@basou/core 0.9.0 → 0.10.0

package/dist/index.d.ts

@@ -1411,12 +1411,14 @@ declare const SessionMetricsSchema: z.ZodObject<{
 /** Inferred runtime type for {@link SessionMetricsSchema}. */
 type SessionMetrics = z.infer<typeof SessionMetricsSchema>;
 /**
- * Tamper-evidence head anchor for sessions whose `events.jsonl` was written
- * with hash chaining (import / in-place re-import): `head_hash` is the hex
- * sha-256 of the last written event line (excluding the trailing newline),
- * `event_count` the number of chained lines. Absent on live / ad-hoc /
- * pre-feature sessions. Additive optional => no schema_version bump.
- * `.strict()` because the import writer fully owns the shape.
+ * Tamper-evidence head anchor for a session whose `events.jsonl` is hash
+ * chained: `head_hash` is the hex sha-256 of the last written event line
+ * (excluding the trailing newline), `event_count` the number of chained lines.
+ * Written by the import / in-place re-import writers and, for a live session
+ * (`exec` / `run` / ad-hoc), by the finalize once it reaches a terminal status.
+ * Absent on a still-live session (the anchor is stamped at finalize) and on a
+ * pre-feature unchained session. Additive optional => no schema_version bump.
+ * `.strict()` because the writers fully own the shape.
  */
 declare const SessionIntegritySchema: z.ZodObject<{
     head_hash: z.ZodString;
@@ -1553,6 +1555,35 @@ declare function enumerateSessionDirs(paths: BasouPaths): Promise<string[]>;
  *   or the zod error).
  */
 declare function readSessionYaml(paths: BasouPaths, sessionId: string): