // not the bare-email match the scrubber uses (which flooded on signatures + docs).
+    {
+        re: /\b(?:password|passwd|secret|token|api[_-]?key|credential)["'\s]*[:=]\s*["']?[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/gi,
+        kind: 'pii',
+        reason: 'possible credential with email',
+    },
+];
+// Placeholder / example / redacted tokens — never worth a nudge. If a match contains any of
+// these (case-insensitive) we drop it.
+const PLACEHOLDER_RE = /xxxx|yyyy|zzzz|your[_-]?key|your[_-]?token|example|placeholder|redacted|dummy|sample|test[_-]?key|sk-xxx|\.\.\.|<[a-z_]+>|\bfake\b|\bchangeme\b|\binsert\b/i;
+function isPlaceholder(match) {
+    return PLACEHOLDER_RE.test(match);
+}
+/** Mask the middle of a secret so the preview proves the hit without leaking it. */
+function maskSecret(secret) {
+    if (secret.length <= 8)
+        return '•'.repeat(secret.length);
+    const head = secret.slice(0, 4);
+    const tail = secret.slice(-2);
+    return `${head}${'•'.repeat(Math.min(secret.length - 6, 12))}${tail}`;
+}
+/** Build a short REDACTED context snippet around the match, with the secret masked. */
+function redactedPreview(text, match, index) {
+    const start = Math.max(0, index - 24);
+    const end = Math.min(text.length, index + match.length + 24);
+    const before = text.slice(start, index);
+    const after = text.slice(index + match.length, end);
+    const snippet = `${start > 0 ? '…' : ''}${before}${maskSecret(match)}${after}${end < text.length ? '…' : ''}`;
+    return snippet.replace(/\s+/g, ' ').trim().slice(0, 120);
+}
+/** Scan the joined message/tool text for one session id; emit at most one finding per (msgIdx, reason). */
+function scanRows(rows, sessionId, name) {
+    const findings = [];
+    const seen = new Set(); // msgIdx + reason — keeps a noisy session to one line per kind
+    for (const row of rows) {
+        // Concatenate the row's scannable surfaces. content_json/*.json are stored JSON; we scan
+        // the raw text so a key embedded anywhere in a structured value is still caught.
+        const haystack = [row.content_json, row.input_json, row.output_json].filter(Boolean).join('\n');
+        if (!haystack)
+            continue;
+        for (const { re, kind, reason } of PATTERNS) {
+            re.lastIndex = 0;
+            let m;
+            while ((m = re.exec(haystack)) !== null) {
+                const raw = m[0];
+                if (raw.length === 0) {
+                    re.lastIndex++; // guard against zero-width loops
+                    continue;
+                }
+                if (isPlaceholder(raw))
+                    continue;
+                const key = `${row.idx}:${reason}`;
+                if (seen.has(key))
+                    continue;
+                seen.add(key);
+                findings.push({
+                    sessionId,
+                    name,
+                    msgIdx: row.idx,
+                    kind,
+                    reason,
+                    preview: redactedPreview(haystack, raw, m.index),
+                });
+            }
+        }
+    }
+    return findings;
+}
+const ROW_QUERY = `
+  SELECT m.idx AS idx, m.content_json AS content_json,
+         tc.input_json AS input_json, tc.output_json AS output_json
+  FROM messages m
+  LEFT JOIN tool_calls tc ON tc.message_id = m.id
+  WHERE m.session_id = ?
+  ORDER BY m.idx ASC
+`;
+/** Scan one session's stored content for secrets/PII (for the nudge). */
+export function scanSession(db, sessionId) {
+    const rows = db.prepare(ROW_QUERY).all(sessionId);
+    if (rows.length === 0)
+        return [];
+    const name = getSessionMeta(db, sessionId).name;
+    return scanRows(rows, sessionId, name);
+}
+/** Scan sessions active since `sinceMs` (for the recap). Bounded to recently-touched sessions. */
+export function scanRecent(db, sinceMs) {
+    const sinceIso = new Date(sinceMs).toISOString();
+    // Activity = the session's last touch (ended_at, falling back to started_at). ISO timestamps
+    // compare lexicographically, so a string >= filter is correct here.
+    const sessions = db.prepare(`
+    SELECT id FROM sessions
+    WHERE COALESCE(ended_at, started_at) >= ?
+    ORDER BY COALESCE(ended_at, started_at) DESC
+  `).all(sinceIso);
+    const out = [];
+    for (const { id } of sessions) {
+        for (const f of scanSession(db, id))
+            out.push(f);
+    }
+    return out;
+}
+//# sourceMappingURL=index.js.map

