@archznn/crewloop-skills 0.3.0 → 0.4.1

package/servers/dashboard/dist/adapters/shim.js

@@ -0,0 +1,107 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectSource = detectSource;
+exports.normalizePayload = normalizePayload;
+exports.buildEvent = buildEvent;
+exports.postEvent = postEvent;
+exports.runShim = runShim;
+const node_http_1 = __importDefault(require("node:http"));
+const kimi_1 = require("./kimi");
+const codex_1 = require("./codex");
+const sanitize_1 = require("../filters/sanitize");
+const DEFAULT_SERVER_URL = 'http://127.0.0.1:7890';
+function detectSource(argv) {
+    const arg = argv[2];
+    if (arg === 'kimi' || arg === 'codex' || arg === 'opencode' || arg === 'log-watcher') {
+        return arg;
+    }
+    const env = process.env.CREWLOOP_DASHBOARD_SOURCE;
+    if (env === 'kimi' ||
+        env === 'codex' ||
+        env === 'opencode' ||
+        env === 'log-watcher') {
+        return env;
+    }
+    return undefined;
+}
+function normalizePayload(source, raw) {
+    if (typeof raw !== 'object' || raw === null) {
+        return undefined;
+    }
+    const payload = raw;
+    switch (source) {
+        case 'kimi':
+            return (0, kimi_1.normalizeKimi)(payload);
+        case 'codex':
+            return (0, codex_1.normalizeCodex)(payload);
+        default:
+            return undefined;
+    }
+}
+function buildEvent(source, raw) {
+    const base = normalizePayload(source, raw);
+    if (!base) {
+        return undefined;
+    }
+    const isPost = base.event_type === 'tool_end';
+    const sanitized = (0, sanitize_1.sanitize)({
+        tool_name: base.tool || '',
+        tool_input: (raw.tool_input || raw.toolInput),
+        tool_response: (raw.tool_response || raw.toolResponse),
+    }, isPost ? 'post' : 'pre');
+    return {
+        ...base,
+        detail: sanitized.detail,
+        status: sanitized.status,
+        duration_ms: sanitized.duration_ms,
+    };
+}
+function postEvent(event) {
+    const serverUrl = process.env.CREWLOOP_DASHBOARD_URL || DEFAULT_SERVER_URL;
+    const body = JSON.stringify(event);
+    const url = new URL('/event', serverUrl);
+    const req = node_http_1.default.request({
+        hostname: url.hostname,
+        port: url.port,
+        path: url.pathname,
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'Content-Length': Buffer.byteLength(body),
+        },
+        timeout: 300,
+    }, () => { });
+    req.on('error', () => { });
+    req.on('timeout', () => req.destroy());
+    req.write(body);
+    req.end();
+}
+function runShim() {
+    const source = detectSource(process.argv);
+    if (!source) {
+        process.stderr.write('crewloop-shim: unknown source. Use: crewloop-shim <kimi|codex>\n');
+        process.exit(1);
+    }
+    let raw = '';
+    process.stdin.setEncoding('utf8');
+    process.stdin.on('data', (chunk) => {
+        raw += chunk;
+    });
+    process.stdin.on('end', () => {
+        try {
+            const payload = JSON.parse(raw);
+            const event = buildEvent(source, payload);
+            if (event) {
+                postEvent(event);
+            }
+        }
+        catch {
+            // Fail silently so the agent is never blocked.
+        }
+        process.exit(0);
+    });
+}
+//# sourceMappingURL=shim.js.map

