@appchy/jarvis 0.1.37 → 0.1.39

package/dist/hooks/session-start.js

@@ -1,37 +1,69 @@
 import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
 
+// src/harness.ts
+import { spawnSync } from "child_process";
+import { existsSync } from "fs";
+import { dirname, join } from "path";
+import { fileURLToPath } from "url";
+var ENTRY = join("harness", "work.py");
+var INTERPRETERS = ["python3", "python"];
+var OLDEST = [3, 9];
+var INSTALLED = ["jarvis", "work"];
+function payload() {
+  let dir = dirname(fileURLToPath(import.meta.url));
+  for (let up = 0; up < 6; up++) {
+    if (existsSync(join(dir, ENTRY))) return join(dir, ENTRY);
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return null;
+}
+function interpreter() {
+  for (const name of INTERPRETERS) {
+    const said = spawnSync(name, ["--version"], { encoding: "utf-8" });
+    if (said.status !== 0) continue;
+    const version = /(\d+)\.(\d+)/.exec(`${said.stdout}${said.stderr}`);
+    if (!version) continue;
+    const [major, minor] = [Number(version[1]), Number(version[2])];
+    if (major > OLDEST[0] || major === OLDEST[0] && minor >= OLDEST[1]) return name;
+  }
+  return null;
+}
+function harness() {
+  const script = payload();
+  const python = interpreter();
+  return script && python ? [python, script] : INSTALLED;
+}
+function sessionContext(repo) {
+  return say(["context", "--project", repo]);
+}
+var PATIENCE = 1e4;
+function say(args, timeout = PATIENCE) {
+  try {
+    const [command, ...prefix] = harness();
+    const ran = spawnSync(command, [...prefix, ...args], {
+      encoding: "utf-8",
+      timeout,
+      env: { ...process.env, PYTHONDONTWRITEBYTECODE: "1" }
+    });
+    if (ran.status !== 0) return null;
+    return ran.stdout.trim() ? ran.stdout.trimEnd() : null;
+  } catch {
+    return null;
+  }
+}
+
 // src/hooks/drop.ts
 import { appendFile, mkdir } from "fs/promises";
-import { join } from "path";
+import { join as join2 } from "path";
 
 // src/config.ts
-import fs from "fs";
 import path from "path";
 import os from "os";
-import { fileURLToPath } from "url";
-var __filename = fileURLToPath(import.meta.url);
-var __dirname = path.dirname(__filename);
-function isDev() {
-  const candidates = [
-    path.join(__dirname, "env.json"),
-    path.join(__dirname, "..", "env.json")
-  ];
-  for (const envFile of candidates) {
-    try {
-      const data = JSON.parse(fs.readFileSync(envFile, "utf-8"));
-      return data.env === "development";
-    } catch {
-    }
-  }
-  return false;
-}
-function resolveConfigDir() {
-  if (process.env.JARVIS_CONFIG_DIR) return process.env.JARVIS_CONFIG_DIR;
-  const base = path.join(os.homedir(), ".jarvis");
-  return isDev() ? path.join(base, "dev") : base;
-}
 function configDir() {
-  return resolveConfigDir();
+  if (process.env.JARVIS_CONFIG_DIR) return process.env.JARVIS_CONFIG_DIR;
+  return path.join(os.homedir(), ".jarvis");
 }
 function getHooksDir() {
   return path.join(configDir(), "hooks");
@@ -39,9 +71,9 @@ function getHooksDir() {
 
 // src/hooks/drop.ts
 async function appendDrop(req) {
-  if (!req.sessionId || !req.kind || !req.uniqId) {
+  if (!req.sessionId || !req.type || !req.uniqId) {
     process.stderr.write(
-      `[hook] skip ${req.kind ?? "?"} missing field sessionId=${!!req.sessionId} uniqId=${!!req.uniqId}
+      `[hook] skip ${req.type ?? "?"} missing field sessionId=${!!req.sessionId} uniqId=${!!req.uniqId}
 `
     );
     return;
@@ -52,17 +84,17 @@ async function appendDrop(req) {
 `);
   });
   const envelope = {
-    kind: req.kind,
+    type: req.type,
     sessionId: req.sessionId,
     ts: (/* @__PURE__ */ new Date()).toISOString(),
     uniqId: req.uniqId,
     data: req.data
   };
-  const file = join(dir, `${req.sessionId}.jsonl`);
+  const file = join2(dir, `${req.sessionId}.jsonl`);
   try {
     await appendFile(file, JSON.stringify(envelope) + "\n");
     process.stderr.write(
-      `[hook] ${req.kind} appended sessionId=${req.sessionId} uniqId=${req.uniqId}
+      `[hook] ${req.type} appended sessionId=${req.sessionId} uniqId=${req.uniqId}
 `
     );
   } catch (err) {
@@ -89,21 +121,24 @@ function installHookTimeout(ms = 750) {
 }
 
 // src/hooks/session-start.ts
-installHookTimeout();
+installHookTimeout(8e3);
 async function main() {
   const p = await readHookStdin();
-  if (!p) return;
-  const sessionId = p.session_id;
+  const repo = process.env.CLAUDE_PROJECT_DIR ?? p?.cwd ?? process.cwd();
+  const block = sessionContext(repo);
+  if (block) process.stdout.write(`${block}
+`);
+  const sessionId = p?.session_id;
   if (!sessionId) return;
   const ts = (/* @__PURE__ */ new Date()).toISOString();
-  const source = p.source ?? "startup";
+  const source = p?.source ?? "startup";
   const data = {
     source,
-    ...p.transcript_path ? { transcriptPath: p.transcript_path } : {},
-    ...p.cwd ? { cwd: p.cwd } : {}
+    ...p?.transcript_path ? { transcriptPath: p.transcript_path } : {},
+    ...p?.cwd ? { cwd: p.cwd } : {}
   };
   await appendDrop({
-    kind: "session-start",
+    type: "session-start",
     sessionId,
     // ts-based uniqId — SessionStart can fire multiple times per session
     // over its lifetime (e.g. one `startup` then later `resume`).

package/dist/hooks/session-start.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/hooks/drop.ts","../../src/config.ts","../../src/hooks/session-start.ts"],"sourcesContent":["/**\n * Shared helpers for CC hook scripts.\n *\n * Each hook script (pre-tool-use, session-start, stop, …) is a tiny\n * stdin → append-line → exit binary. They all write to the same per-\n * session JSONL at `<hooksDir>/<sessionId>.jsonl`. This module\n * concentrates the envelope shape and the atomic append so the per-\n * hook scripts stay <30 lines each.\n *\n * Hot-path constraints: NEVER block, NEVER network, NEVER read user\n * input. Pure stdin parse + filesystem append + exit. Worst-case one\n * `mkdir` + one `appendFile` per fire.\n */\n\nimport { appendFile, mkdir } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { getHooksDir } from \"../config\";\n\n/** Wire-format envelope written one-per-line to the hook JSONL.\n *  The watcher in `sessions.ts` parses this exact shape — keep in sync. */\nexport interface HookDropEnvelope<TData = unknown> {\n  kind: string;\n  sessionId: string;\n  ts: string;\n  /** Idempotency key. Lets the watcher's replay-on-restart skip drops\n   *  whose effects were already emitted (see `HookCursor.applied`). */\n  uniqId: string;\n  data: TData;\n}\n\nexport interface AppendDropRequest<TData> {\n  kind: string;\n  sessionId: string;\n  uniqId: string;\n  data: TData;\n}\n\n/** Append one envelope line to the per-session hook JSONL. Atomic between\n *  hook processes via POSIX `O_APPEND` (Node's `fs.appendFile`) — concurrent\n *  appends from different CC sessions / hook kinds can't interleave bytes\n *  within a line as long as the line stays < `PIPE_BUF` (4KB). Drops are\n *  <1KB in practice, so this is safe without locks.\n *\n *  Stderr logs are written so `tail -f ~/.jarvis[/dev]/hooks/hook.log` (when\n *  CC pipes hook stderr there, which it does by default) shows what fired.\n *  Stderr never breaks CC — it only watches stdout for decision JSON. */\nexport async function appendDrop<TData>(req: AppendDropRequest<TData>): Promise<void> {\n  if (!req.sessionId || !req.kind || !req.uniqId) {\n    process.stderr.write(\n      `[hook] skip ${req.kind ?? \"?\"} missing field ` +\n        `sessionId=${!!req.sessionId} uniqId=${!!req.uniqId}\\n`,\n    );\n    return;\n  }\n  const dir = getHooksDir();\n  await mkdir(dir, { recursive: true }).catch((err) => {\n    process.stderr.write(`[hook] mkdir failed ${dir}: ${err}\\n`);\n  });\n  const envelope: HookDropEnvelope<TData> = {\n    kind: req.kind,\n    sessionId: req.sessionId,\n    ts: new Date().toISOString(),\n    uniqId: req.uniqId,\n    data: req.data,\n  };\n  const file = join(dir, `${req.sessionId}.jsonl`);\n  try {\n    await appendFile(file, JSON.stringify(envelope) + \"\\n\");\n    process.stderr.write(\n      `[hook] ${req.kind} appended sessionId=${req.sessionId} uniqId=${req.uniqId}\\n`,\n    );\n  } catch (err) {\n    process.stderr.write(`[hook] append failed ${file}: ${err}\\n`);\n  }\n}\n\n/** Read CC's hook payload from stdin. Returns `null` on parse failure\n *  (never throws — the hook must never block CC). */\nexport async function readHookStdin<T = Record<string, unknown>>(): Promise<T | null> {\n  try {\n    const chunks: Buffer[] = [];\n    for await (const chunk of process.stdin) {\n      chunks.push(typeof chunk === \"string\" ? Buffer.from(chunk) : chunk);\n    }\n    const raw = Buffer.concat(chunks).toString(\"utf-8\");\n    if (!raw) return null;\n    return JSON.parse(raw) as T;\n  } catch {\n    return null;\n  }\n}\n\n/** Hard cap any hook so an exotic stdin stall can't pile up forever\n *  before CC's terminal prompt fires. We exit 0 with no output → CC\n *  proceeds with its normal permission flow. */\nexport function installHookTimeout(ms = 750): void {\n  const timer = setTimeout(() => process.exit(0), ms);\n  timer.unref();\n}\n","/**\n * Agent Config\n *\n * Manages ~/.jarvis/config.json — saved by `jarvis connect <token>`,\n * read on `jarvis start`.\n */\n\nimport fs from \"fs\";\nimport path from \"path\";\nimport os from \"os\";\nimport { fileURLToPath } from \"url\";\n\n// =============================================================================\n// Types\n// =============================================================================\n\nexport interface AgentConfig {\n  /** Cloud WS API URL (from connect token) */\n  apiUrl?: string;\n  /** JWT auth token (from connect token) */\n  token?: string;\n  /** Long-lived refresh token for obtaining new access tokens */\n  refreshToken?: string;\n  /** User ID */\n  userId: string;\n  /** Environment ID */\n  envId?: string;\n  /** Workspace root path for repo operations */\n  workspacePath?: string;\n  /** Web app URL for browser-based auth */\n  appUrl?: string;\n  /** Anthropic API key (for local-only use without cloud) */\n  anthropicApiKey?: string;\n  /** Use Anthropic subscription instead of API key */\n  useSubscription?: boolean;\n  /** When the config was last updated */\n  connectedAt?: string;\n}\n\nexport interface ConnectToken {\n  apiUrl: string;\n  jwt: string;\n  refreshToken: string;\n  userId: string;\n  envId: string;\n}\n\n// =============================================================================\n// Paths\n// =============================================================================\n\n// =============================================================================\n// Environment (single source of truth)\n// =============================================================================\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = path.dirname(__filename);\n\n/** Single source of truth for dev vs prod.\n *  Two locations, picked by which file is shipped:\n *    Dev:  apps/cli/env.json     (committed, `{ \"env\": \"development\" }`)\n *    Prod: apps/cli/dist/env.json (written by tsup build, `{ \"env\": \"production\" }`)\n *  We try the prod-style sibling first (next to bin.js when bundled), then fall\n *  back to the dev-style parent path (one up from src/config.ts). The prod bundle\n *  has no `..` parent env.json, and the dev source tree has no sibling env.json,\n *  so the two never collide. Safe default if neither exists: prod. */\nexport function isDev(): boolean {\n  const candidates = [\n    path.join(__dirname, \"env.json\"),\n    path.join(__dirname, \"..\", \"env.json\"),\n  ];\n  for (const envFile of candidates) {\n    try {\n      const data = JSON.parse(fs.readFileSync(envFile, \"utf-8\"));\n      return data.env === \"development\";\n    } catch {\n      /* try next candidate */\n    }\n  }\n  return false;\n}\n\nconst PROD_APP_URL = \"https://jarvis.appchy.com\";\nconst DEV_APP_URL = \"http://localhost:3000\";\n\nconst PROD_WS_URL = \"wss://jarvis.appchy.com/ws\";\nconst DEV_WS_URL = \"ws://localhost:7863\";\n\n/** App URL for the current environment. */\nexport function getDefaultAppUrl(): string {\n  return isDev() ? (process.env.APP_URL || DEV_APP_URL) : PROD_APP_URL;\n}\n\n/** WS hub URL for the current environment. Hardcoded per build so the prod\n *  binary can never subscribe to the dev hub (or vice versa) regardless of\n *  what's stored in `config.apiUrl`. Dev permits a `JARVIS_UPSTREAM_URL`\n *  override for tests/CI on a non-default port; prod has no escape hatch. */\nexport function getDefaultWsUrl(): string {\n  return isDev() ? (process.env.JARVIS_UPSTREAM_URL || DEV_WS_URL) : PROD_WS_URL;\n}\n\n// =============================================================================\n// Config directory\n// =============================================================================\n\n/** Determine config directory.\n *  - JARVIS_CONFIG_DIR env var takes priority (escape hatch for CI/testing)\n *  - dev → ~/.jarvis/dev/\n *  - prod → ~/.jarvis/\n *\n *  Called fresh on every read so test environments that set\n *  `JARVIS_CONFIG_DIR` AFTER module load still see the override — caching\n *  the value at module init would lock tests onto the host's real\n *  `~/.jarvis/dev/` and leak production state into the in-memory infra. */\nfunction resolveConfigDir(): string {\n  if (process.env.JARVIS_CONFIG_DIR) return process.env.JARVIS_CONFIG_DIR;\n  const base = path.join(os.homedir(), \".jarvis\");\n  return isDev() ? path.join(base, \"dev\") : base;\n}\n\nfunction configDir(): string {\n  return resolveConfigDir();\n}\n\nfunction configFile(): string {\n  return path.join(configDir(), \"config.json\");\n}\n\n/** Absolute path to the per-daemon config directory.\n *  `prod` → `~/.jarvis/`, `dev` → `~/.jarvis/dev/`. */\nexport function getConfigDir(): string {\n  return configDir();\n}\n\n/** Per-daemon directory for PreToolUse hook drop files. The CC hook script\n *  writes `<sessionId>/<toolUseId>.json` here; the sessions watcher consumes\n *  them. Prod and dev daemons each own their own subtree so a hook installed\n *  for one never feeds the other. */\nexport function getHooksDir(): string {\n  return path.join(configDir(), \"hooks\");\n}\n\n// =============================================================================\n// Operations\n// =============================================================================\n\nexport function loadConfig(): AgentConfig | null {\n  try {\n    const raw = fs.readFileSync(configFile(), \"utf-8\");\n    return JSON.parse(raw) as AgentConfig;\n  } catch {\n    return null;\n  }\n}\n\nexport function saveConfig(config: AgentConfig): void {\n  fs.mkdirSync(configDir(), { recursive: true });\n  fs.writeFileSync(configFile(), JSON.stringify(config, null, 2) + \"\\n\");\n}\n\nexport function clearConfig(): void {\n  try {\n    fs.unlinkSync(configFile());\n  } catch {}\n}\n\nexport function parseConnectToken(token: string): ConnectToken {\n  try {\n    const decoded = Buffer.from(token, \"base64\").toString(\"utf-8\");\n    const parsed = JSON.parse(decoded);\n    if (!parsed.apiUrl || !parsed.jwt || !parsed.userId) {\n      throw new Error(\"Invalid token: missing required fields (apiUrl, jwt, userId)\");\n    }\n    return parsed as ConnectToken;\n  } catch (err) {\n    if (err instanceof SyntaxError) {\n      throw new Error(\"Invalid token: not valid base64-encoded JSON\");\n    }\n    throw err;\n  }\n}\n\nexport function getConfigPath(): string {\n  return configFile();\n}\n","/**\n * SessionStart hook — drops an envelope when CC starts/resumes a session.\n *\n * Used by the daemon to surface new external CC sessions in web/mobile\n * before CC's JSONL has been fully parsed — eliminating the chokidar\n * parse latency for fresh sessions.\n */\n\nimport { appendDrop, installHookTimeout, readHookStdin } from \"./drop\";\n\ninterface CcSessionStartInput {\n  session_id?: string;\n  transcript_path?: string;\n  cwd?: string;\n  /** \"startup\" (fresh CLI), \"resume\" (--resume <id>), \"clear\" (/clear). */\n  source?: string;\n}\n\ninterface SessionStartDropData {\n  source: string;\n  transcriptPath?: string;\n  cwd?: string;\n}\n\ninstallHookTimeout();\n\nasync function main(): Promise<void> {\n  const p = await readHookStdin<CcSessionStartInput>();\n  if (!p) return;\n  const sessionId = p.session_id;\n  if (!sessionId) return;\n\n  const ts = new Date().toISOString();\n  const source = p.source ?? \"startup\";\n  const data: SessionStartDropData = {\n    source,\n    ...(p.transcript_path ? { transcriptPath: p.transcript_path } : {}),\n    ...(p.cwd ? { cwd: p.cwd } : {}),\n  };\n\n  await appendDrop<SessionStartDropData>({\n    kind: \"session-start\",\n    sessionId,\n    // ts-based uniqId — SessionStart can fire multiple times per session\n    // over its lifetime (e.g. one `startup` then later `resume`).\n    uniqId: `session-start-${ts}`,\n    data,\n  });\n}\n\nvoid main().finally(() => process.exit(0));\n"],"mappings":";;;AAcA,SAAS,YAAY,aAAa;AAClC,SAAS,YAAY;;;ACRrB,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,OAAO,QAAQ;AACf,SAAS,qBAAqB;AA6C9B,IAAM,aAAa,cAAc,YAAY,GAAG;AAChD,IAAM,YAAY,KAAK,QAAQ,UAAU;AAUlC,SAAS,QAAiB;AAC/B,QAAM,aAAa;AAAA,IACjB,KAAK,KAAK,WAAW,UAAU;AAAA,IAC/B,KAAK,KAAK,WAAW,MAAM,UAAU;AAAA,EACvC;AACA,aAAW,WAAW,YAAY;AAChC,QAAI;AACF,YAAM,OAAO,KAAK,MAAM,GAAG,aAAa,SAAS,OAAO,CAAC;AACzD,aAAO,KAAK,QAAQ;AAAA,IACtB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAkCA,SAAS,mBAA2B;AAClC,MAAI,QAAQ,IAAI,kBAAmB,QAAO,QAAQ,IAAI;AACtD,QAAM,OAAO,KAAK,KAAK,GAAG,QAAQ,GAAG,SAAS;AAC9C,SAAO,MAAM,IAAI,KAAK,KAAK,MAAM,KAAK,IAAI;AAC5C;AAEA,SAAS,YAAoB;AAC3B,SAAO,iBAAiB;AAC1B;AAgBO,SAAS,cAAsB;AACpC,SAAO,KAAK,KAAK,UAAU,GAAG,OAAO;AACvC;;;AD7FA,eAAsB,WAAkB,KAA8C;AACpF,MAAI,CAAC,IAAI,aAAa,CAAC,IAAI,QAAQ,CAAC,IAAI,QAAQ;AAC9C,YAAQ,OAAO;AAAA,MACb,eAAe,IAAI,QAAQ,GAAG,4BACf,CAAC,CAAC,IAAI,SAAS,WAAW,CAAC,CAAC,IAAI,MAAM;AAAA;AAAA,IACvD;AACA;AAAA,EACF;AACA,QAAM,MAAM,YAAY;AACxB,QAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACnD,YAAQ,OAAO,MAAM,uBAAuB,GAAG,KAAK,GAAG;AAAA,CAAI;AAAA,EAC7D,CAAC;AACD,QAAM,WAAoC;AAAA,IACxC,MAAM,IAAI;AAAA,IACV,WAAW,IAAI;AAAA,IACf,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC3B,QAAQ,IAAI;AAAA,IACZ,MAAM,IAAI;AAAA,EACZ;AACA,QAAM,OAAO,KAAK,KAAK,GAAG,IAAI,SAAS,QAAQ;AAC/C,MAAI;AACF,UAAM,WAAW,MAAM,KAAK,UAAU,QAAQ,IAAI,IAAI;AACtD,YAAQ,OAAO;AAAA,MACb,UAAU,IAAI,IAAI,uBAAuB,IAAI,SAAS,WAAW,IAAI,MAAM;AAAA;AAAA,IAC7E;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,OAAO,MAAM,wBAAwB,IAAI,KAAK,GAAG;AAAA,CAAI;AAAA,EAC/D;AACF;AAIA,eAAsB,gBAAgE;AACpF,MAAI;AACF,UAAM,SAAmB,CAAC;AAC1B,qBAAiB,SAAS,QAAQ,OAAO;AACvC,aAAO,KAAK,OAAO,UAAU,WAAW,OAAO,KAAK,KAAK,IAAI,KAAK;AAAA,IACpE;AACA,UAAM,MAAM,OAAO,OAAO,MAAM,EAAE,SAAS,OAAO;AAClD,QAAI,CAAC,IAAK,QAAO;AACjB,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,mBAAmB,KAAK,KAAW;AACjD,QAAM,QAAQ,WAAW,MAAM,QAAQ,KAAK,CAAC,GAAG,EAAE;AAClD,QAAM,MAAM;AACd;;;AE3EA,mBAAmB;AAEnB,eAAe,OAAsB;AACnC,QAAM,IAAI,MAAM,cAAmC;AACnD,MAAI,CAAC,EAAG;AACR,QAAM,YAAY,EAAE;AACpB,MAAI,CAAC,UAAW;AAEhB,QAAM,MAAK,oBAAI,KAAK,GAAE,YAAY;AAClC,QAAM,SAAS,EAAE,UAAU;AAC3B,QAAM,OAA6B;AAAA,IACjC;AAAA,IACA,GAAI,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,IAAI,CAAC;AAAA,IACjE,GAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC;AAAA,EAChC;AAEA,QAAM,WAAiC;AAAA,IACrC,MAAM;AAAA,IACN;AAAA;AAAA;AAAA,IAGA,QAAQ,iBAAiB,EAAE;AAAA,IAC3B;AAAA,EACF,CAAC;AACH;AAEA,KAAK,KAAK,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;","names":[]}
+{"version":3,"sources":["../../src/harness.ts","../../src/hooks/drop.ts","../../src/config.ts","../../src/hooks/session-start.ts"],"sourcesContent":["/**\n * The work harness — where it ships, and what runs it.\n *\n * The harness owns the `work/` tree's invariants: bucket-is-status, tier derivation,\n * the id allocator and the completion gate. It used to live in a Claude Code plugin,\n * which made every write to the board require one vendor's plugin to be installed —\n * so an agent that speaks MCP but is not Claude Code could read the board and could\n * not touch it. It ships inside this package now, and `jarvis work` is the one door\n * onto it.\n *\n * It is Python, and this file is the whole of what Node needs to know about that: a\n * payload directory and an interpreter. Either can be missing, and a missing one is\n * REPORTED — `harness()` still answers, so a board stays readable and a write fails\n * where writes fail. What must not happen is what used to: a raw shell error, several\n * calls after the point where anything could be done about it.\n */\n\nimport { spawnSync } from \"node:child_process\";\nimport { existsSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/** The entry inside the payload. */\nconst ENTRY = join(\"harness\", \"work.py\");\n\n/** Interpreters to try, in order. Both names, because a machine that has Python\n *  under only one of them is common enough that failing on it would be a bug. */\nconst INTERPRETERS = [\"python3\", \"python\"] as const;\n\n/**\n * The oldest Python the payload runs on, proven by running its own suite there.\n *\n * 3.9 rather than something newer on purpose: it is what macOS ships at\n * `/usr/bin/python3`, and therefore what a machine with nothing installed actually\n * has — which is precisely the machine this whole arrangement exists to serve. Two\n * annotations in the payload had to go to keep it, and that was the cheaper side of\n * the trade by a wide margin.\n */\nconst OLDEST = [3, 9] as const;\n\n/** How to run the harness: argv, up to but not including its subcommand. */\nexport type Harness = [command: string, ...args: string[]];\n\n/** What a consumer outside this repo has on its PATH, and the honest thing to\n *  attempt when the payload cannot be resolved from here. */\nconst INSTALLED: Harness = [\"jarvis\", \"work\"];\n\n/**\n * The payload's entry script, or null when this build does not carry one.\n *\n * Resolved by walking up from this module rather than from `process.argv`, because\n * the answer must not depend on how the process was started: `tsx src/bin.ts`, the\n * bundled `dist/bin.js` and a re-spawned daemon all sit at different depths under\n * the same package root, and all three have to find the same files.\n */\nexport function payload(): string | null {\n  let dir = dirname(fileURLToPath(import.meta.url));\n  for (let up = 0; up < 6; up++) {\n    if (existsSync(join(dir, ENTRY))) return join(dir, ENTRY);\n    const parent = dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\n/** The first interpreter on PATH new enough to run the payload, else null. */\nexport function interpreter(): string | null {\n  for (const name of INTERPRETERS) {\n    // The VERSION, not just an exit code. A name can exist on PATH as a stub that is\n    // not a working interpreter — which is what macOS has until the command line\n    // tools are installed — and an interpreter too old to parse the payload fails\n    // with a traceback from inside it, which is the shape of error this whole file\n    // exists to replace.\n    const said = spawnSync(name, [\"--version\"], { encoding: \"utf-8\" });\n    if (said.status !== 0) continue;\n    const version = /(\\d+)\\.(\\d+)/.exec(`${said.stdout}${said.stderr}`);\n    if (!version) continue;\n    const [major, minor] = [Number(version[1]), Number(version[2])];\n    if (major > OLDEST[0] || (major === OLDEST[0] && minor >= OLDEST[1])) return name;\n  }\n  return null;\n}\n\n/**\n * Why the harness cannot be reached from here, or null when it can.\n *\n * Phrased as what to do about it. `jarvis serve` reports this at startup, so it is\n * read by somebody who has just pointed an agent at their repo and has no other clue\n * that the board is about to refuse every write.\n */\nexport function harnessProblem(): string | null {\n  if (!payload()) {\n    return (\n      \"this jarvis build carries no work harness — the board can be read but not \" +\n      \"changed. Reinstall with `npm i -g @appchy/jarvis`.\"\n    );\n  }\n  if (!interpreter()) {\n    return (\n      `the work harness needs Python ${OLDEST[0]}.${OLDEST[1]} or newer and this ` +\n      \"machine has none on its PATH — the board can be read but not changed. \" +\n      \"Install it, then try again.\"\n    );\n  }\n  return null;\n}\n\n/**\n * How to run the harness.\n *\n * Never throws. A board whose harness is unreachable is still a board worth reading,\n * and refusing to build one would take the reads down with the writes; the caller\n * that needs to know asks `harnessProblem()`. The fallback names what a consumer\n * outside this repo actually has, so the failure a caller meets is a missing command\n * rather than a missing file.\n */\nexport function harness(): Harness {\n  const script = payload();\n  const python = interpreter();\n  return script && python ? [python, script] : INSTALLED;\n}\n\n/**\n * The block a session opens with, for the repo at `repo` — or null when there is none.\n *\n * The harness composes every byte of it from that repo's own config: the board, its\n * standards, the decisions it has already taken, what each release is for. Nothing here\n * adds a word, and no caller of this may either — several doors serve these bytes now,\n * and a sentence any one of them typed itself is a sentence they could disagree about.\n *\n * **It never throws and never reports its own failure**, which is unlike everything else\n * in this file. Its first caller is a `SessionStart` hook: a message there greets somebody\n * with an error before they have typed anything, and a missing block is a far smaller harm\n * than a session that opens broken. A caller with somewhere to put a diagnosis asks\n * `harnessProblem()` for one.\n */\nexport function sessionContext(repo: string): string | null {\n  return say([\"context\", \"--project\", repo]);\n}\n\n/**\n * The METHOD in full — how work is done here, on request.\n *\n * Split from {@link sessionContext} rather than folded into it, because the two are\n * asked at different moments and cost two orders of magnitude apart: the block a\n * session opens with is ~670 tokens of derived fact, and this is ~11,000 of prose. One\n * reader still, so a session cannot end up having read a different method than the\n * block told it to go and read.\n */\nexport function sessionMethod(repo: string): string | null {\n  return say([\"method\", \"--project\", repo]);\n}\n\nexport interface EditContextRequest {\n  repo: string;\n  /** Repo-relative path the session is about to write. */\n  file: string;\n  /** Absent means the harness stays silent: it cannot promise once without one. */\n  sessionId?: string;\n}\n\n/**\n * What a session must be told now that it is about to write this file — or null.\n *\n * The judgements no gate can catch, on the first write of a session, and which part of\n * the code it has walked into, the first time it writes under one. Both are the\n * harness's to word and to ration; this hands over a file and a session id and nothing\n * else, the same split {@link wrapReminder} uses.\n *\n * Never throws, for the reason {@link sessionContext} does not: its caller is a hook\n * firing before somebody's edit, and a hook that fails loudly interrupts them to report\n * a problem with a reminder.\n */\nexport function editContext(req: EditContextRequest): string | null {\n  if (!req.file || !req.sessionId) return null;\n  // Tighter than the shared ceiling: this one fires before somebody's edit, and a\n  // rule that arrives seconds after the file was written has already missed.\n  return say(\n    [\"applies\", \"--file\", req.file, \"--project\", req.repo, \"--session\", req.sessionId],\n    2_000,\n  );\n}\n\n/**\n * Everything a machine knows about finishing this session cleanly, for `repo` — or null\n * when the harness cannot answer.\n *\n * It writes nothing. What comes back is what only a machine can say: work that is not\n * in git, items the board still says somebody is on, the descriptions of the world this\n * run changed, what the tree disagrees with itself about, and the derived prompt that\n * opens the next session. The prose is the agent's to write, because a handoff is\n * judgement and a generated one reads as considered while being wrong.\n */\nexport function wrapBrief(repo: string): string | null {\n  return say([\"wrap\", \"--project\", repo]);\n}\n\nexport interface WrapReminderRequest {\n  repo: string;\n  /** Tokens the session is holding right now. Zero or less means unknown. */\n  used: number;\n  sessionId?: string;\n}\n\nexport interface WrapReminderResponse {\n  /** One line, for a surface that shows the reader a notice. */\n  headline: string;\n  /** The whole reminder, for the agent to act on. */\n  note: string;\n}\n\n/**\n * Whether a session this full should be wrapping up, and what that means in `repo`.\n * Null when it should not, or when nothing can be said with confidence.\n *\n * **The measurement is the caller's and the judgement is the harness's**, and the\n * split is not arbitrary. How many tokens a session is holding is a thing only its\n * own client can answer, and every client answers it differently — while the\n * threshold, the wording, the once-a-session rule and whatever the repo adds are the\n * same whoever is asking. So this hands over a number, and a harness command that\n * took one vendor's log file is a harness that works for one vendor.\n *\n * Never throws, for the same reason {@link sessionContext} does not: its caller is a\n * hook, and a hook that fails loudly interrupts somebody mid-thought to report a\n * problem with a reminder.\n */\nexport function wrapReminder(req: WrapReminderRequest): WrapReminderResponse | null {\n  if (!(req.used > 0)) return null;\n  const said = say([\n    \"remind\",\n    \"--used\",\n    String(req.used),\n    \"--project\",\n    req.repo,\n    ...(req.sessionId ? [\"--session\", req.sessionId] : []),\n  ]);\n  if (!said) return null;\n  try {\n    const parsed = JSON.parse(said) as Partial<WrapReminderResponse>;\n    if (!parsed.headline || !parsed.note) return null;\n    return { headline: parsed.headline, note: parsed.note };\n  } catch {\n    return null;\n  }\n}\n\n/**\n * How long a harness call may take before it is killed and read as \"no answer\".\n *\n * **Every caller here is a hook, and `installHookTimeout` cannot save one of them.**\n * That watchdog is a `setTimeout`, and a timer does not fire while a synchronous\n * `spawnSync` holds the thread — so an interpreter that is slow to start (a loaded\n * machine, a scanner intercepting the spawn, a repo on a network mount) blocks the\n * session for as long as it likes, past any ceiling the hook believes it set. The\n * bound has to be on the spawn itself. Generous, because being killed mid-answer is\n * the one failure worse than being slow.\n */\nconst PATIENCE = 10_000;\n\n/** What the harness said, or null — for a caller with nowhere to put a failure. */\nfunction say(args: string[], timeout = PATIENCE): string | null {\n  try {\n    const [command, ...prefix] = harness();\n    const ran = spawnSync(command, [...prefix, ...args], {\n      encoding: \"utf-8\",\n      timeout,\n      env: { ...process.env, PYTHONDONTWRITEBYTECODE: \"1\" },\n    });\n    // A killed child leaves a non-zero status (or none at all), so the timeout reads\n    // as every other failure does: no answer, and nothing said about it.\n    if (ran.status !== 0) return null;\n    return ran.stdout.trim() ? ran.stdout.trimEnd() : null;\n  } catch {\n    return null;\n  }\n}\n","/**\n * Shared helpers for CC hook scripts.\n *\n * Each hook script (pre-tool-use, session-start, stop, …) is a tiny\n * stdin → append-line → exit binary. They all write to the same per-\n * session JSONL at `<hooksDir>/<sessionId>.jsonl`. This module\n * concentrates the envelope shape and the atomic append so the per-\n * hook scripts stay <30 lines each.\n *\n * Hot-path constraints: NEVER block, NEVER network, NEVER read user\n * input. Pure stdin parse + filesystem append + exit. Worst-case one\n * `mkdir` + one `appendFile` per fire.\n */\n\nimport { appendFile, mkdir } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { getHooksDir } from \"../config\";\n\n/** Wire-format envelope written one-per-line to the hook JSONL.\n *  The watcher in `sessions.ts` parses this exact shape — keep in sync. */\nexport interface HookDropEnvelope<TData = unknown> {\n  type: string;\n  sessionId: string;\n  ts: string;\n  /** Idempotency key. Lets the watcher's replay-on-restart skip drops\n   *  whose effects were already emitted (see `HookCursor.applied`). */\n  uniqId: string;\n  data: TData;\n}\n\nexport interface AppendDropRequest<TData> {\n  type: string;\n  sessionId: string;\n  uniqId: string;\n  data: TData;\n}\n\n/** Append one envelope line to the per-session hook JSONL. Atomic between\n *  hook processes via POSIX `O_APPEND` (Node's `fs.appendFile`) — concurrent\n *  appends from different CC sessions / hook types can't interleave bytes\n *  within a line as long as the line stays < `PIPE_BUF` (4KB). Drops are\n *  <1KB in practice, so this is safe without locks.\n *\n *  Stderr logs are written so `tail -f ~/.jarvis/hooks/hook.log` (when\n *  CC pipes hook stderr there, which it does by default) shows what fired.\n *  Stderr never breaks CC — it only watches stdout for decision JSON. */\nexport async function appendDrop<TData>(req: AppendDropRequest<TData>): Promise<void> {\n  if (!req.sessionId || !req.type || !req.uniqId) {\n    process.stderr.write(\n      `[hook] skip ${req.type ?? \"?\"} missing field ` +\n        `sessionId=${!!req.sessionId} uniqId=${!!req.uniqId}\\n`,\n    );\n    return;\n  }\n  const dir = getHooksDir();\n  await mkdir(dir, { recursive: true }).catch((err) => {\n    process.stderr.write(`[hook] mkdir failed ${dir}: ${err}\\n`);\n  });\n  const envelope: HookDropEnvelope<TData> = {\n    type: req.type,\n    sessionId: req.sessionId,\n    ts: new Date().toISOString(),\n    uniqId: req.uniqId,\n    data: req.data,\n  };\n  const file = join(dir, `${req.sessionId}.jsonl`);\n  try {\n    await appendFile(file, JSON.stringify(envelope) + \"\\n\");\n    process.stderr.write(\n      `[hook] ${req.type} appended sessionId=${req.sessionId} uniqId=${req.uniqId}\\n`,\n    );\n  } catch (err) {\n    process.stderr.write(`[hook] append failed ${file}: ${err}\\n`);\n  }\n}\n\n/** Read CC's hook payload from stdin. Returns `null` on parse failure\n *  (never throws — the hook must never block CC). */\nexport async function readHookStdin<T = Record<string, unknown>>(): Promise<T | null> {\n  try {\n    const chunks: Buffer[] = [];\n    for await (const chunk of process.stdin) {\n      chunks.push(typeof chunk === \"string\" ? Buffer.from(chunk) : chunk);\n    }\n    const raw = Buffer.concat(chunks).toString(\"utf-8\");\n    if (!raw) return null;\n    return JSON.parse(raw) as T;\n  } catch {\n    return null;\n  }\n}\n\n/** Hard cap any hook so an exotic stdin stall can't pile up forever\n *  before CC's terminal prompt fires. We exit 0 with no output → CC\n *  proceeds with its normal permission flow. */\nexport function installHookTimeout(ms = 750): void {\n  const timer = setTimeout(() => process.exit(0), ms);\n  timer.unref();\n}\n","/**\n * Agent Config\n *\n * Manages ~/.jarvis/config.json — saved by `jarvis connect <token>`,\n * read on `jarvis start`.\n */\n\nimport fs from \"fs\";\nimport path from \"path\";\nimport os from \"os\";\n\n// =============================================================================\n// Types\n// =============================================================================\n\nexport interface AgentConfig {\n  /** The jarvis this machine joined — the address a person opens in a browser,\n   *  and what pairing talks to. Ours by default; `jarvis init --url <url>` joins\n   *  someone else's. */\n  url?: string;\n  /** WS hub URL this machine dials. Written once, by pairing, from the hub the\n   *  joined instance named — and never from a flag, an environment variable or\n   *  any later command. Re-pointing a machine means unpairing it first. */\n  hubUrl?: string;\n  /** JWT auth token (from connect token) */\n  token?: string;\n  /** Long-lived refresh token for obtaining new access tokens */\n  refreshToken?: string;\n  /** User ID */\n  userId: string;\n  /** Environment ID */\n  envId?: string;\n  /** Workspace root path for repo operations */\n  workspacePath?: string;\n  /** Anthropic API key (for local-only use without cloud) */\n  anthropicApiKey?: string;\n  /** Use Anthropic subscription instead of API key */\n  useSubscription?: boolean;\n  /** When the config was last updated */\n  connectedAt?: string;\n}\n\nexport interface ConnectToken {\n  hubUrl: string;\n  jwt: string;\n  refreshToken: string;\n  userId: string;\n  envId: string;\n}\n\n// =============================================================================\n// Environment\n// =============================================================================\n\n/** The jarvis a machine pairs with when nothing else is named. Only ever read\n *  by pairing: `jarvis init --url <url>` joins someone else's instead, and the\n *  hub URL is whatever that instance hands back. */\nexport const DEFAULT_URL = \"https://jarvis.appchy.com\";\n\n// =============================================================================\n// Config directory\n// =============================================================================\n\n/** The config dir is the machine's identity: what it paired as, and therefore\n *  which hub it dials. One daemon per dir, so a second identity on the same\n *  machine — a storage rig, a localhost instance — is a second dir, named by\n *  `JARVIS_CONFIG_DIR`, never a second binary.