package/dist/core/dlp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/dlp/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AA0BjD,6FAA6F;AAC7F,qFAAqF;AACrF,MAAM,QAAQ,GAAc;IAC1B,EAAE,EAAE,EAAE,yCAAyC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACpG,EAAE,EAAE,EAAE,+BAA+B,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,uBAAuB,EAAE;IACxF,EAAE,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAClF,EAAE,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,4BAA4B,EAAE;IACrF,EAAE,EAAE,EAAE,iCAAiC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACzF,EAAE,EAAE,EAAE,4BAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACvF,EAAE,EAAE,EAAE,qEAAqE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE;IACrH,EAAE,EAAE,EAAE,8DAA8D,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACtH,yFAAyF;IACzF,mFAAmF;IACnF;QACE,EAAE,EAAE,8HAA8H;QAClI,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,gCAAgC;KACzC;CACF,CAAA;AAED,4FAA4F;AAC5F,uCAAuC;AACvC,MAAM,cAAc,GAAG,6JAA6J,CAAA;AAEpL,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACnC,CAAC;AAED,oFAAoF;AACpF,SAAS,UAAU,CAAC,MAAc;IAChC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7B,OAAO,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAA;AACvE,CAAC;AAED,uFAAuF;AACvF,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa,EAAE,KAAa;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC,CAAA;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACnD,MAAM,OAAO,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IAC7G,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC1D,CAAC;AASD,2GAA2G;AAC3G,SAAS,QAAQ,CAAC,IAAe,EAAE,SAAiB,EAAE,IAAY;IAChE,MAAM,QAAQ,GAAiB,EAAE,CAAA;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA,CAAC,+DAA+D;IAE9F,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,yFAAyF;QACzF,iFAAiF;QACjF,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/F,IAAI,CAAC,QAAQ;YAAE,SAAQ;QAEvB,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC5C,EAAE,CAAC,SAAS,GAAG,CAAC,CAAA;YAChB,IAAI,CAAyB,CAAA;YAC7B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;gBAChB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACrB,EAAE,CAAC,SAAS,EAAE,CAAA,CAAC,iCAAiC;oBAChD,SAAQ;gBACV,CAAC;gBACD,IAAI,aAAa,CAAC,GAAG,CAAC;oBAAE,SAAQ;gBAChC,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,MAAM,EAAE,CAAA;gBAClC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAQ;gBAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACb,QAAQ,CAAC,IAAI,CAAC;oBACZ,SAAS;oBACT,IAAI;oBACJ,MAAM,EAAE,GAAG,CAAC,GAAG;oBACf,IAAI;oBACJ,MAAM;oBACN,OAAO,EAAE,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC;iBACjD,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,SAAS,GAAG;;;;;;;CAOjB,CAAA;AAED,yEAAyE;AACzE,MAAM,UAAU,WAAW,CAAC,EAAqB,EAAE,SAAiB;IAClE,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAc,CAAA;IAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAChC,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,CAAA;IAC/C,OAAO,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;AACxC,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,UAAU,CAAC,EAAqB,EAAE,OAAe;IAC/D,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;IAChD,6FAA6F;IAC7F,oEAAoE;IACpE,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC;;;;GAI3B,CAAC,CAAC,GAAG,CAAC,QAAQ,CAA0B,CAAA;IAEzC,MAAM,GAAG,GAAiB,EAAE,CAAA;IAC5B,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/core/health/index.d.ts