package/servers/dashboard/dist/adapters/shim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shim.js","sourceRoot":"","sources":["../../src/adapters/shim.ts"],"names":[],"mappings":";;;;;AAQA,oCAeC;AAED,4CAeC;AAED,gCAyBC;AAED,8BAwBC;AAED,0BAwBC;AAvHD,0DAA6B;AAE7B,iCAA6D;AAC7D,mCAAgE;AAChE,kDAA+C;AAE/C,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AAEnD,SAAgB,YAAY,CAAC,IAAc;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;QACrF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAClD,IACE,GAAG,KAAK,MAAM;QACd,GAAG,KAAK,OAAO;QACf,GAAG,KAAK,UAAU;QAClB,GAAG,KAAK,aAAa,EACrB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAmB,EAAE,GAAY;IAChE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,GAA8B,CAAC;IAE/C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,IAAA,oBAAa,EAAC,OAAqC,CAAC,CAAC;QAC9D,KAAK,OAAO;YACV,OAAO,IAAA,sBAAc,EAAC,OAAsC,CAAC,CAAC;QAChE;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAgB,UAAU,CACxB,MAAmB,EACnB,GAA4B;IAE5B,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAA,mBAAQ,EACxB;QACE,SAAS,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;QAC1B,UAAU,EAAE,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,SAAS,CAAwC;QACpF,aAAa,EAAE,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,YAAY,CAAwC;KAC9F,EACD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CACxB,CAAC;IAEF,OAAO;QACL,GAAG,IAAI;QACP,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,WAAW,EAAE,SAAS,CAAC,WAAW;KACnC,CAAC;AACJ,CAAC;AAED,SAAgB,SAAS,CAAC,KAAqB;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,kBAAkB,CAAC;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAEnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,mBAAI,CAAC,OAAO,CACtB;QACE,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,QAAQ;QAClB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;SAC1C;QACD,OAAO,EAAE,GAAG;KACb,EACD,GAAG,EAAE,GAAE,CAAC,CACT,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1B,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChB,GAAG,CAAC,GAAG,EAAE,CAAC;AACZ,CAAC;AAED,SAAgB,OAAO;IACrB,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QACjC,GAAG,IAAI,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACV,SAAS,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/servers/dashboard/dist/adapters/shim.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=shim.test.d.ts.map

package/servers/dashboard/dist/adapters/shim.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shim.test.d.ts","sourceRoot":"","sources":["../../src/adapters/shim.test.ts"],"names":[],"mappings":""}

package/servers/dashboard/dist/adapters/shim.test.js

@@ -0,0 +1,72 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const strict_1 = __importDefault(require("node:assert/strict"));
+const shim_1 = require("./shim");
+(0, node_test_1.describe)('detectSource', () => {
+    (0, node_test_1.it)('detects source from argv', () => {
+        strict_1.default.equal((0, shim_1.detectSource)(['node', 'shim', 'kimi']), 'kimi');
+        strict_1.default.equal((0, shim_1.detectSource)(['node', 'shim', 'codex']), 'codex');
+    });
+    (0, node_test_1.it)('falls back to env var', () => {
+        process.env.CREWLOOP_DASHBOARD_SOURCE = 'opencode';
+        strict_1.default.equal((0, shim_1.detectSource)(['node', 'shim']), 'opencode');
+        delete process.env.CREWLOOP_DASHBOARD_SOURCE;
+    });
+    (0, node_test_1.it)('returns undefined when unknown', () => {
+        strict_1.default.equal((0, shim_1.detectSource)(['node', 'shim', 'unknown']), undefined);
+    });
+});
+(0, node_test_1.describe)('buildEvent', () => {
+    (0, node_test_1.it)('builds Kimi PreToolUse event', () => {
+        const event = (0, shim_1.buildEvent)('kimi', {
+            hook_event_name: 'PreToolUse',
+            session_id: 'sess-1',
+            cwd: '/project',
+            tool_name: 'Read',
+            tool_input: { path: 'README.md' },
+        });
+        strict_1.default.equal(event?.event_type, 'tool_start');
+        strict_1.default.equal(event?.tool, 'Read');
+        strict_1.default.equal(event?.detail, 'README.md');
+        strict_1.default.equal(event?.status, 'running');
+    });
+    (0, node_test_1.it)('builds Kimi PostToolUse event with status', () => {
+        const event = (0, shim_1.buildEvent)('kimi', {
+            hook_event_name: 'PostToolUse',
+            session_id: 'sess-1',
+            cwd: '/project',
+            tool_name: 'Read',
+            tool_input: { path: 'README.md' },
+            tool_response: { success: true, duration_ms: 12 },
+        });
+        strict_1.default.equal(event?.event_type, 'tool_end');
+        strict_1.default.equal(event?.status, 'success');
+        strict_1.default.equal(event?.duration_ms, 12);
+    });
+    (0, node_test_1.it)('builds Codex event', () => {
+        const event = (0, shim_1.buildEvent)('codex', {
+            sessionId: 'sess-2',
+            toolName: 'Bash',
+            toolInput: { command: 'ls' },
+            toolResponse: { success: true, durationMs: 5 },
+        });
+        strict_1.default.equal(event?.source, 'codex');
+        strict_1.default.equal(event?.tool, 'Bash');
+        strict_1.default.equal(event?.detail, undefined);
+        strict_1.default.equal(event?.status, 'success');
+        strict_1.default.equal(event?.duration_ms, 5);
+    });
+    (0, node_test_1.it)('returns undefined for unsupported hook event', () => {
+        const event = (0, shim_1.buildEvent)('kimi', {
+            hook_event_name: 'UnknownEvent',
+            session_id: 'sess-1',
+            cwd: '/project',
+        });
+        strict_1.default.equal(event, undefined);
+    });
+});
+//# sourceMappingURL=shim.test.js.map