\n *\n *  Called fresh on every read so a test that sets `JARVIS_CONFIG_DIR` AFTER\n *  module load still sees the override — caching at module init would lock it\n *  onto the host's real `~/.jarvis/` and leak production state into the\n *  in-memory infra. */\nfunction configDir(): string {\n  if (process.env.JARVIS_CONFIG_DIR) return process.env.JARVIS_CONFIG_DIR;\n  return path.join(os.homedir(), \".jarvis\");\n}\n\nfunction configFile(): string {\n  return path.join(configDir(), \"config.json\");\n}\n\n/** Absolute path to the per-daemon config directory — `~/.jarvis/` unless\n *  `JARVIS_CONFIG_DIR` names another. */\nexport function getConfigDir(): string {\n  return configDir();\n}\n\n/** Per-daemon directory for PreToolUse hook drop files. The CC hook script\n *  writes `<sessionId>/<toolUseId>.json` here; the sessions watcher consumes\n *  them. Each daemon owns the subtree under its own config dir, so a hook\n *  installed for one never feeds another. */\nexport function getHooksDir(): string {\n  return path.join(configDir(), \"hooks\");\n}\n\n// =============================================================================\n// Operations\n// =============================================================================\n\n/** Read the machine's config, accepting the names these two fields used to\n *  carry. `appUrl`/`apiUrl` were renamed on 2026-08-15 — `apiUrl` never held an\n *  API URL, it held the hub's. A config written before that still loads, and\n *  `saveConfig` only ever writes the current names, so a machine heals itself on\n *  its next write with nothing to run. Delete this tolerance once no config\n *  predating the rename is in use. */\nexport function loadConfig(): AgentConfig | null {\n  try {\n    const stored = JSON.parse(fs.readFileSync(configFile(), \"utf-8\")) as AgentConfig &\n      Partial<{ appUrl: string; apiUrl: string }>;\n    const { appUrl, apiUrl, ...config } = stored;\n    const url = config.url ?? appUrl;\n    const hubUrl = config.hubUrl ?? apiUrl;\n    return {\n      ...config,\n      ...(url !== undefined ? { url } : {}),\n      ...(hubUrl !== undefined ? { hubUrl } : {}),\n    };\n  } catch {\n    return null;\n  }\n}\n\n/** Persist the machine's config.\n *\n *  Refuses to move an already-paired machine to a different hub. A machine that\n *  joins the wrong control plane hands it credentials, so re-pointing one is a\n *  deliberate act — `jarvis unpair` (which clears the config) and then pair\n *  again — rather than something a stale token or a mistyped command can do on\n *  its way past. Re-pairing to the same hub is unaffected. */\nexport function saveConfig(config: AgentConfig): void {\n  const paired = loadConfig();\n  if (paired?.hubUrl && config.hubUrl && config.hubUrl !== paired.hubUrl) {\n    throw new Error(\n      `This machine is paired with ${paired.hubUrl} and cannot be moved to ${config.hubUrl}.\\n` +\n        `  Run 'jarvis unpair' first if you mean to join a different jarvis.`,\n    );\n  }\n  fs.mkdirSync(configDir(), { recursive: true });\n  fs.writeFileSync(configFile(), JSON.stringify(config, null, 2) + \"\\n\");\n}\n\nexport function clearConfig(): void {\n  try {\n    fs.unlinkSync(configFile());\n  } catch {}\n}\n\nexport function parseConnectToken(token: string): ConnectToken {\n  try {\n    const decoded = Buffer.from(token, \"base64\").toString(\"utf-8\");\n    const parsed = JSON.parse(decoded);\n    if (!parsed.hubUrl || !parsed.jwt || !parsed.userId) {\n      throw new Error(\"Invalid token: missing required fields (hubUrl, jwt, userId)\");\n    }\n    return parsed as ConnectToken;\n  } catch (err) {\n    if (err instanceof SyntaxError) {\n      throw new Error(\"Invalid token: not valid base64-encoded JSON\");\n    }\n    throw err;\n  }\n}\n\nexport function getConfigPath(): string {\n  return configFile();\n}\n","/**\n * SessionStart hook — two jobs, and neither may cost the other.\n *\n * It PRINTS the standing obligations for the repo the session is opening in, and it\n * drops an envelope the daemon uses to surface new external CC sessions in web/mobile\n * before CC's JSONL has been fully parsed — eliminating the chokidar parse latency for\n * fresh sessions.\n *\n * The print used to belong to a Claude Code plugin, which meant the one surface a\n * session cannot skip was the one surface that required a plugin. It moved here so the\n * plugin can go.\n *\n * **The print is not conditional on anything the envelope needs.** A payload with no\n * session id still gets the block, and so does one that fails to parse at all: the\n * envelope is a message to a daemon that may not be running, while the block is what\n * the person in front of the terminal is about to work from.\n */\n\nimport { sessionContext } from \"../harness\";\nimport { appendDrop, installHookTimeout, readHookStdin } from \"./drop\";\n\ninterface CcSessionStartInput {\n  session_id?: string;\n  transcript_path?: string;\n  cwd?: string;\n  /** \"startup\" (fresh CLI), \"resume\" (--resume <id>), \"clear\" (/clear), \"compact\". */\n  source?: string;\n}\n\ninterface SessionStartDropData {\n  source: string;\n  transcriptPath?: string;\n  cwd?: string;\n}\n\n// Longer than the other hooks', because here the deadline can cost something. The\n// watchdog exits 0 with no output, and for this hook no output is a session opening\n// with no standards, no board and no method — so it is set to outlast the harness\n// (~0.4s on a warm repo) rather than to the reflex of a hook that only appends a line.\ninstallHookTimeout(8_000);\n\nasync function main(): Promise<void> {\n  const p = await readHookStdin<CcSessionStartInput>();\n\n  // Read from the environment first: CC sets it to the project ROOT, while `cwd` is\n  // wherever the session happens to have been opened, which may be a subdirectory with\n  // no config of its own.\n  const repo = process.env.CLAUDE_PROJECT_DIR ?? p?.cwd ?? process.cwd();\n  const block = sessionContext(repo);\n  if (block) process.stdout.write(`${block}\\n`);\n\n  const sessionId = p?.session_id;\n  if (!sessionId) return;\n\n  const ts = new Date().toISOString();\n  const source = p?.source ?? \"startup\";\n  const data: SessionStartDropData = {\n    source,\n    ...(p?.transcript_path ? { transcriptPath: p.transcript_path } : {}),\n    ...(p?.cwd ? { cwd: p.cwd } : {}),\n  };\n\n  await appendDrop<SessionStartDropData>({\n    type: \"session-start\",\n    sessionId,\n    // ts-based uniqId — SessionStart can fire multiple times per session\n    // over its lifetime (e.g. one `startup` then later `resume`).\n    uniqId: `session-start-${ts}`,\n    data,\n  });\n}\n\nvoid main().finally(() => process.exit(0));\n"],"mappings":";;;AAiBA,SAAS,iBAAiB;AAC1B,SAAS,kBAAkB;AAC3B,SAAS,SAAS,YAAY;AAC9B,SAAS,qBAAqB;AAG9B,IAAM,QAAQ,KAAK,WAAW,SAAS;AAIvC,IAAM,eAAe,CAAC,WAAW,QAAQ;AAWzC,IAAM,SAAS,CAAC,GAAG,CAAC;AAOpB,IAAM,YAAqB,CAAC,UAAU,MAAM;AAUrC,SAAS,UAAyB;AACvC,MAAI,MAAM,QAAQ,cAAc,YAAY,GAAG,CAAC;AAChD,WAAS,KAAK,GAAG,KAAK,GAAG,MAAM;AAC7B,QAAI,WAAW,KAAK,KAAK,KAAK,CAAC,EAAG,QAAO,KAAK,KAAK,KAAK;AACxD,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,IAAK;AACpB,UAAM;AAAA,EACR;AACA,SAAO;AACT;AAGO,SAAS,cAA6B;AAC3C,aAAW,QAAQ,cAAc;AAM/B,UAAM,OAAO,UAAU,MAAM,CAAC,WAAW,GAAG,EAAE,UAAU,QAAQ,CAAC;AACjE,QAAI,KAAK,WAAW,EAAG;AACvB,UAAM,UAAU,eAAe,KAAK,GAAG,KAAK,MAAM,GAAG,KAAK,MAAM,EAAE;AAClE,QAAI,CAAC,QAAS;AACd,UAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,QAAQ,CAAC,CAAC,GAAG,OAAO,QAAQ,CAAC,CAAC,CAAC;AAC9D,QAAI,QAAQ,OAAO,CAAC,KAAM,UAAU,OAAO,CAAC,KAAK,SAAS,OAAO,CAAC,EAAI,QAAO;AAAA,EAC/E;AACA,SAAO;AACT;AAmCO,SAAS,UAAmB;AACjC,QAAM,SAAS,QAAQ;AACvB,QAAM,SAAS,YAAY;AAC3B,SAAO,UAAU,SAAS,CAAC,QAAQ,MAAM,IAAI;AAC/C;AAgBO,SAAS,eAAe,MAA6B;AAC1D,SAAO,IAAI,CAAC,WAAW,aAAa,IAAI,CAAC;AAC3C;AAuHA,IAAM,WAAW;AAGjB,SAAS,IAAI,MAAgB,UAAU,UAAyB;AAC9D,MAAI;AACF,UAAM,CAAC,SAAS,GAAG,MAAM,IAAI,QAAQ;AACrC,UAAM,MAAM,UAAU,SAAS,CAAC,GAAG,QAAQ,GAAG,IAAI,GAAG;AAAA,MACnD,UAAU;AAAA,MACV;AAAA,MACA,KAAK,EAAE,GAAG,QAAQ,KAAK,yBAAyB,IAAI;AAAA,IACtD,CAAC;AAGD,QAAI,IAAI,WAAW,EAAG,QAAO;AAC7B,WAAO,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,QAAQ,IAAI;AAAA,EACpD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACtQA,SAAS,YAAY,aAAa;AAClC,SAAS,QAAAA,aAAY;;;ACPrB,OAAO,UAAU;AACjB,OAAO,QAAQ;AA+Df,SAAS,YAAoB;AAC3B,MAAI,QAAQ,IAAI,kBAAmB,QAAO,QAAQ,IAAI;AACtD,SAAO,KAAK,KAAK,GAAG,QAAQ,GAAG,SAAS;AAC1C;AAgBO,SAAS,cAAsB;AACpC,SAAO,KAAK,KAAK,UAAU,GAAG,OAAO;AACvC;;;AD9CA,eAAsB,WAAkB,KAA8C;AACpF,MAAI,CAAC,IAAI,aAAa,CAAC,IAAI,QAAQ,CAAC,IAAI,QAAQ;AAC9C,YAAQ,OAAO;AAAA,MACb,eAAe,IAAI,QAAQ,GAAG,4BACf,CAAC,CAAC,IAAI,SAAS,WAAW,CAAC,CAAC,IAAI,MAAM;AAAA;AAAA,IACvD;AACA;AAAA,EACF;AACA,QAAM,MAAM,YAAY;AACxB,QAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACnD,YAAQ,OAAO,MAAM,uBAAuB,GAAG,KAAK,GAAG;AAAA,CAAI;AAAA,EAC7D,CAAC;AACD,QAAM,WAAoC;AAAA,IACxC,MAAM,IAAI;AAAA,IACV,WAAW,IAAI;AAAA,IACf,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC3B,QAAQ,IAAI;AAAA,IACZ,MAAM,IAAI;AAAA,EACZ;AACA,QAAM,OAAOC,MAAK,KAAK,GAAG,IAAI,SAAS,QAAQ;AAC/C,MAAI;AACF,UAAM,WAAW,MAAM,KAAK,UAAU,QAAQ,IAAI,IAAI;AACtD,YAAQ,OAAO;AAAA,MACb,UAAU,IAAI,IAAI,uBAAuB,IAAI,SAAS,WAAW,IAAI,MAAM;AAAA;AAAA,IAC7E;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,OAAO,MAAM,wBAAwB,IAAI,KAAK,GAAG;AAAA,CAAI;AAAA,EAC/D;AACF;AAIA,eAAsB,gBAAgE;AACpF,MAAI;AACF,UAAM,SAAmB,CAAC;AAC1B,qBAAiB,SAAS,QAAQ,OAAO;AACvC,aAAO,KAAK,OAAO,UAAU,WAAW,OAAO,KAAK,KAAK,IAAI,KAAK;AAAA,IACpE;AACA,UAAM,MAAM,OAAO,OAAO,MAAM,EAAE,SAAS,OAAO;AAClD,QAAI,CAAC,IAAK,QAAO;AACjB,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,mBAAmB,KAAK,KAAW;AACjD,QAAM,QAAQ,WAAW,MAAM,QAAQ,KAAK,CAAC,GAAG,EAAE;AAClD,QAAM,MAAM;AACd;;;AE5DA,mBAAmB,GAAK;AAExB,eAAe,OAAsB;AACnC,QAAM,IAAI,MAAM,cAAmC;AAKnD,QAAM,OAAO,QAAQ,IAAI,sBAAsB,GAAG,OAAO,QAAQ,IAAI;AACrE,QAAM,QAAQ,eAAe,IAAI;AACjC,MAAI,MAAO,SAAQ,OAAO,MAAM,GAAG,KAAK;AAAA,CAAI;AAE5C,QAAM,YAAY,GAAG;AACrB,MAAI,CAAC,UAAW;AAEhB,QAAM,MAAK,oBAAI,KAAK,GAAE,YAAY;AAClC,QAAM,SAAS,GAAG,UAAU;AAC5B,QAAM,OAA6B;AAAA,IACjC;AAAA,IACA,GAAI,GAAG,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,IAAI,CAAC;AAAA,IAClE,GAAI,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC;AAAA,EACjC;AAEA,QAAM,WAAiC;AAAA,IACrC,MAAM;AAAA,IACN;AAAA;AAAA;AAAA,IAGA,QAAQ,iBAAiB,EAAE;AAAA,IAC3B;AAAA,EACF,CAAC;AACH;AAEA,KAAK,KAAK,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;","names":["join","join"]}

package/dist/hooks/stop.js

@@ -1,37 +1,90 @@
 import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
 
+// src/hooks/stop.ts
+import { open } from "fs/promises";
+import { existsSync as existsSync2 } from "fs";
+import { join as join3 } from "path";
+
+// src/harness.ts
+import { spawnSync } from "child_process";
+import { existsSync } from "fs";
+import { dirname, join } from "path";
+import { fileURLToPath } from "url";
+var ENTRY = join("harness", "work.py");
+var INTERPRETERS = ["python3", "python"];
+var OLDEST = [3, 9];
+var INSTALLED = ["jarvis", "work"];
+function payload() {
+  let dir = dirname(fileURLToPath(import.meta.url));
+  for (let up = 0; up < 6; up++) {
+    if (existsSync(join(dir, ENTRY))) return join(dir, ENTRY);
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return null;
+}
+function interpreter() {
+  for (const name of INTERPRETERS) {
+    const said = spawnSync(name, ["--version"], { encoding: "utf-8" });
+    if (said.status !== 0) continue;
+    const version = /(\d+)\.(\d+)/.exec(`${said.stdout}${said.stderr}`);
+    if (!version) continue;
+    const [major, minor] = [Number(version[1]), Number(version[2])];
+    if (major > OLDEST[0] || major === OLDEST[0] && minor >= OLDEST[1]) return name;
+  }
+  return null;
+}
+function harness() {
+  const script = payload();
+  const python = interpreter();
+  return script && python ? [python, script] : INSTALLED;
+}
+function wrapReminder(req) {
+  if (!(req.used > 0)) return null;
+  const said = say([
+    "remind",
+    "--used",
+    String(req.used),
+    "--project",
+    req.repo,
+    ...req.sessionId ? ["--session", req.sessionId] : []
+  ]);
+  if (!said) return null;
+  try {
+    const parsed = JSON.parse(said);
+    if (!parsed.headline || !parsed.note) return null;
+    return { headline: parsed.headline, note: parsed.note };
+  } catch {
+    return null;
+  }
+}
+var PATIENCE = 1e4;
+function say(args, timeout = PATIENCE) {
+  try {
+    const [command, ...prefix] = harness();
+    const ran = spawnSync(command, [...prefix, ...args], {
+      encoding: "utf-8",
+      timeout,
+      env: { ...process.env, PYTHONDONTWRITEBYTECODE: "1" }
+    });
+    if (ran.status !== 0) return null;
+    return ran.stdout.trim() ? ran.stdout.trimEnd() : null;
+  } catch {
+    return null;
+  }
+}
+
 // src/hooks/drop.ts
 import { appendFile, mkdir } from "fs/promises";
-import { join } from "path";
+import { join as join2 } from "path";
 
 // src/config.ts
-import fs from "fs";
 import path from "path";
 import os from "os";
-import { fileURLToPath } from "url";
-var __filename = fileURLToPath(import.meta.url);
-var __dirname = path.dirname(__filename);
-function isDev() {
-  const candidates = [
-    path.join(__dirname, "env.json"),
-    path.join(__dirname, "..", "env.json")
-  ];
-  for (const envFile of candidates) {
-    try {
-      const data = JSON.parse(fs.readFileSync(envFile, "utf-8"));
-      return data.env === "development";
-    } catch {
-    }
-  }
-  return false;
-}
-function resolveConfigDir() {
-  if (process.env.JARVIS_CONFIG_DIR) return process.env.JARVIS_CONFIG_DIR;
-  const base = path.join(os.homedir(), ".jarvis");
-  return isDev() ? path.join(base, "dev") : base;
-}
 function configDir() {
-  return resolveConfigDir();
+  if (process.env.JARVIS_CONFIG_DIR) return process.env.JARVIS_CONFIG_DIR;
+  return path.join(os.homedir(), ".jarvis");