@@ -0,0 +1,10 @@
+import type { SessionListRow, SessionHealth } from '../schema/index.js';
+/**
+ * Classify a session's run-health from its raw error count + last outcome.
+ * Pure — no db access. `error` wins over `warn`; `clean` is the default.
+ *   - error: at least one tool call errored
+ *   - warn:  no errors but the run was abandoned
+ *   - clean: otherwise
+ */
+export declare function classifyHealth(row: Pick<SessionListRow, 'errorCount' | 'lastOutcome'>): SessionHealth;
+//# sourceMappingURL=index.d.ts.map

package/dist/core/health/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/health/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEvE;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,GAAG,aAAa,CAAC,GAAG,aAAa,CAerG"}

package/dist/core/health/index.js

@@ -0,0 +1,21 @@
+/**
+ * Classify a session's run-health from its raw error count + last outcome.
+ * Pure — no db access. `error` wins over `warn`; `clean` is the default.
+ *   - error: at least one tool call errored
+ *   - warn:  no errors but the run was abandoned
+ *   - clean: otherwise
+ */
+export function classifyHealth(row) {
+    const errorCount = row.errorCount ?? 0;
+    const reasons = [];
+    if (errorCount > 0) {
+        reasons.push(errorCount === 1 ? '1 tool error' : `${errorCount} tool errors`);
+        return { status: 'error', errorCount, reasons };
+    }
+    if (row.lastOutcome === 'abandoned') {
+        reasons.push('abandoned');
+        return { status: 'warn', errorCount, reasons };
+    }
+    return { status: 'clean', errorCount, reasons };
+}
+//# sourceMappingURL=index.js.map

package/dist/core/health/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/health/index.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAuD;IACpF,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAA;IACtC,MAAM,OAAO,GAAa,EAAE,CAAA;IAE5B,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,UAAU,cAAc,CAAC,CAAA;QAC7E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;IACjD,CAAC;IAED,IAAI,GAAG,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACzB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;IAChD,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;AACjD,CAAC"}

package/dist/core/index/index.d.ts

@@ -0,0 +1,9 @@
+import Database from 'better-sqlite3';
+import type { PlatformAdapter } from './platforms.js';
+export interface IndexStats {
+    filesScanned: number;
+    filesIngested: number;
+    durationMs: number;
+}
+export declare function buildIndex(db: Database.Database, adapters: PlatformAdapter[]): Promise<IndexStats>;
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/index/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAIrC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAUrD,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,wBAAsB,UAAU,CAC9B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,QAAQ,EAAE,eAAe,EAAE,GAC1B,OAAO,CAAC,UAAU,CAAC,CAgHrB"}