package/servers/dashboard/dist/adapters/shim.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shim.test.js","sourceRoot":"","sources":["../../src/adapters/shim.test.ts"],"names":[],"mappings":";;;;;AAAA,yCAAyC;AACzC,gEAAwC;AACxC,iCAAkD;AAGlD,IAAA,oBAAQ,EAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAA,cAAE,EAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,gBAAM,CAAC,KAAK,CAAC,IAAA,mBAAY,EAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7D,gBAAM,CAAC,KAAK,CAAC,IAAA,mBAAY,EAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,UAAU,CAAC;QACnD,gBAAM,CAAC,KAAK,CAAC,IAAA,mBAAY,EAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACzD,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,gBAAM,CAAC,KAAK,CAAC,IAAA,mBAAY,EAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,oBAAQ,EAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAA,cAAE,EAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,KAAK,GAAG,IAAA,iBAAU,EAAC,MAAqB,EAAE;YAC9C,eAAe,EAAE,YAAY;YAC7B,UAAU,EAAE,QAAQ;YACpB,GAAG,EAAE,UAAU;YACf,SAAS,EAAE,MAAM;YACjB,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;SAClC,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAC9C,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAClC,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QACzC,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,KAAK,GAAG,IAAA,iBAAU,EAAC,MAAqB,EAAE;YAC9C,eAAe,EAAE,aAAa;YAC9B,UAAU,EAAE,QAAQ;YACpB,GAAG,EAAE,UAAU;YACf,SAAS,EAAE,MAAM;YACjB,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YACjC,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;SAClD,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAC5C,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACvC,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,KAAK,GAAG,IAAA,iBAAU,EAAC,OAAsB,EAAE;YAC/C,SAAS,EAAE,QAAQ;YACnB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC5B,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE;SAC/C,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAClC,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACvC,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACvC,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,KAAK,GAAG,IAAA,iBAAU,EAAC,MAAqB,EAAE;YAC9C,eAAe,EAAE,cAAc;YAC/B,UAAU,EAAE,QAAQ;YACpB,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/servers/dashboard/dist/api/event.d.ts

@@ -0,0 +1,13 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { ClientWebSocketMessage } from '../types';
+import { StateStore } from '../state';
+import { SkillInferenceEngine } from '../skills/infer';
+export interface EventHandlerDependencies {
+    state: StateStore;
+    inference: SkillInferenceEngine;
+    broadcast: (message: ClientWebSocketMessage) => void;
+    getActiveSessionId: () => string | undefined;
+    setActiveSessionId: (id: string) => void;
+}
+export declare function createEventHandler(deps: EventHandlerDependencies): (req: IncomingMessage, res: ServerResponse) => Promise<void>;
+//# sourceMappingURL=event.d.ts.map

package/servers/dashboard/dist/api/event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event.d.ts","sourceRoot":"","sources":["../../src/api/event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAkB,sBAAsB,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAIvD,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,EAAE,oBAAoB,CAAC;IAChC,SAAS,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,IAAI,CAAC;IACrD,kBAAkB,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAC7C,kBAAkB,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;CAC1C;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,wBAAwB,IACjD,KAAK,eAAe,EAAE,KAAK,cAAc,KAAG,OAAO,CAAC,IAAI,CAAC,CAqDxE"}