 }
 function getHooksDir() {
   return path.join(configDir(), "hooks");
@@ -39,9 +92,9 @@ function getHooksDir() {
 
 // src/hooks/drop.ts
 async function appendDrop(req) {
-  if (!req.sessionId || !req.kind || !req.uniqId) {
+  if (!req.sessionId || !req.type || !req.uniqId) {
     process.stderr.write(
-      `[hook] skip ${req.kind ?? "?"} missing field sessionId=${!!req.sessionId} uniqId=${!!req.uniqId}
+      `[hook] skip ${req.type ?? "?"} missing field sessionId=${!!req.sessionId} uniqId=${!!req.uniqId}
 `
     );
     return;
@@ -52,17 +105,17 @@ async function appendDrop(req) {
 `);
   });
   const envelope = {
-    kind: req.kind,
+    type: req.type,
     sessionId: req.sessionId,
     ts: (/* @__PURE__ */ new Date()).toISOString(),
     uniqId: req.uniqId,
     data: req.data
   };
-  const file = join(dir, `${req.sessionId}.jsonl`);
+  const file = join2(dir, `${req.sessionId}.jsonl`);
   try {
     await appendFile(file, JSON.stringify(envelope) + "\n");
     process.stderr.write(
-      `[hook] ${req.kind} appended sessionId=${req.sessionId} uniqId=${req.uniqId}
+      `[hook] ${req.type} appended sessionId=${req.sessionId} uniqId=${req.uniqId}
 `
     );
   } catch (err) {
@@ -89,7 +142,9 @@ function installHookTimeout(ms = 750) {
 }
 
 // src/hooks/stop.ts
-installHookTimeout();
+var TAIL_BYTES = 256 * 1024;
+var TAIL_MAX = 8 * 1024 * 1024;
+installHookTimeout(5e3);
 async function main() {
   const p = await readHookStdin();
   if (!p) return;
@@ -102,11 +157,64 @@ async function main() {
     ...p.cwd ? { cwd: p.cwd } : {}
   };
   await appendDrop({
-    kind: "stop",
+    type: "stop",
     sessionId,
     uniqId: `stop-${ts}`,
     data
   });
+  await remind(p, sessionId);
+}
+async function remind(p, sessionId) {
+  const repo = process.env.CLAUDE_PROJECT_DIR ?? p.cwd;
+  if (!repo || !p.transcript_path) return;
+  if (!existsSync2(join3(repo, ".claude", "work.config.json"))) return;
+  const used = await measureContext(p.transcript_path);
+  const said = wrapReminder({ repo, used, sessionId });
+  if (!said) return;
+  process.stdout.write(
+    JSON.stringify({
+      systemMessage: said.headline,
+      hookSpecificOutput: { hookEventName: "Stop", additionalContext: said.note }
+    })
+  );
+}
+async function measureContext(transcript) {
+  let handle;
+  try {
+    handle = await open(transcript, "r");
+    const { size } = await handle.stat();
+    let want = TAIL_BYTES;
+    for (; ; ) {
+      const from = Math.max(0, size - want);
+      const buffer = Buffer.alloc(Math.min(want, size));
+      await handle.read(buffer, 0, buffer.length, from);
+      const lines = buffer.toString("utf-8").split("\n");
+      if (from > 0) lines.shift();
+      for (let i = lines.length - 1; i >= 0; i--) {
+        const used = tokensIn(lines[i] ?? "");
+        if (used) return used;
+      }
+      if (from === 0 || want >= TAIL_MAX) return 0;
+      want = Math.min(want * 2, TAIL_MAX);
+    }
+  } catch {
+    return 0;
+  } finally {
+    await handle?.close().catch(() => {
+    });
+  }
+}
+function tokensIn(line) {
+  if (!line.trim()) return 0;
+  try {
+    const record = JSON.parse(line);
+    if (record.isSidechain) return 0;
+    const usage = record.message?.usage;
+    if (!usage) return 0;
+    return (usage.input_tokens ?? 0) + (usage.cache_creation_input_tokens ?? 0) + (usage.cache_read_input_tokens ?? 0);
+  } catch {
+    return 0;
+  }
 }
 void main().finally(() => process.exit(0));
 //# sourceMappingURL=stop.js.map

package/dist/hooks/stop.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/hooks/drop.ts","../../src/config.ts","../../src/hooks/stop.ts"],"sourcesContent":["/**\n * Shared helpers for CC hook scripts.\n *\n * Each hook script (pre-tool-use, session-start, stop, …) is a tiny\n * stdin → append-line → exit binary. They all write to the same per-\n * session JSONL at `<hooksDir>/<sessionId>.jsonl`. This module\n * concentrates the envelope shape and the atomic append so the per-\n * hook scripts stay <30 lines each.\n *\n * Hot-path constraints: NEVER block, NEVER network, NEVER read user\n * input. Pure stdin parse + filesystem append + exit. Worst-case one\n * `mkdir` + one `appendFile` per fire.\n */\n\nimport { appendFile, mkdir } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { getHooksDir } from \"../config\";\n\n/** Wire-format envelope written one-per-line to the hook JSONL.\n *  The watcher in `sessions.ts` parses this exact shape — keep in sync. */\nexport interface HookDropEnvelope<TData = unknown> {\n  kind: string;\n  sessionId: string;\n  ts: string;\n  /** Idempotency key. Lets the watcher's replay-on-restart skip drops\n   *  whose effects were already emitted (see `HookCursor.applied`). */\n  uniqId: string;\n  data: TData;\n}\n\nexport interface AppendDropRequest<TData> {\n  kind: string;\n  sessionId: string;\n  uniqId: string;\n  data: TData;\n}\n\n/** Append one envelope line to the per-session hook JSONL. Atomic between\n *  hook processes via POSIX `O_APPEND` (Node's `fs.appendFile`) — concurrent\n *  appends from different CC sessions / hook kinds can't interleave bytes\n *  within a line as long as the line stays < `PIPE_BUF` (4KB). Drops are\n *  <1KB in practice, so this is safe without locks.\n *\n *  Stderr logs are written so `tail -f ~/.jarvis[/dev]/hooks/hook.log` (when\n *  CC pipes hook stderr there, which it does by default) shows what fired.\n *  Stderr never breaks CC — it only watches stdout for decision JSON. */\nexport async function appendDrop<TData>(req: AppendDropRequest<TData>): Promise<void> {\n  if (!req.sessionId || !req.kind || !req.uniqId) {\n    process.stderr.write(\n      `[hook] skip ${req.kind ?? \"?\"} missing field ` +\n        `sessionId=${!!req.sessionId} uniqId=${!!req.uniqId}\\n`,\n    );\n    return;\n  }\n  const dir = getHooksDir();\n  await mkdir(dir, { recursive: true }).catch((err) => {\n    process.stderr.write(`[hook] mkdir failed ${dir}: ${err}\\n`);\n  });\n  const envelope: HookDropEnvelope<TData> = {\n    kind: req.kind,\n    sessionId: req.sessionId,\n    ts: new Date().toISOString(),\n    uniqId: req.uniqId,\n    data: req.data,\n  };\n  const file = join(dir, `${req.sessionId}.jsonl`);\n  try {\n    await appendFile(file, JSON.stringify(envelope) + \"\\n\");\n    process.stderr.write(\n      `[hook] ${req.kind} appended sessionId=${req.sessionId} uniqId=${req.uniqId}\\n`,\n    );\n  } catch (err) {\n    process.stderr.write(`[hook] append failed ${file}: ${err}\\n`);\n  }\n}\n\n/** Read CC's hook payload from stdin. Returns `null` on parse failure\n *  (never throws — the hook must never block CC). */\nexport async function readHookStdin<T = Record<string, unknown>>(): Promise<T | null> {\n  try {\n    const chunks: Buffer[] = [];\n    for await (const chunk of process.stdin) {\n      chunks.push(typeof chunk === \"string\" ? Buffer.from(chunk) : chunk);\n    }\n    const raw = Buffer.concat(chunks).toString(\"utf-8\");\n    if (!raw) return null;\n    return JSON.parse(raw) as T;\n  } catch {\n    return null;\n  }\n}\n\n/** Hard cap any hook so an exotic stdin stall can't pile up forever\n *  before CC's terminal prompt fires. We exit 0 with no output → CC\n *  proceeds with its normal permission flow. */\nexport function installHookTimeout(ms = 750): void {\n  const timer = setTimeout(() => process.exit(0), ms);\n  timer.unref();\n}\n","/**\n * Agent Config\n *\n * Manages ~/.jarvis/config.json — saved by `jarvis connect <token>`,\n * read on `jarvis start`.\n */\n\nimport fs from \"fs\";\nimport path from \"path\";\nimport os from \"os\";\nimport { fileURLToPath } from \"url\";\n\n// =============================================================================\n// Types\n// =============================================================================\n\nexport interface AgentConfig {\n  /** Cloud WS API URL (from connect token) */\n  apiUrl?: string;\n  /** JWT auth token (from connect token) */\n  token?: string;\n  /** Long-lived refresh token for obtaining new access tokens */\n  refreshToken?: string;\n  /** User ID */\n  userId: string;\n  /** Environment ID */\n  envId?: string;\n  /** Workspace root path for repo operations */\n  workspacePath?: string;\n  /** Web app URL for browser-based auth */\n  appUrl?: string;\n  /** Anthropic API key (for local-only use without cloud) */\n  anthropicApiKey?: string;\n  /** Use Anthropic subscription instead of API key */\n  useSubscription?: boolean;\n  /** When the config was last updated */\n  connectedAt?: string;\n}\n\nexport interface ConnectToken {\n  apiUrl: string;\n  jwt: string;\n  refreshToken: string;\n  userId: string;\n  envId: string;\n}\n\n// =============================================================================\n// Paths\n// =============================================================================\n\n// =============================================================================\n// Environment (single source of truth)\n// =============================================================================\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = path.dirname(__filename);\n\n/** Single source of truth for dev vs prod.\n *  Two locations, picked by which file is shipped:\n *    Dev:  apps/cli/env.json     (committed, `{ \"env\": \"development\" }`)\n *    Prod: apps/cli/dist/env.json (written by tsup build, `{ \"env\": \"production\" }`)\n *  We try the prod-style sibling first (next to bin.js when bundled), then fall\n *  back to the dev-style parent path (one up from src/config.ts). The prod bundle\n *  has no `..` parent env.json, and the dev source tree has no sibling env.json,\n *  so the two never collide. Safe default if neither exists: prod. */\nexport function isDev(): boolean {\n  const candidates = [\n    path.join(__dirname, \"env.json\"),\n    path.join(__dirname, \"..\", \"env.json\"),\n  ];\n  for (const envFile of candidates) {\n    try {\n      const data = JSON.parse(fs.readFileSync(envFile, \"utf-8\"));\n      return data.env === \"development\";\n    } catch {\n      /* try next candidate */\n    }\n  }\n  return false;\n}\n\nconst PROD_APP_URL = \"https://jarvis.appchy.com\";\nconst DEV_APP_URL = \"http://localhost:3000\";\n\nconst PROD_WS_URL = \"wss://jarvis.appchy.com/ws\";\nconst DEV_WS_URL = \"ws://localhost:7863\";\n\n/** App URL for the current environment. */\nexport function getDefaultAppUrl(): string {\n  return isDev() ? (process.env.APP_URL || DEV_APP_URL) : PROD_APP_URL;\n}\n\n/** WS hub URL for the current environment. Hardcoded per build so the prod\n *  binary can never subscribe to the dev hub (or vice versa) regardless of\n *  what's stored in `config.apiUrl`. Dev permits a `JARVIS_UPSTREAM_URL`\n *  override for tests/CI on a non-default port; prod has no escape hatch. */\nexport function getDefaultWsUrl(): string {\n  return isDev() ? (process.env.JARVIS_UPSTREAM_URL || DEV_WS_URL) : PROD_WS_URL;\n}\n\n// =============================================================================\n// Config directory\n// =============================================================================\n\n/** Determine config directory.\n *  - JARVIS_CONFIG_DIR env var takes priority (escape hatch for CI/testing)\n *  - dev → ~/.jarvis/dev/\n *  - prod → ~/.jarvis/\n *\n *  Called fresh on every read so test environments that set\n *  `JARVIS_CONFIG_DIR` AFTER module load still see the override — caching\n *  the value at module init would lock tests onto the host's real\n *  `~/.jarvis/dev/` and leak production state into the in-memory infra. */\nfunction resolveConfigDir(): string {\n  if (process.env.JARVIS_CONFIG_DIR) return process.env.JARVIS_CONFIG_DIR;\n  const base = path.join(os.homedir(), \".jarvis\");\n  return isDev() ? path.join(base, \"dev\") : base;\n}\n\nfunction configDir(): string {\n  return resolveConfigDir();\n}\n\nfunction configFile(): string {\n  return path.join(configDir(), \"config.json\");\n}\n\n/** Absolute path to the per-daemon config directory.\n *  `prod` → `~/.jarvis/`, `dev` → `~/.jarvis/dev/`. */\nexport function getConfigDir(): string {\n  return configDir();\n}\n\n/** Per-daemon directory for PreToolUse hook drop files. The CC hook script\n *  writes `<sessionId>/<toolUseId>.json` here; the sessions watcher consumes\n *  them. Prod and dev daemons each own their own subtree so a hook installed\n *  for one never feeds the other. */\nexport function getHooksDir(): string {\n  return path.join(configDir(), \"hooks\");\n}\n\n// =============================================================================\n// Operations\n// =============================================================================\n\nexport function loadConfig(): AgentConfig | null {\n  try {\n    const raw = fs.readFileSync(configFile(), \"utf-8\");\n    return JSON.parse(raw) as AgentConfig;\n  } catch {\n    return null;\n  }\n}\n\nexport function saveConfig(config: AgentConfig): void {\n  fs.mkdirSync(configDir(), { recursive: true });\n  fs.writeFileSync(configFile(), JSON.stringify(config, null, 2) + \"\\n\");\n}\n\nexport function clearConfig(): void {\n  try {\n    fs.unlinkSync(configFile());\n  } catch {}\n}\n\nexport function parseConnectToken(token: string): ConnectToken {\n  try {\n    const decoded = Buffer.from(token, \"base64\").toString(\"utf-8\");\n    const parsed = JSON.parse(decoded);\n    if (!parsed.apiUrl || !parsed.jwt || !parsed.userId) {\n      throw new Error(\"Invalid token: missing required fields (apiUrl, jwt, userId)\");\n    }\n    return parsed as ConnectToken;\n  } catch (err) {\n    if (err instanceof SyntaxError) {\n      throw new Error(\"Invalid token: not valid base64-encoded JSON\");\n    }\n    throw err;\n  }\n}\n\nexport function getConfigPath(): string {\n  return configFile();\n}\n","/**\n * Stop hook — drops an envelope when CC's main agent finishes responding.\n *\n * Used by the daemon to flip \"thinking…\" indicators off in web/mobile\n * instantly, instead of waiting for CC's JSONL writes to settle and the\n * watcher's debounced tail to fire.\n */\n\nimport { appendDrop, installHookTimeout, readHookStdin } from \"./drop\";\n\ninterface CcStopInput {\n  session_id?: string;\n  transcript_path?: string;\n  cwd?: string;\n  /** True iff this Stop was triggered by a hook (recursion guard). We\n   *  forward it so the daemon can ignore self-induced stops if needed. */\n  stop_hook_active?: boolean;\n}\n\ninterface StopDropData {\n  stopHookActive: boolean;\n  transcriptPath?: string;\n  cwd?: string;\n}\n\ninstallHookTimeout();\n\nasync function main(): Promise<void> {\n  const p = await readHookStdin<CcStopInput>();\n  if (!p) return;\n  const sessionId = p.session_id;\n  if (!sessionId) return;\n\n  const ts = new Date().toISOString();\n  const data: StopDropData = {\n    stopHookActive: !!p.stop_hook_active,\n    ...(p.transcript_path ? { transcriptPath: p.transcript_path } : {}),\n    ...(p.cwd ? { cwd: p.cwd } : {}),\n  };\n\n  await appendDrop<StopDropData>({\n    kind: \"stop\",\n    sessionId,\n    uniqId: `stop-${ts}`,\n    data,\n  });\n}\n\nvoid main().finally(() => process.exit(0));\n"],"mappings":";;;AAcA,SAAS,YAAY,aAAa;AAClC,SAAS,YAAY;;;ACRrB,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,OAAO,QAAQ;AACf,SAAS,qBAAqB;AA6C9B,IAAM,aAAa,cAAc,YAAY,GAAG;AAChD,IAAM,YAAY,KAAK,QAAQ,UAAU;AAUlC,SAAS,QAAiB;AAC/B,QAAM,aAAa;AAAA,IACjB,KAAK,KAAK,WAAW,UAAU;AAAA,IAC/B,KAAK,KAAK,WAAW,MAAM,UAAU;AAAA,EACvC;AACA,aAAW,WAAW,YAAY;AAChC,QAAI;AACF,YAAM,OAAO,KAAK,MAAM,GAAG,aAAa,SAAS,OAAO,CAAC;AACzD,aAAO,KAAK,QAAQ;AAAA,IACtB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAkCA,SAAS,mBAA2B;AAClC,MAAI,QAAQ,IAAI,kBAAmB,QAAO,QAAQ,IAAI;AACtD,QAAM,OAAO,KAAK,KAAK,GAAG,QAAQ,GAAG,SAAS;AAC9C,SAAO,MAAM,IAAI,KAAK,KAAK,MAAM,KAAK,IAAI;AAC5C;AAEA,SAAS,YAAoB;AAC3B,SAAO,iBAAiB;AAC1B;AAgBO,SAAS,cAAsB;AACpC,SAAO,KAAK,KAAK,UAAU,GAAG,OAAO;AACvC;;;AD7FA,eAAsB,WAAkB,KAA8C;AACpF,MAAI,CAAC,IAAI,aAAa,CAAC,IAAI,QAAQ,CAAC,IAAI,QAAQ;AAC9C,YAAQ,OAAO;AAAA,MACb,eAAe,IAAI,QAAQ,GAAG,4BACf,CAAC,CAAC,IAAI,SAAS,WAAW,CAAC,CAAC,IAAI,MAAM;AAAA;AAAA,IACvD;AACA;AAAA,EACF;AACA,QAAM,MAAM,YAAY;AACxB,QAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACnD,YAAQ,OAAO,MAAM,uBAAuB,GAAG,KAAK,GAAG;AAAA,CAAI;AAAA,EAC7D,CAAC;AACD,QAAM,WAAoC;AAAA,IACxC,MAAM,IAAI;AAAA,IACV,WAAW,IAAI;AAAA,IACf,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC3B,QAAQ,IAAI;AAAA,IACZ,MAAM,IAAI;AAAA,EACZ;AACA,QAAM,OAAO,KAAK,KAAK,GAAG,IAAI,SAAS,QAAQ;AAC/C,MAAI;AACF,UAAM,WAAW,MAAM,KAAK,UAAU,QAAQ,IAAI,IAAI;AACtD,YAAQ,OAAO;AAAA,MACb,UAAU,IAAI,IAAI,uBAAuB,IAAI,SAAS,WAAW,IAAI,MAAM;AAAA;AAAA,IAC7E;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,OAAO,MAAM,wBAAwB,IAAI,KAAK,GAAG;AAAA,CAAI;AAAA,EAC/D;AACF;AAIA,eAAsB,gBAAgE;AACpF,MAAI;AACF,UAAM,SAAmB,CAAC;AAC1B,qBAAiB,SAAS,QAAQ,OAAO;AACvC,aAAO,KAAK,OAAO,UAAU,WAAW,OAAO,KAAK,KAAK,IAAI,KAAK;AAAA,IACpE;AACA,UAAM,MAAM,OAAO,OAAO,MAAM,EAAE,SAAS,OAAO;AAClD,QAAI,CAAC,IAAK,QAAO;AACjB,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,mBAAmB,KAAK,KAAW;AACjD,QAAM,QAAQ,WAAW,MAAM,QAAQ,KAAK,CAAC,GAAG,EAAE;AAClD,QAAM,MAAM;AACd;;;AE1EA,mBAAmB;AAEnB,eAAe,OAAsB;AACnC,QAAM,IAAI,MAAM,cAA2B;AAC3C,MAAI,CAAC,EAAG;AACR,QAAM,YAAY,EAAE;AACpB,MAAI,CAAC,UAAW;AAEhB,QAAM,MAAK,oBAAI,KAAK,GAAE,YAAY;AAClC,QAAM,OAAqB;AAAA,IACzB,gBAAgB,CAAC,CAAC,EAAE;AAAA,IACpB,GAAI,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,IAAI,CAAC;AAAA,IACjE,GAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC;AAAA,EAChC;AAEA,QAAM,WAAyB;AAAA,IAC7B,MAAM;AAAA,IACN;AAAA,IACA,QAAQ,QAAQ,EAAE;AAAA,IAClB;AAAA,EACF,CAAC;AACH;AAEA,KAAK,KAAK,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;","names":[]}
+{"version":3,"sources":["../../src/hooks/stop.ts","../../src/harness.ts","../../src/hooks/drop.ts","../../src/config.ts"],"sourcesContent":["/**\n * Stop hook — two jobs, and only one of them is the daemon's.\n *\n * It drops an envelope when CC's main agent finishes responding, which flips\n * \"thinking…\" indicators off in web/mobile instantly instead of waiting for CC's JSONL\n * writes to settle and the watcher's debounced tail to fire. And it REMINDS a session\n * to finish cleanly once it is running out of room — the thing that used to live in a\n * Claude Code plugin, and that the session-opening block promises in every repo.\n *\n * **Why Stop and not PreCompact.** PreCompact is the obvious candidate and cannot do\n * this job: it may only CANCEL a compaction, never hand back an instruction. Stop\n * fires at the end of a turn, carries the transcript path, and is allowed to inject.\n * So the trigger is \"a turn ended and the conversation is large\" rather than\n * \"compaction is imminent\" — which is earlier, and earlier is the whole point.\n *\n * **The measurement is here and the judgement is the harness's.** Reading Claude\n * Code's own transcript is a Claude Code fact, so it happens in Claude Code's corner\n * of the product; the threshold, the wording and the once-a-session rule are the same\n * for every client and live where every client can reach them.\n */\n\nimport { open } from \"node:fs/promises\";\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\nimport { wrapReminder } from \"../harness\";\nimport { appendDrop, installHookTimeout, readHookStdin } from \"./drop\";\n\ninterface CcStopInput {\n  session_id?: string;\n  transcript_path?: string;\n  cwd?: string;\n  /** True iff this Stop was triggered by a hook (recursion guard). We\n   *  forward it so the daemon can ignore self-induced stops if needed. */\n  stop_hook_active?: boolean;\n}\n\ninterface StopDropData {\n  stopHookActive: boolean;\n  transcriptPath?: string;\n  cwd?: string;\n}\n\n/** How much of the transcript's tail to read looking for the newest usage record.\n *  Transcripts reach tens of megabytes and this runs at the end of every turn, so\n *  reading the whole file would tax each one to answer a question the last few lines\n *  already settle. Doubles up to the max when a single record is larger than the\n *  window — one tool result can exceed a megabyte on its own. */\nconst TAIL_BYTES = 256 * 1024;\nconst TAIL_MAX = 8 * 1024 * 1024;\n\n// Longer than a hook that only appends a line, because this one asks the harness a\n// question. Still far under CC's own limit: the watchdog is here for a stdin that\n// never closes, not to race the work.\ninstallHookTimeout(5_000);\n\nasync function main(): Promise<void> {\n  const p = await readHookStdin<CcStopInput>();\n  if (!p) return;\n  const sessionId = p.session_id;\n  if (!sessionId) return;\n\n  const ts = new Date().toISOString();\n  const data: StopDropData = {\n    stopHookActive: !!p.stop_hook_active,\n    ...(p.transcript_path ? { transcriptPath: p.transcript_path } : {}),\n    ...(p.cwd ? { cwd: p.cwd } : {}),\n  };\n\n  await appendDrop<StopDropData>({\n    type: \"stop\",\n    sessionId,\n    uniqId: `stop-${ts}`,\n    data,\n  });\n\n  await remind(p, sessionId);\n}\n\nasync function remind(p: CcStopInput, sessionId: string): Promise<void> {\n  const repo = process.env.CLAUDE_PROJECT_DIR ?? p.cwd;\n  if (!repo || !p.transcript_path) return;\n  // A repo that never configured the harness cannot have set a threshold, and asking\n  // costs a process at the end of every turn. An existence check, not a read — the\n  // harness stays the only thing that parses that file.\n  if (!existsSync(join(repo, \".claude\", \"work.config.json\"))) return;\n\n  const used = await measureContext(p.transcript_path);\n  const said = wrapReminder({ repo, used, sessionId });\n  if (!said) return;\n\n  process.stdout.write(\n    JSON.stringify({\n      systemMessage: said.headline,\n      hookSpecificOutput: { hookEventName: \"Stop\", additionalContext: said.note },\n    }),\n  );\n}\n\n/**\n * Tokens the session is holding, from the newest main-chain assistant turn — or 0.\n *\n * **Exact or nothing.** Claude Code records the API's own `usage` on every assistant\n * turn, so the live context is `input + cache_creation + cache_read` off the most\n * recent one: the number the model was actually charged for. Dividing the transcript's\n * file size by four is the tempting alternative and is wrong twice over — the\n * transcript is an append-only log of everything that ever happened, tool output long\n * since dropped from the window included, and it carries JSON framing that is not\n * context at all. Measured on a real session it read 452k where the truth was 277k.\n *\n * Sidechain turns are skipped: a subagent runs in its own window, and counting one\n * reports a context this session never had.\n */\nasync function measureContext(transcript: string): Promise<number> {\n  let handle;\n  try {\n    handle = await open(transcript, \"r\");\n    const { size } = await handle.stat();\n    let want = TAIL_BYTES;\n    for (;;) {\n      const from = Math.max(0, size - want);\n      const buffer = Buffer.alloc(Math.min(want, size));\n      await handle.read(buffer, 0, buffer.length, from);\n      const lines = buffer.toString(\"utf-8\").split(\"\\n\");\n      // A partial first line is unparseable; drop it unless we hold the whole file.\n      if (from > 0) lines.shift();\n      for (let i = lines.length - 1; i >= 0; i--) {\n        const used = tokensIn(lines[i] ?? \"\");\n        if (used) return used;\n      }\n      if (from === 0 || want >= TAIL_MAX) return 0;\n      want = Math.min(want * 2, TAIL_MAX);\n    }\n  } catch {\n    return 0;\n  } finally {\n    await handle?.close().catch(() => {});\n  }\n}\n\nfunction tokensIn(line: string): number {\n  if (!line.trim()) return 0;\n  try {\n    const record = JSON.parse(line) as {\n      isSidechain?: boolean;\n      message?: { usage?: Record<string, number> };\n    };\n    if (record.isSidechain) return 0;\n    const usage = record.message?.usage;\n    if (!usage) return 0;\n    return (\n      (usage.input_tokens ?? 0) +\n      (usage.cache_creation_input_tokens ?? 0) +\n      (usage.cache_read_input_tokens ?? 0)\n    );\n  } catch {\n    return 0;\n  }\n}\n\nvoid main().finally(() => process.exit(0));\n","/**\n * The work harness — where it ships, and what runs it.\n *\n * The harness owns the `work/` tree's invariants: bucket-is-status, tier derivation,\n * the id allocator and the completion gate. It used to live in a Claude Code plugin,\n * which made every write to the board require one vendor's plugin to be installed —\n * so an agent that speaks MCP but is not Claude Code could read the board and could\n * not touch it. It ships inside this package now, and `jarvis work` is the one door\n * onto it.\n *\n * It is Python, and this file is the whole of what Node needs to know about that: a\n * payload directory and an interpreter. Either can be missing, and a missing one is\n * REPORTED — `harness()` still answers, so a board stays readable and a write fails\n * where writes fail. What must not happen is what used to: a raw shell error, several\n * calls after the point where anything could be done about it.\n */\n\nimport { spawnSync } from \"node:child_process\";\nimport { existsSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/** The entry inside the payload. */\nconst ENTRY = join(\"harness\", \"work.py\");\n\n/** Interpreters to try, in order. Both names, because a machine that has Python\n *  under only one of them is common enough that failing on it would be a bug. */\nconst INTERPRETERS = [\"python3\", \"python\"] as const;\n\n/**\n * The oldest Python the payload runs on, proven by running its own suite there.\n *\n * 3.9 rather than something newer on purpose: it is what macOS ships at\n * `/usr/bin/python3`, and therefore what a machine with nothing installed actually\n * has — which is precisely the machine this whole arrangement exists to serve. Two\n * annotations in the payload had to go to keep it, and that was the cheaper side of\n * the trade by a wide margin.