package/dist/core/index/index.js

@@ -0,0 +1,103 @@
+import { join } from 'node:path';
+import { existsSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { compareToGolden } from '../schema-watch/index.js';
+import { prepareIngestStatements } from './statements.js';
+import { loadPricingMap } from './pricing-map.js';
+import { ingestFromParsed } from './ingest.js';
+import { computeAllWaste } from '../waste/index.js';
+import { indexProgress } from './progress.js';
+export async function buildIndex(db, adapters) {
+    const start = Date.now();
+    let filesScanned = 0;
+    let filesIngested = 0;
+    const stmtGetMtime = db.prepare('SELECT mtime_ms FROM _file_index WHERE path = ?');
+    const stmts = prepareIngestStatements(db);
+    const pricingMap = loadPricingMap(db);
+    const allFiles = [];
+    for (const adapter of adapters) {
+        const files = await adapter.scan();
+        filesScanned += files.length;
+        for (const f of files) {
+            const row = stmtGetMtime.get(f.path);
+            if (row !== undefined && row.mtime_ms === f.mtimeMs)
+                continue; // mtime-skip
+            allFiles.push({ path: f.path, mtimeMs: f.mtimeMs, adapter });
+        }
+    }
+    // 2. Sort most-recent first — critical for onboarding UX
+    allFiles.sort((a, b) => b.mtimeMs - a.mtimeMs);
+    // 3. Update progress state
+    indexProgress.begin(allFiles.length);
+    indexProgress.setPhase('indexing');
+    // 4. Batch-sequential ingest: parse N files, flush in one db.transaction (minimises FTS5 segments)
+    const BATCH_SIZE = 50;
+    for (let i = 0; i < allFiles.length; i += BATCH_SIZE) {
+        const batch = allFiles.slice(i, i + BATCH_SIZE);
+        const parsedBatch = [];
+        for (const { path, mtimeMs, adapter } of batch) {
+            try {
+                const parsed = await adapter.parse(path);
+                if (parsed.sessionId)
+                    parsedBatch.push({ filePath: path, mtimeMs, platform: adapter.id, parsed });
+            }
+            catch (err) {
+                // Log the actual error — bare `failed to parse <path>` masked a real
+                // null-toString bug in the Cursor parser for weeks (May 2026).
+                indexProgress.recordError();
+                console.error(`[vyasa] failed to parse ${path}:`, err);
+            }
+        }
+        db.transaction(() => {
+            for (const item of parsedBatch) {
+                try {
+                    ingestFromParsed(db, stmts, pricingMap, item.filePath, item.mtimeMs, item.platform, item.parsed);
+                }
+                catch (err) {
+                    indexProgress.recordError();
+                    console.error(`[vyasa] failed to ingest ${item.filePath}:`, err);
+                }
+            }
+        })();
+        filesIngested += parsedBatch.length;
+        indexProgress.filesCompleted(parsedBatch.length);
+    }
+    indexProgress.finish();
+    // Recompute waste attributions over the freshly-indexed data. The detectors
+    // are whole-DB SQL aggregations (not per-file), so this runs once after
+    // ingestion. MUST stay above the schema-drift early-return below — that
+    // return fires on every install without the golden file (i.e. all real users).
+    computeAllWaste(db);
+    // Schema drift check — only runs when the golden file is present (dev/maintainer only; not shipped in npm package)
+    try {
+        const goldenPath = join(fileURLToPath(import.meta.url), '../../../../data/schema-fingerprints.json');
+        if (!existsSync(goldenPath))
+            return { filesScanned, filesIngested, durationMs: Date.now() - start };
+        const observed = new Map();
+        const obsRows = db.prepare('SELECT platform, fingerprint, first_seen_file, first_seen_line, last_seen, count FROM _schema_observations').all();
+        for (const row of obsRows) {
+            observed.set(row.fingerprint, {
+                firstSeenFile: row.first_seen_file,
+                firstSeenLine: row.first_seen_line,
+                lastSeen: row.last_seen,
+                count: row.count,
+            });
+        }
+        const { unknown } = compareToGolden(observed, goldenPath);
+        const capped = unknown.slice(0, 20);
+        for (const fp of capped) {
+            const meta = observed.get(fp);
+            const loc = meta ? ` (first seen at ${meta.firstSeenFile}:${meta.firstSeenLine})` : '';
+            console.error(`[schema-drift] new fingerprint: ${fp}${loc}`);
+        }
+    }
+    catch {
+        // Schema drift check is non-critical — never block indexing
+    }
+    return {
+        filesScanned,
+        filesIngested,
+        durationMs: Date.now() - start,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/core/index/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/index/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAE1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAS7C,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,EAAqB,EACrB,QAA2B;IAE3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAExB,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,IAAI,aAAa,GAAG,CAAC,CAAA;IACrB,MAAM,YAAY,GAAG,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAA;IAClF,MAAM,KAAK,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAA;IACzC,MAAM,UAAU,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;IAIrC,MAAM,QAAQ,GAAc,EAAE,CAAA;IAE9B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QAClC,YAAY,IAAI,KAAK,CAAC,MAAM,CAAA;QAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAqC,CAAA;YACxE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO;gBAAE,SAAQ,CAAC,aAAa;YAC3E,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAA;IAE9C,2BAA2B;IAC3B,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACpC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IAElC,mGAAmG;IACnG,MAAM,UAAU,GAAG,EAAE,CAAA;IAGrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,CAAA;QAC/C,MAAM,WAAW,GAAiB,EAAE,CAAA;QAEpC,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,KAAK,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBACxC,IAAI,MAAM,CAAC,SAAS;oBAAE,WAAW,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;YACnG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qEAAqE;gBACrE,+DAA+D;gBAC/D,aAAa,CAAC,WAAW,EAAE,CAAA;gBAC3B,OAAO,CAAC,KAAK,CAAC,2BAA2B,IAAI,GAAG,EAAE,GAAG,CAAC,CAAA;YACxD,CAAC;QACH,CAAC;QAED,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAClB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;gBAClG,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,CAAC,WAAW,EAAE,CAAA;oBAC3B,OAAO,CAAC,KAAK,CAAC,4BAA4B,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAA;gBAClE,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QAEJ,aAAa,IAAI,WAAW,CAAC,MAAM,CAAA;QACnC,aAAa,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAClD,CAAC;IAED,aAAa,CAAC,MAAM,EAAE,CAAA;IAEtB,4EAA4E;IAC5E,wEAAwE;IACxE,wEAAwE;IACxE,+EAA+E;IAC/E,eAAe,CAAC,EAAE,CAAC,CAAA;IAEnB,mHAAmH;IACnH,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,2CAA2C,CAAC,CAAA;QACpG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAA;QACnG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAA;QACnD,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CACxB,4GAA4G,CAC7G,CAAC,GAAG,EAOH,CAAA;QACF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE;gBAC5B,aAAa,EAAE,GAAG,CAAC,eAAe;gBAClC,aAAa,EAAE,GAAG,CAAC,eAAe;gBAClC,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,KAAK,EAAE,GAAG,CAAC,KAAK;aACjB,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;QACzD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACnC,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;YACtF,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;IAED,OAAO;QACL,YAAY;QACZ,aAAa;QACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAA;AACH,CAAC"}