package/servers/dashboard/dist/api/event.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createEventHandler = createEventHandler;
+const sanitize_1 = require("../filters/sanitize");
+const presenter_1 = require("../presenter");
+function createEventHandler(deps) {
+    return async (req, res) => {
+        if (req.method !== 'POST') {
+            res.statusCode = 405;
+            res.end(JSON.stringify({ error: 'Method not allowed' }));
+            return;
+        }
+        let body = '';
+        req.setEncoding('utf8');
+        req.on('data', (chunk) => {
+            body += chunk;
+        });
+        await new Promise((resolve) => {
+            req.on('end', resolve);
+        });
+        let event;
+        try {
+            event = JSON.parse(body);
+        }
+        catch {
+            res.statusCode = 400;
+            res.end(JSON.stringify({ error: 'Invalid JSON' }));
+            return;
+        }
+        if (!(0, sanitize_1.sanitizeEventBoundary)(event)) {
+            res.statusCode = 400;
+            res.end(JSON.stringify({ error: 'Event contains unsafe fields' }));
+            return;
+        }
+        if (!event.session_id || !event.event_type) {
+            res.statusCode = 400;
+            res.end(JSON.stringify({ error: 'Missing required fields' }));
+            return;
+        }
+        const session = deps.state.applyEvent(event);
+        const inferred = deps.inference.infer(event, session);
+        if (inferred.skill !== session.active_skill || inferred.confidence !== session.active_confidence) {
+            deps.state.setActiveSkill(session.id, inferred.skill, inferred.confidence);
+        }
+        const updatedSession = deps.state.getSession(session.id);
+        deps.setActiveSessionId(updatedSession.id);
+        deps.broadcast((0, presenter_1.createUpdateMessage)(updatedSession, deps.getActiveSessionId()));
+        res.statusCode = 200;
+        res.end(JSON.stringify({ ok: true }));
+    };
+}
+//# sourceMappingURL=event.js.map

package/servers/dashboard/dist/api/event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event.js","sourceRoot":"","sources":["../../src/api/event.ts"],"names":[],"mappings":";;AAeA,gDAsDC;AAjED,kDAA4D;AAC5D,4CAAmD;AAUnD,SAAgB,kBAAkB,CAAC,IAA8B;IAC/D,OAAO,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAiB,EAAE;QACxE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,IAAI,KAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAA,gCAAqB,EAAC,KAA2C,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAC3C,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAEtD,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO,CAAC,YAAY,IAAI,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACjG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAE,CAAC;QAC1D,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAE3C,IAAI,CAAC,SAAS,CAAC,IAAA,+BAAmB,EAAC,cAAc,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QAE/E,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC;AACJ,CAAC"}

package/servers/dashboard/dist/api/skills.d.ts

@@ -0,0 +1,4 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { SkillRegistry } from '../skills/registry';
+export declare function createSkillsHandler(registry: SkillRegistry): (_req: IncomingMessage, res: ServerResponse) => Promise<void>;
+//# sourceMappingURL=skills.d.ts.map

package/servers/dashboard/dist/api/skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/api/skills.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,IAC3C,MAAM,eAAe,EAAE,KAAK,cAAc,KAAG,OAAO,CAAC,IAAI,CAAC,CAMzE"}

package/servers/dashboard/dist/api/skills.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSkillsHandler = createSkillsHandler;
+function createSkillsHandler(registry) {
+    return async (_req, res) => {
+        const skills = registry.getSkills();
+        res.statusCode = 200;
+        res.setHeader('Content-Type', 'application/json');
+        res.end(JSON.stringify(skills));
+    };
+}
+//# sourceMappingURL=skills.js.map

package/servers/dashboard/dist/api/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../src/api/skills.ts"],"names":[],"mappings":";;AAGA,kDAOC;AAPD,SAAgB,mBAAmB,CAAC,QAAuB;IACzD,OAAO,KAAK,EAAE,IAAqB,EAAE,GAAmB,EAAiB,EAAE;QACzE,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;QACpC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC;AACJ,CAAC"}

package/servers/dashboard/dist/config.d.ts

@@ -0,0 +1,11 @@
+import type { ServerConfig } from './types';
+export declare const SAFE_TOOL_INPUT_KEYS: Set<string>;
+export declare const DANGEROUS_TOOL_INPUT_KEYS: Set<string>;
+export declare const DEFAULT_PORT = 7890;
+export declare const DEFAULT_HOST = "127.0.0.1";
+export declare const DEFAULT_MAX_EVENTS = 200;
+export declare const DEFAULT_SESSION_MAX_AGE_MS: number;
+export declare const DEFAULT_PRUNE_INTERVAL_MS: number;
+export declare function loadConfig(): ServerConfig;
+export declare function resolvePackageRoot(): string;
+//# sourceMappingURL=config.d.ts.map