\n */\nconst OLDEST = [3, 9] as const;\n\n/** How to run the harness: argv, up to but not including its subcommand. */\nexport type Harness = [command: string, ...args: string[]];\n\n/** What a consumer outside this repo has on its PATH, and the honest thing to\n *  attempt when the payload cannot be resolved from here. */\nconst INSTALLED: Harness = [\"jarvis\", \"work\"];\n\n/**\n * The payload's entry script, or null when this build does not carry one.\n *\n * Resolved by walking up from this module rather than from `process.argv`, because\n * the answer must not depend on how the process was started: `tsx src/bin.ts`, the\n * bundled `dist/bin.js` and a re-spawned daemon all sit at different depths under\n * the same package root, and all three have to find the same files.\n */\nexport function payload(): string | null {\n  let dir = dirname(fileURLToPath(import.meta.url));\n  for (let up = 0; up < 6; up++) {\n    if (existsSync(join(dir, ENTRY))) return join(dir, ENTRY);\n    const parent = dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\n/** The first interpreter on PATH new enough to run the payload, else null. */\nexport function interpreter(): string | null {\n  for (const name of INTERPRETERS) {\n    // The VERSION, not just an exit code. A name can exist on PATH as a stub that is\n    // not a working interpreter — which is what macOS has until the command line\n    // tools are installed — and an interpreter too old to parse the payload fails\n    // with a traceback from inside it, which is the shape of error this whole file\n    // exists to replace.\n    const said = spawnSync(name, [\"--version\"], { encoding: \"utf-8\" });\n    if (said.status !== 0) continue;\n    const version = /(\\d+)\\.(\\d+)/.exec(`${said.stdout}${said.stderr}`);\n    if (!version) continue;\n    const [major, minor] = [Number(version[1]), Number(version[2])];\n    if (major > OLDEST[0] || (major === OLDEST[0] && minor >= OLDEST[1])) return name;\n  }\n  return null;\n}\n\n/**\n * Why the harness cannot be reached from here, or null when it can.\n *\n * Phrased as what to do about it. `jarvis serve` reports this at startup, so it is\n * read by somebody who has just pointed an agent at their repo and has no other clue\n * that the board is about to refuse every write.\n */\nexport function harnessProblem(): string | null {\n  if (!payload()) {\n    return (\n      \"this jarvis build carries no work harness — the board can be read but not \" +\n      \"changed. Reinstall with `npm i -g @appchy/jarvis`.\"\n    );\n  }\n  if (!interpreter()) {\n    return (\n      `the work harness needs Python ${OLDEST[0]}.${OLDEST[1]} or newer and this ` +\n      \"machine has none on its PATH — the board can be read but not changed. \" +\n      \"Install it, then try again.\"\n    );\n  }\n  return null;\n}\n\n/**\n * How to run the harness.\n *\n * Never throws. A board whose harness is unreachable is still a board worth reading,\n * and refusing to build one would take the reads down with the writes; the caller\n * that needs to know asks `harnessProblem()`. The fallback names what a consumer\n * outside this repo actually has, so the failure a caller meets is a missing command\n * rather than a missing file.\n */\nexport function harness(): Harness {\n  const script = payload();\n  const python = interpreter();\n  return script && python ? [python, script] : INSTALLED;\n}\n\n/**\n * The block a session opens with, for the repo at `repo` — or null when there is none.\n *\n * The harness composes every byte of it from that repo's own config: the board, its\n * standards, the decisions it has already taken, what each release is for. Nothing here\n * adds a word, and no caller of this may either — several doors serve these bytes now,\n * and a sentence any one of them typed itself is a sentence they could disagree about.\n *\n * **It never throws and never reports its own failure**, which is unlike everything else\n * in this file. Its first caller is a `SessionStart` hook: a message there greets somebody\n * with an error before they have typed anything, and a missing block is a far smaller harm\n * than a session that opens broken. A caller with somewhere to put a diagnosis asks\n * `harnessProblem()` for one.\n */\nexport function sessionContext(repo: string): string | null {\n  return say([\"context\", \"--project\", repo]);\n}\n\n/**\n * The METHOD in full — how work is done here, on request.\n *\n * Split from {@link sessionContext} rather than folded into it, because the two are\n * asked at different moments and cost two orders of magnitude apart: the block a\n * session opens with is ~670 tokens of derived fact, and this is ~11,000 of prose. One\n * reader still, so a session cannot end up having read a different method than the\n * block told it to go and read.\n */\nexport function sessionMethod(repo: string): string | null {\n  return say([\"method\", \"--project\", repo]);\n}\n\nexport interface EditContextRequest {\n  repo: string;\n  /** Repo-relative path the session is about to write. */\n  file: string;\n  /** Absent means the harness stays silent: it cannot promise once without one. */\n  sessionId?: string;\n}\n\n/**\n * What a session must be told now that it is about to write this file — or null.\n *\n * The judgements no gate can catch, on the first write of a session, and which part of\n * the code it has walked into, the first time it writes under one. Both are the\n * harness's to word and to ration; this hands over a file and a session id and nothing\n * else, the same split {@link wrapReminder} uses.\n *\n * Never throws, for the reason {@link sessionContext} does not: its caller is a hook\n * firing before somebody's edit, and a hook that fails loudly interrupts them to report\n * a problem with a reminder.\n */\nexport function editContext(req: EditContextRequest): string | null {\n  if (!req.file || !req.sessionId) return null;\n  // Tighter than the shared ceiling: this one fires before somebody's edit, and a\n  // rule that arrives seconds after the file was written has already missed.\n  return say(\n    [\"applies\", \"--file\", req.file, \"--project\", req.repo, \"--session\", req.sessionId],\n    2_000,\n  );\n}\n\n/**\n * Everything a machine knows about finishing this session cleanly, for `repo` — or null\n * when the harness cannot answer.\n *\n * It writes nothing. What comes back is what only a machine can say: work that is not\n * in git, items the board still says somebody is on, the descriptions of the world this\n * run changed, what the tree disagrees with itself about, and the derived prompt that\n * opens the next session. The prose is the agent's to write, because a handoff is\n * judgement and a generated one reads as considered while being wrong.\n */\nexport function wrapBrief(repo: string): string | null {\n  return say([\"wrap\", \"--project\", repo]);\n}\n\nexport interface WrapReminderRequest {\n  repo: string;\n  /** Tokens the session is holding right now. Zero or less means unknown. */\n  used: number;\n  sessionId?: string;\n}\n\nexport interface WrapReminderResponse {\n  /** One line, for a surface that shows the reader a notice. */\n  headline: string;\n  /** The whole reminder, for the agent to act on. */\n  note: string;\n}\n\n/**\n * Whether a session this full should be wrapping up, and what that means in `repo`.\n * Null when it should not, or when nothing can be said with confidence.\n *\n * **The measurement is the caller's and the judgement is the harness's**, and the\n * split is not arbitrary. How many tokens a session is holding is a thing only its\n * own client can answer, and every client answers it differently — while the\n * threshold, the wording, the once-a-session rule and whatever the repo adds are the\n * same whoever is asking. So this hands over a number, and a harness command that\n * took one vendor's log file is a harness that works for one vendor.\n *\n * Never throws, for the same reason {@link sessionContext} does not: its caller is a\n * hook, and a hook that fails loudly interrupts somebody mid-thought to report a\n * problem with a reminder.\n */\nexport function wrapReminder(req: WrapReminderRequest): WrapReminderResponse | null {\n  if (!(req.used > 0)) return null;\n  const said = say([\n    \"remind\",\n    \"--used\",\n    String(req.used),\n    \"--project\",\n    req.repo,\n    ...(req.sessionId ? [\"--session\", req.sessionId] : []),\n  ]);\n  if (!said) return null;\n  try {\n    const parsed = JSON.parse(said) as Partial<WrapReminderResponse>;\n    if (!parsed.headline || !parsed.note) return null;\n    return { headline: parsed.headline, note: parsed.note };\n  } catch {\n    return null;\n  }\n}\n\n/**\n * How long a harness call may take before it is killed and read as \"no answer\".\n *\n * **Every caller here is a hook, and `installHookTimeout` cannot save one of them.**\n * That watchdog is a `setTimeout`, and a timer does not fire while a synchronous\n * `spawnSync` holds the thread — so an interpreter that is slow to start (a loaded\n * machine, a scanner intercepting the spawn, a repo on a network mount) blocks the\n * session for as long as it likes, past any ceiling the hook believes it set. The\n * bound has to be on the spawn itself. Generous, because being killed mid-answer is\n * the one failure worse than being slow.\n */\nconst PATIENCE = 10_000;\n\n/** What the harness said, or null — for a caller with nowhere to put a failure. */\nfunction say(args: string[], timeout = PATIENCE): string | null {\n  try {\n    const [command, ...prefix] = harness();\n    const ran = spawnSync(command, [...prefix, ...args], {\n      encoding: \"utf-8\",\n      timeout,\n      env: { ...process.env, PYTHONDONTWRITEBYTECODE: \"1\" },\n    });\n    // A killed child leaves a non-zero status (or none at all), so the timeout reads\n    // as every other failure does: no answer, and nothing said about it.\n    if (ran.status !== 0) return null;\n    return ran.stdout.trim() ? ran.stdout.trimEnd() : null;\n  } catch {\n    return null;\n  }\n}\n","/**\n * Shared helpers for CC hook scripts.\n *\n * Each hook script (pre-tool-use, session-start, stop, …) is a tiny\n * stdin → append-line → exit binary. They all write to the same per-\n * session JSONL at `<hooksDir>/<sessionId>.jsonl`. This module\n * concentrates the envelope shape and the atomic append so the per-\n * hook scripts stay <30 lines each.\n *\n * Hot-path constraints: NEVER block, NEVER network, NEVER read user\n * input. Pure stdin parse + filesystem append + exit. Worst-case one\n * `mkdir` + one `appendFile` per fire.\n */\n\nimport { appendFile, mkdir } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { getHooksDir } from \"../config\";\n\n/** Wire-format envelope written one-per-line to the hook JSONL.\n *  The watcher in `sessions.ts` parses this exact shape — keep in sync. */\nexport interface HookDropEnvelope<TData = unknown> {\n  type: string;\n  sessionId: string;\n  ts: string;\n  /** Idempotency key. Lets the watcher's replay-on-restart skip drops\n   *  whose effects were already emitted (see `HookCursor.applied`). */\n  uniqId: string;\n  data: TData;\n}\n\nexport interface AppendDropRequest<TData> {\n  type: string;\n  sessionId: string;\n  uniqId: string;\n  data: TData;\n}\n\n/** Append one envelope line to the per-session hook JSONL. Atomic between\n *  hook processes via POSIX `O_APPEND` (Node's `fs.appendFile`) — concurrent\n *  appends from different CC sessions / hook types can't interleave bytes\n *  within a line as long as the line stays < `PIPE_BUF` (4KB). Drops are\n *  <1KB in practice, so this is safe without locks.\n *\n *  Stderr logs are written so `tail -f ~/.jarvis/hooks/hook.log` (when\n *  CC pipes hook stderr there, which it does by default) shows what fired.\n *  Stderr never breaks CC — it only watches stdout for decision JSON. */\nexport async function appendDrop<TData>(req: AppendDropRequest<TData>): Promise<void> {\n  if (!req.sessionId || !req.type || !req.uniqId) {\n    process.stderr.write(\n      `[hook] skip ${req.type ?? \"?