package/dist/core/index/ingest.d.ts

@@ -0,0 +1,16 @@
+import Database from 'better-sqlite3';
+import type { ParsedSession } from '../schema/index.js';
+import type { IngestStatements } from './statements.js';
+import type { PricingRow } from './pricing-map.js';
+/**
+ * Synchronous ingest of a pre-parsed session.
+ * Must be called INSIDE a caller-supplied db.transaction() — does NOT wrap itself.
+ * Throws on any SQLite error so the caller's transaction rolls back cleanly.
+ */
+export declare function ingestFromParsed(db: Database.Database, stmts: IngestStatements, pricingMap: Map<string, PricingRow>, filePath: string, mtimeMs: number, platform: string, parsed: ParsedSession): void;
+/**
+ * Async wrapper — parses and ingests a single file inside its own transaction.
+ * Preserved for backward compatibility with any tests calling ingestFile directly.
+ */
+export declare function ingestFile(db: Database.Database, filePath: string, mtimeMs: number, platform: string | undefined, stmts: IngestStatements, pricingMap: Map<string, PricingRow>): Promise<void>;
+//# sourceMappingURL=ingest.d.ts.map

package/dist/core/index/ingest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.d.ts","sourceRoot":"","sources":["../../../src/core/index/ingest.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAIrC,OAAO,KAAK,EAA6C,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAElD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,gBAAgB,EACvB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EACnC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,aAAa,GACpB,IAAI,CAmNN;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,YAAgB,EAChC,KAAK,EAAE,gBAAgB,EACvB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,GAClC,OAAO,CAAC,IAAI,CAAC,CAOf"}