package/servers/dashboard/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,eAAO,MAAM,oBAAoB,aAM/B,CAAC;AAEH,eAAO,MAAM,yBAAyB,aAYpC,CAAC;AAEH,eAAO,MAAM,YAAY,OAAO,CAAC;AACjC,eAAO,MAAM,YAAY,cAAc,CAAC;AACxC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,eAAO,MAAM,0BAA0B,QAAsB,CAAC;AAC9D,eAAO,MAAM,yBAAyB,QAAY,CAAC;AAEnD,wBAAgB,UAAU,IAAI,YAAY,CAYzC;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAmB3C"}

package/servers/dashboard/dist/config.js

@@ -0,0 +1,65 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_PRUNE_INTERVAL_MS = exports.DEFAULT_SESSION_MAX_AGE_MS = exports.DEFAULT_MAX_EVENTS = exports.DEFAULT_HOST = exports.DEFAULT_PORT = exports.DANGEROUS_TOOL_INPUT_KEYS = exports.SAFE_TOOL_INPUT_KEYS = void 0;
+exports.loadConfig = loadConfig;
+exports.resolvePackageRoot = resolvePackageRoot;
+const node_path_1 = __importDefault(require("node:path"));
+const node_fs_1 = __importDefault(require("node:fs"));
+exports.SAFE_TOOL_INPUT_KEYS = new Set([
+    'path',
+    'file_path',
+    'skill',
+    'subagent_type',
+    'url',
+]);
+exports.DANGEROUS_TOOL_INPUT_KEYS = new Set([
+    'command',
+    'content',
+    'text',
+    'code',
+    'prompt',
+    'api_key',
+    'token',
+    'password',
+    'secret',
+    'key',
+    'authorization',
+]);
+exports.DEFAULT_PORT = 7890;
+exports.DEFAULT_HOST = '127.0.0.1';
+exports.DEFAULT_MAX_EVENTS = 200;
+exports.DEFAULT_SESSION_MAX_AGE_MS = 24 * 60 * 60 * 1000;
+exports.DEFAULT_PRUNE_INTERVAL_MS = 60 * 1000;
+function loadConfig() {
+    const port = parseInt(process.env.CREWLOOP_DASHBOARD_PORT || String(exports.DEFAULT_PORT), 10);
+    const host = process.env.CREWLOOP_DASHBOARD_HOST || exports.DEFAULT_HOST;
+    return {
+        port,
+        host,
+        packageRoot: resolvePackageRoot(),
+        maxEventsPerSession: exports.DEFAULT_MAX_EVENTS,
+        sessionMaxAgeMs: exports.DEFAULT_SESSION_MAX_AGE_MS,
+        pruneIntervalMs: exports.DEFAULT_PRUNE_INTERVAL_MS,
+    };
+}
+function resolvePackageRoot() {
+    try {
+        const skillsPackageJson = require.resolve('@archznn/crewloop-skills/package.json');
+        return node_path_1.default.dirname(skillsPackageJson);
+    }
+    catch {
+        const cwdNodeModules = node_path_1.default.join(process.cwd(), 'node_modules', '@archznn', 'crewloop-skills');
+        if (node_fs_1.default.existsSync(node_path_1.default.join(cwdNodeModules, 'package.json'))) {
+            return cwdNodeModules;
+        }
+    }
+    const monorepoRoot = node_path_1.default.resolve(__dirname, '..', '..', '..');
+    if (node_fs_1.default.existsSync(node_path_1.default.join(monorepoRoot, 'skills', 'orchestrator', 'SKILL.md'))) {
+        return monorepoRoot;
+    }
+    throw new Error('Could not find CrewLoop skills package. Install @archznn/crewloop-skills or run from the CrewLoop repository.');
+}
+//# sourceMappingURL=config.js.map