\"} missing field ` +\n        `sessionId=${!!req.sessionId} uniqId=${!!req.uniqId}\\n`,\n    );\n    return;\n  }\n  const dir = getHooksDir();\n  await mkdir(dir, { recursive: true }).catch((err) => {\n    process.stderr.write(`[hook] mkdir failed ${dir}: ${err}\\n`);\n  });\n  const envelope: HookDropEnvelope<TData> = {\n    type: req.type,\n    sessionId: req.sessionId,\n    ts: new Date().toISOString(),\n    uniqId: req.uniqId,\n    data: req.data,\n  };\n  const file = join(dir, `${req.sessionId}.jsonl`);\n  try {\n    await appendFile(file, JSON.stringify(envelope) + \"\\n\");\n    process.stderr.write(\n      `[hook] ${req.type} appended sessionId=${req.sessionId} uniqId=${req.uniqId}\\n`,\n    );\n  } catch (err) {\n    process.stderr.write(`[hook] append failed ${file}: ${err}\\n`);\n  }\n}\n\n/** Read CC's hook payload from stdin. Returns `null` on parse failure\n *  (never throws — the hook must never block CC). */\nexport async function readHookStdin<T = Record<string, unknown>>(): Promise<T | null> {\n  try {\n    const chunks: Buffer[] = [];\n    for await (const chunk of process.stdin) {\n      chunks.push(typeof chunk === \"string\" ? Buffer.from(chunk) : chunk);\n    }\n    const raw = Buffer.concat(chunks).toString(\"utf-8\");\n    if (!raw) return null;\n    return JSON.parse(raw) as T;\n  } catch {\n    return null;\n  }\n}\n\n/** Hard cap any hook so an exotic stdin stall can't pile up forever\n *  before CC's terminal prompt fires. We exit 0 with no output → CC\n *  proceeds with its normal permission flow. */\nexport function installHookTimeout(ms = 750): void {\n  const timer = setTimeout(() => process.exit(0), ms);\n  timer.unref();\n}\n","/**\n * Agent Config\n *\n * Manages ~/.jarvis/config.json — saved by `jarvis connect <token>`,\n * read on `jarvis start`.\n */\n\nimport fs from \"fs\";\nimport path from \"path\";\nimport os from \"os\";\n\n// =============================================================================\n// Types\n// =============================================================================\n\nexport interface AgentConfig {\n  /** The jarvis this machine joined — the address a person opens in a browser,\n   *  and what pairing talks to. Ours by default; `jarvis init --url <url>` joins\n   *  someone else's. */\n  url?: string;\n  /** WS hub URL this machine dials. Written once, by pairing, from the hub the\n   *  joined instance named — and never from a flag, an environment variable or\n   *  any later command. Re-pointing a machine means unpairing it first. */\n  hubUrl?: string;\n  /** JWT auth token (from connect token) */\n  token?: string;\n  /** Long-lived refresh token for obtaining new access tokens */\n  refreshToken?: string;\n  /** User ID */\n  userId: string;\n  /** Environment ID */\n  envId?: string;\n  /** Workspace root path for repo operations */\n  workspacePath?: string;\n  /** Anthropic API key (for local-only use without cloud) */\n  anthropicApiKey?: string;\n  /** Use Anthropic subscription instead of API key */\n  useSubscription?: boolean;\n  /** When the config was last updated */\n  connectedAt?: string;\n}\n\nexport interface ConnectToken {\n  hubUrl: string;\n  jwt: string;\n  refreshToken: string;\n  userId: string;\n  envId: string;\n}\n\n// =============================================================================\n// Environment\n// =============================================================================\n\n/** The jarvis a machine pairs with when nothing else is named. Only ever read\n *  by pairing: `jarvis init --url <url>` joins someone else's instead, and the\n *  hub URL is whatever that instance hands back. */\nexport const DEFAULT_URL = \"https://jarvis.appchy.com\";\n\n// =============================================================================\n// Config directory\n// =============================================================================\n\n/** The config dir is the machine's identity: what it paired as, and therefore\n *  which hub it dials. One daemon per dir, so a second identity on the same\n *  machine — a storage rig, a localhost instance — is a second dir, named by\n *  `JARVIS_CONFIG_DIR`, never a second binary.\n *\n *  Called fresh on every read so a test that sets `JARVIS_CONFIG_DIR` AFTER\n *  module load still sees the override — caching at module init would lock it\n *  onto the host's real `~/.jarvis/` and leak production state into the\n *  in-memory infra. */\nfunction configDir(): string {\n  if (process.env.JARVIS_CONFIG_DIR) return process.env.JARVIS_CONFIG_DIR;\n  return path.join(os.homedir(), \".jarvis\");\n}\n\nfunction configFile(): string {\n  return path.join(configDir(), \"config.json\");\n}\n\n/** Absolute path to the per-daemon config directory — `~/.jarvis/` unless\n *  `JARVIS_CONFIG_DIR` names another. */\nexport function getConfigDir(): string {\n  return configDir();\n}\n\n/** Per-daemon directory for PreToolUse hook drop files. The CC hook script\n *  writes `<sessionId>/<toolUseId>.json` here; the sessions watcher consumes\n *  them. Each daemon owns the subtree under its own config dir, so a hook\n *  installed for one never feeds another. */\nexport function getHooksDir(): string {\n  return path.join(configDir(), \"hooks\");\n}\n\n// =============================================================================\n// Operations\n// =============================================================================\n\n/** Read the machine's config, accepting the names these two fields used to\n *  carry. `appUrl`/`apiUrl` were renamed on 2026-08-15 — `apiUrl` never held an\n *  API URL, it held the hub's. A config written before that still loads, and\n *  `saveConfig` only ever writes the current names, so a machine heals itself on\n *  its next write with nothing to run. Delete this tolerance once no config\n *  predating the rename is in use. */\nexport function loadConfig(): AgentConfig | null {\n  try {\n    const stored = JSON.parse(fs.readFileSync(configFile(), \"utf-8\")) as AgentConfig &\n      Partial<{ appUrl: string; apiUrl: string }>;\n    const { appUrl, apiUrl, ...config } = stored;\n    const url = config.url ?? appUrl;\n    const hubUrl = config.hubUrl ?? apiUrl;\n    return {\n      ...config,\n      ...(url !== undefined ? { url } : {}),\n      ...(hubUrl !== undefined ? { hubUrl } : {}),\n    };\n  } catch {\n    return null;\n  }\n}\n\n/** Persist the machine's config.\n *\n *  Refuses to move an already-paired machine to a different hub. A machine that\n *  joins the wrong control plane hands it credentials, so re-pointing one is a\n *  deliberate act — `jarvis unpair` (which clears the config) and then pair\n *  again — rather than something a stale token or a mistyped command can do on\n *  its way past. Re-pairing to the same hub is unaffected. */\nexport function saveConfig(config: AgentConfig): void {\n  const paired = loadConfig();\n  if (paired?.hubUrl && config.hubUrl && config.hubUrl !== paired.hubUrl) {\n    throw new Error(\n      `This machine is paired with ${paired.hubUrl} and cannot be moved to ${config.hubUrl}.\\n` +\n        `  Run 'jarvis unpair' first if you mean to join a different jarvis.`,\n    );\n  }\n  fs.mkdirSync(configDir(), { recursive: true });\n  fs.writeFileSync(configFile(), JSON.stringify(config, null, 2) + \"\\n\");\n}\n\nexport function clearConfig(): void {\n  try {\n    fs.unlinkSync(configFile());\n  } catch {}\n}\n\nexport function parseConnectToken(token: string): ConnectToken {\n  try {\n    const decoded = Buffer.from(token, \"base64\").toString(\"utf-8\");\n    const parsed = JSON.parse(decoded);\n    if (!parsed.hubUrl || !parsed.jwt || !parsed.userId) {\n      throw new Error(\"Invalid token: missing required fields (hubUrl, jwt, userId)\");\n    }\n    return parsed as ConnectToken;\n  } catch (err) {\n    if (err instanceof SyntaxError) {\n      throw new Error(\"Invalid token: not valid base64-encoded JSON\");\n    }\n    throw err;\n  }\n}\n\nexport function getConfigPath(): string {\n  return configFile();\n}\n"],"mappings":";;;AAqBA,SAAS,YAAY;AACrB,SAAS,cAAAA,mBAAkB;AAC3B,SAAS,QAAAC,aAAY;;;ACNrB,SAAS,iBAAiB;AAC1B,SAAS,kBAAkB;AAC3B,SAAS,SAAS,YAAY;AAC9B,SAAS,qBAAqB;AAG9B,IAAM,QAAQ,KAAK,WAAW,SAAS;AAIvC,IAAM,eAAe,CAAC,WAAW,QAAQ;AAWzC,IAAM,SAAS,CAAC,GAAG,CAAC;AAOpB,IAAM,YAAqB,CAAC,UAAU,MAAM;AAUrC,SAAS,UAAyB;AACvC,MAAI,MAAM,QAAQ,cAAc,YAAY,GAAG,CAAC;AAChD,WAAS,KAAK,GAAG,KAAK,GAAG,MAAM;AAC7B,QAAI,WAAW,KAAK,KAAK,KAAK,CAAC,EAAG,QAAO,KAAK,KAAK,KAAK;AACxD,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,IAAK;AACpB,UAAM;AAAA,EACR;AACA,SAAO;AACT;AAGO,SAAS,cAA6B;AAC3C,aAAW,QAAQ,cAAc;AAM/B,UAAM,OAAO,UAAU,MAAM,CAAC,WAAW,GAAG,EAAE,UAAU,QAAQ,CAAC;AACjE,QAAI,KAAK,WAAW,EAAG;AACvB,UAAM,UAAU,eAAe,KAAK,GAAG,KAAK,MAAM,GAAG,KAAK,MAAM,EAAE;AAClE,QAAI,CAAC,QAAS;AACd,UAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,QAAQ,CAAC,CAAC,GAAG,OAAO,QAAQ,CAAC,CAAC,CAAC;AAC9D,QAAI,QAAQ,OAAO,CAAC,KAAM,UAAU,OAAO,CAAC,KAAK,SAAS,OAAO,CAAC,EAAI,QAAO;AAAA,EAC/E;AACA,SAAO;AACT;AAmCO,SAAS,UAAmB;AACjC,QAAM,SAAS,QAAQ;AACvB,QAAM,SAAS,YAAY;AAC3B,SAAO,UAAU,SAAS,CAAC,QAAQ,MAAM,IAAI;AAC/C;AA0GO,SAAS,aAAa,KAAuD;AAClF,MAAI,EAAE,IAAI,OAAO,GAAI,QAAO;AAC5B,QAAM,OAAO,IAAI;AAAA,IACf;AAAA,IACA;AAAA,IACA,OAAO,IAAI,IAAI;AAAA,IACf;AAAA,IACA,IAAI;AAAA,IACJ,GAAI,IAAI,YAAY,CAAC,aAAa,IAAI,SAAS,IAAI,CAAC;AAAA,EACtD,CAAC;AACD,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,QAAI,CAAC,OAAO,YAAY,CAAC,OAAO,KAAM,QAAO;AAC7C,WAAO,EAAE,UAAU,OAAO,UAAU,MAAM,OAAO,KAAK;AAAA,EACxD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAaA,IAAM,WAAW;AAGjB,SAAS,IAAI,MAAgB,UAAU,UAAyB;AAC9D,MAAI;AACF,UAAM,CAAC,SAAS,GAAG,MAAM,IAAI,QAAQ;AACrC,UAAM,MAAM,UAAU,SAAS,CAAC,GAAG,QAAQ,GAAG,IAAI,GAAG;AAAA,MACnD,UAAU;AAAA,MACV;AAAA,MACA,KAAK,EAAE,GAAG,QAAQ,KAAK,yBAAyB,IAAI;AAAA,IACtD,CAAC;AAGD,QAAI,IAAI,WAAW,EAAG,QAAO;AAC7B,WAAO,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,QAAQ,IAAI;AAAA,EACpD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACtQA,SAAS,YAAY,aAAa;AAClC,SAAS,QAAAC,aAAY;;;ACPrB,OAAO,UAAU;AACjB,OAAO,QAAQ;AA+Df,SAAS,YAAoB;AAC3B,MAAI,QAAQ,IAAI,kBAAmB,QAAO,QAAQ,IAAI;AACtD,SAAO,KAAK,KAAK,GAAG,QAAQ,GAAG,SAAS;AAC1C;AAgBO,SAAS,cAAsB;AACpC,SAAO,KAAK,KAAK,UAAU,GAAG,OAAO;AACvC;;;AD9CA,eAAsB,WAAkB,KAA8C;AACpF,MAAI,CAAC,IAAI,aAAa,CAAC,IAAI,QAAQ,CAAC,IAAI,QAAQ;AAC9C,YAAQ,OAAO;AAAA,MACb,eAAe,IAAI,QAAQ,GAAG,4BACf,CAAC,CAAC,IAAI,SAAS,WAAW,CAAC,CAAC,IAAI,MAAM;AAAA;AAAA,IACvD;AACA;AAAA,EACF;AACA,QAAM,MAAM,YAAY;AACxB,QAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ;AACnD,YAAQ,OAAO,MAAM,uBAAuB,GAAG,KAAK,GAAG;AAAA,CAAI;AAAA,EAC7D,CAAC;AACD,QAAM,WAAoC;AAAA,IACxC,MAAM,IAAI;AAAA,IACV,WAAW,IAAI;AAAA,IACf,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC3B,QAAQ,IAAI;AAAA,IACZ,MAAM,IAAI;AAAA,EACZ;AACA,QAAM,OAAOC,MAAK,KAAK,GAAG,IAAI,SAAS,QAAQ;AAC/C,MAAI;AACF,UAAM,WAAW,MAAM,KAAK,UAAU,QAAQ,IAAI,IAAI;AACtD,YAAQ,OAAO;AAAA,MACb,UAAU,IAAI,IAAI,uBAAuB,IAAI,SAAS,WAAW,IAAI,MAAM;AAAA;AAAA,IAC7E;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,OAAO,MAAM,wBAAwB,IAAI,KAAK,GAAG;AAAA,CAAI;AAAA,EAC/D;AACF;AAIA,eAAsB,gBAAgE;AACpF,MAAI;AACF,UAAM,SAAmB,CAAC;AAC1B,qBAAiB,SAAS,QAAQ,OAAO;AACvC,aAAO,KAAK,OAAO,UAAU,WAAW,OAAO,KAAK,KAAK,IAAI,KAAK;AAAA,IACpE;AACA,UAAM,MAAM,OAAO,OAAO,MAAM,EAAE,SAAS,OAAO;AAClD,QAAI,CAAC,IAAK,QAAO;AACjB,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,mBAAmB,KAAK,KAAW;AACjD,QAAM,QAAQ,WAAW,MAAM,QAAQ,KAAK,CAAC,GAAG,EAAE;AAClD,QAAM,MAAM;AACd;;;AFnDA,IAAM,aAAa,MAAM;AACzB,IAAM,WAAW,IAAI,OAAO;AAK5B,mBAAmB,GAAK;AAExB,eAAe,OAAsB;AACnC,QAAM,IAAI,MAAM,cAA2B;AAC3C,MAAI,CAAC,EAAG;AACR,QAAM,YAAY,EAAE;AACpB,MAAI,CAAC,UAAW;AAEhB,QAAM,MAAK,oBAAI,KAAK,GAAE,YAAY;AAClC,QAAM,OAAqB;AAAA,IACzB,gBAAgB,CAAC,CAAC,EAAE;AAAA,IACpB,GAAI,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,IAAI,CAAC;AAAA,IACjE,GAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC;AAAA,EAChC;AAEA,QAAM,WAAyB;AAAA,IAC7B,MAAM;AAAA,IACN;AAAA,IACA,QAAQ,QAAQ,EAAE;AAAA,IAClB;AAAA,EACF,CAAC;AAED,QAAM,OAAO,GAAG,SAAS;AAC3B;AAEA,eAAe,OAAO,GAAgB,WAAkC;AACtE,QAAM,OAAO,QAAQ,IAAI,sBAAsB,EAAE;AACjD,MAAI,CAAC,QAAQ,CAAC,EAAE,gBAAiB;AAIjC,MAAI,CAACC,YAAWC,MAAK,MAAM,WAAW,kBAAkB,CAAC,EAAG;AAE5D,QAAM,OAAO,MAAM,eAAe,EAAE,eAAe;AACnD,QAAM,OAAO,aAAa,EAAE,MAAM,MAAM,UAAU,CAAC;AACnD,MAAI,CAAC,KAAM;AAEX,UAAQ,OAAO;AAAA,IACb,KAAK,UAAU;AAAA,MACb,eAAe,KAAK;AAAA,MACpB,oBAAoB,EAAE,eAAe,QAAQ,mBAAmB,KAAK,KAAK;AAAA,IAC5E,CAAC;AAAA,EACH;AACF;AAgBA,eAAe,eAAe,YAAqC;AACjE,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,KAAK,YAAY,GAAG;AACnC,UAAM,EAAE,KAAK,IAAI,MAAM,OAAO,KAAK;AACnC,QAAI,OAAO;AACX,eAAS;AACP,YAAM,OAAO,KAAK,IAAI,GAAG,OAAO,IAAI;AACpC,YAAM,SAAS,OAAO,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC;AAChD,YAAM,OAAO,KAAK,QAAQ,GAAG,OAAO,QAAQ,IAAI;AAChD,YAAM,QAAQ,OAAO,SAAS,OAAO,EAAE,MAAM,IAAI;AAEjD,UAAI,OAAO,EAAG,OAAM,MAAM;AAC1B,eAAS,IAAI,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK;AAC1C,cAAM,OAAO,SAAS,MAAM,CAAC,KAAK,EAAE;AACpC,YAAI,KAAM,QAAO;AAAA,MACnB;AACA,UAAI,SAAS,KAAK,QAAQ,SAAU,QAAO;AAC3C,aAAO,KAAK,IAAI,OAAO,GAAG,QAAQ;AAAA,IACpC;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT,UAAE;AACA,UAAM,QAAQ,MAAM,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACtC;AACF;AAEA,SAAS,SAAS,MAAsB;AACtC,MAAI,CAAC,KAAK,KAAK,EAAG,QAAO;AACzB,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,IAAI;AAI9B,QAAI,OAAO,YAAa,QAAO;AAC/B,UAAM,QAAQ,OAAO,SAAS;AAC9B,QAAI,CAAC,MAAO,QAAO;AACnB,YACG,MAAM,gBAAgB,MACtB,MAAM,+BAA+B,MACrC,MAAM,2BAA2B;AAAA,EAEtC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,KAAK,KAAK,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;","names":["existsSync","join","join","join","existsSync","join"]}