package/servers/dashboard/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;;;;AAgCA,gCAYC;AAED,gDAmBC;AAjED,0DAA6B;AAC7B,sDAAyB;AAGZ,QAAA,oBAAoB,GAAG,IAAI,GAAG,CAAC;IAC1C,MAAM;IACN,WAAW;IACX,OAAO;IACP,eAAe;IACf,KAAK;CACN,CAAC,CAAC;AAEU,QAAA,yBAAyB,GAAG,IAAI,GAAG,CAAC;IAC/C,SAAS;IACT,SAAS;IACT,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,OAAO;IACP,UAAU;IACV,QAAQ;IACR,KAAK;IACL,eAAe;CAChB,CAAC,CAAC;AAEU,QAAA,YAAY,GAAG,IAAI,CAAC;AACpB,QAAA,YAAY,GAAG,WAAW,CAAC;AAC3B,QAAA,kBAAkB,GAAG,GAAG,CAAC;AACzB,QAAA,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,QAAA,yBAAyB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnD,SAAgB,UAAU;IACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM,CAAC,oBAAY,CAAC,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,oBAAY,CAAC;IAEjE,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,WAAW,EAAE,kBAAkB,EAAE;QACjC,mBAAmB,EAAE,0BAAkB;QACvC,eAAe,EAAE,kCAA0B;QAC3C,eAAe,EAAE,iCAAyB;KAC3C,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB;IAChC,IAAI,CAAC;QACH,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;QACnF,OAAO,mBAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,cAAc,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;QAC/F,IAAI,iBAAE,CAAC,UAAU,CAAC,mBAAI,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO,cAAc,CAAC;QACxB,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,mBAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/D,IAAI,iBAAE,CAAC,UAAU,CAAC,mBAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;QACjF,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,KAAK,CACb,+GAA+G,CAChH,CAAC;AACJ,CAAC"}

package/servers/dashboard/dist/filters/sanitize.d.ts

@@ -0,0 +1,14 @@
+import type { EventStatus } from '../types';
+export interface SanitizeInput {
+    tool_name: string;
+    tool_input?: Record<string, unknown>;
+    tool_response?: Record<string, unknown>;
+}
+export interface SafeDetail {
+    detail?: string;
+    status?: EventStatus;
+    duration_ms?: number;
+}
+export declare function sanitize(input: SanitizeInput, event: 'pre' | 'post'): SafeDetail;
+export declare function sanitizeEventBoundary(payload: Record<string, unknown>): boolean;
+//# sourceMappingURL=sanitize.d.ts.map

package/servers/dashboard/dist/filters/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/filters/sanitize.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAuBD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,UAAU,CA+BhF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAQ/E"}

package/servers/dashboard/dist/filters/sanitize.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitize = sanitize;
+exports.sanitizeEventBoundary = sanitizeEventBoundary;
+const config_1 = require("../config");
+function extractSafeDetail(input) {
+    for (const [key, value] of Object.entries(input)) {
+        const lower = key.toLowerCase();
+        if (!config_1.SAFE_TOOL_INPUT_KEYS.has(lower)) {
+            continue;
+        }
+        if (typeof value === 'string') {
+            if (lower === 'url') {
+                try {
+                    const url = new URL(value);
+                    return url.hostname;
+                }
+                catch {
+                    return undefined;
+                }
+            }
+            return value;
+        }
+    }
+    return undefined;
+}
+function sanitize(input, event) {
+    const result = {};
+    if (input.tool_input) {
+        const detail = extractSafeDetail(input.tool_input);
+        if (detail) {
+            result.detail = detail;
+        }
+    }
+    if (event === 'post' && input.tool_response && typeof input.tool_response === 'object') {
+        const response = input.tool_response;
+        if (typeof response.duration_ms === 'number') {
+            result.duration_ms = response.duration_ms;
+        }
+        else if (typeof response.durationMs === 'number') {
+            result.duration_ms = response.durationMs;
+        }
+        if (response.is_error === true || response.success === false || response.error) {
+            result.status = 'error';
+        }
+        else if (response.success === true || response.is_error === false) {
+            result.status = 'success';
+        }
+    }
+    if (event === 'pre') {
+        result.status = 'running';
+    }
+    return result;
+}
+function sanitizeEventBoundary(payload) {
+    const keys = Object.keys(payload);
+    for (const key of keys) {
+        if (config_1.DANGEROUS_TOOL_INPUT_KEYS.has(key.toLowerCase())) {
+            return false;
+        }
+    }
+    return true;
+}
+//# sourceMappingURL=sanitize.js.map

package/servers/dashboard/dist/filters/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/filters/sanitize.ts"],"names":[],"mappings":";;AAoCA,4BA+BC;AAED,sDAQC;AA7ED,sCAA4E;AAe5E,SAAS,iBAAiB,CAAC,KAA8B;IACvD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC,6BAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC3B,OAAO,GAAG,CAAC,QAAQ,CAAC;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,QAAQ,CAAC,KAAoB,EAAE,KAAqB;IAClE,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACzB,CAAC;IACH,CAAC;IAED,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QACvF,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAwC,CAAC;QAEhE,IAAI,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;QAC5C,CAAC;aAAM,IAAI,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC;QAC3C,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC/E,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;QAC1B,CAAC;aAAM,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YACpE,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;IAC5B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,qBAAqB,CAAC,OAAgC;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,kCAAyB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/servers/dashboard/dist/filters/sanitize.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sanitize.test.d.ts.map

package/servers/dashboard/dist/filters/sanitize.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.test.d.ts","sourceRoot":"","sources":["../../src/filters/sanitize.test.ts"],"names":[],"mappings":""}

package/servers/dashboard/dist/filters/sanitize.test.js

@@ -0,0 +1,71 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const strict_1 = __importDefault(require("node:assert/strict"));
+const sanitize_1 = require("./sanitize");
+(0, node_test_1.describe)('sanitize', () => {
+    (0, node_test_1.it)('extracts safe path details', () => {
+        const result = (0, sanitize_1.sanitize)({
+            tool_name: 'Read',
+            tool_input: { path: 'README.md' },
+        }, 'pre');
+        strict_1.default.equal(result.detail, 'README.md');
+        strict_1.default.equal(result.status, 'running');
+    });
+    (0, node_test_1.it)('extracts skill name from Skill tool input', () => {
+        const result = (0, sanitize_1.sanitize)({
+            tool_name: 'Skill',
+            tool_input: { skill: 'architect' },
+        }, 'pre');
+        strict_1.default.equal(result.detail, 'architect');
+    });
+    (0, node_test_1.it)('strips dangerous command input', () => {
+        const result = (0, sanitize_1.sanitize)({
+            tool_name: 'Bash',
+            tool_input: { command: 'rm -rf /' },
+        }, 'pre');
+        strict_1.default.equal(result.detail, undefined);
+        strict_1.default.equal(result.status, 'running');
+    });
+    (0, node_test_1.it)('strips content/text input', () => {
+        const result = (0, sanitize_1.sanitize)({
+            tool_name: 'Write',
+            tool_input: { path: 'secret.env', content: 'API_KEY=123' },
+        }, 'pre');
+        strict_1.default.equal(result.detail, 'secret.env');
+    });
+    (0, node_test_1.it)('marks success on post event', () => {
+        const result = (0, sanitize_1.sanitize)({
+            tool_name: 'Read',
+            tool_input: { path: 'README.md' },
+            tool_response: { success: true, duration_ms: 12 },
+        }, 'post');
+        strict_1.default.equal(result.status, 'success');
+        strict_1.default.equal(result.duration_ms, 12);
+    });
+    (0, node_test_1.it)('marks error on post event', () => {
+        const result = (0, sanitize_1.sanitize)({
+            tool_name: 'Bash',
+            tool_response: { success: false, durationMs: 45 },
+        }, 'post');
+        strict_1.default.equal(result.status, 'error');
+        strict_1.default.equal(result.duration_ms, 45);
+    });
+    (0, node_test_1.it)('extracts hostname from safe url input', () => {
+        const result = (0, sanitize_1.sanitize)({
+            tool_name: 'FetchURL',
+            tool_input: { url: 'https://example.com/path' },
+        }, 'pre');
+        strict_1.default.equal(result.detail, 'example.com');
+        strict_1.default.equal(result.status, 'running');
+    });
+    (0, node_test_1.it)('rejects events with dangerous keys at boundary', () => {
+        strict_1.default.equal((0, sanitize_1.sanitizeEventBoundary)({ command: 'ls' }), false);
+        strict_1.default.equal((0, sanitize_1.sanitizeEventBoundary)({ token: 'abc' }), false);
+        strict_1.default.equal((0, sanitize_1.sanitizeEventBoundary)({ path: 'README.md' }), true);
+    });
+});
+//# sourceMappingURL=sanitize.test.js.map

package/servers/dashboard/dist/filters/sanitize.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.test.js","sourceRoot":"","sources":["../../src/filters/sanitize.test.ts"],"names":[],"mappings":";;;;;AAAA,yCAAyC;AACzC,gEAAwC;AACxC,yCAA6D;AAE7D,IAAA,oBAAQ,EAAC,UAAU,EAAE,GAAG,EAAE;IACxB,IAAA,cAAE,EAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,IAAA,mBAAQ,EACrB;YACE,SAAS,EAAE,MAAM;YACjB,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;SAClC,EACD,KAAK,CACN,CAAC;QACF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACzC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,IAAA,mBAAQ,EACrB;YACE,SAAS,EAAE,OAAO;YAClB,UAAU,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE;SACnC,EACD,KAAK,CACN,CAAC;QACF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,MAAM,GAAG,IAAA,mBAAQ,EACrB;YACE,SAAS,EAAE,MAAM;YACjB,UAAU,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;SACpC,EACD,KAAK,CACN,CAAC;QACF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,IAAA,mBAAQ,EACrB;YACE,SAAS,EAAE,OAAO;YAClB,UAAU,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE;SAC3D,EACD,KAAK,CACN,CAAC;QACF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,MAAM,GAAG,IAAA,mBAAQ,EACrB;YACE,SAAS,EAAE,MAAM;YACjB,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YACjC,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;SAClD,EACD,MAAM,CACP,CAAC;QACF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,IAAA,mBAAQ,EACrB;YACE,SAAS,EAAE,MAAM;YACjB,aAAa,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE;SAClD,EACD,MAAM,CACP,CAAC;QACF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,IAAA,mBAAQ,EACrB;YACE,SAAS,EAAE,UAAU;YACrB,UAAU,EAAE,EAAE,GAAG,EAAE,0BAA0B,EAAE;SAChD,EACD,KAAK,CACN,CAAC;QACF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC3C,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,gBAAM,CAAC,KAAK,CAAC,IAAA,gCAAqB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9D,gBAAM,CAAC,KAAK,CAAC,IAAA,gCAAqB,EAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7D,gBAAM,CAAC,KAAK,CAAC,IAAA,gCAAqB,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/servers/dashboard/dist/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/servers/dashboard/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/servers/dashboard/dist/index.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const config_1 = require("./config");
+const server_1 = require("./server");
+async function main() {
+    const config = (0, config_1.loadConfig)();
+    const server = (0, server_1.createDashboardServer)(config);
+    process.on('SIGINT', async () => {
+        await server.stop();
+        process.exit(0);
+    });
+    process.on('SIGTERM', async () => {
+        await server.stop();
+        process.exit(0);
+    });
+    await server.start();
+}
+main().catch((err) => {
+    console.error('Failed to start dashboard:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/servers/dashboard/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;AAAA,qCAAsC;AACtC,qCAAiD;AAEjD,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAA,8BAAqB,EAAC,MAAM,CAAC,CAAC;IAE7C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC9B,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/servers/dashboard/dist/presenter.d.ts

@@ -0,0 +1,7 @@
+import type { Session, DashboardState, ClientSession, ClientEvent, ClientWebSocketMessage } from './types';
+export declare function presentEvent(event: Session['events'][number]): ClientEvent;
+export declare function presentSession(session: Session): ClientSession;
+export declare function presentState(state: DashboardState): ClientSession[];
+export declare function createSnapshotMessage(sessions: Session[]): ClientWebSocketMessage;
+export declare function createUpdateMessage(session: Session, activeSessionId?: string): ClientWebSocketMessage;
+//# sourceMappingURL=presenter.d.ts.map

package/servers/dashboard/dist/presenter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presenter.d.ts","sourceRoot":"","sources":["../src/presenter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAE3G,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,WAAW,CAW1E;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAkB9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,cAAc,GAAG,aAAa,EAAE,CAEnE;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,sBAAsB,CAKjF;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,OAAO,EAChB,eAAe,CAAC,EAAE,MAAM,GACvB,sBAAsB,CAMxB"}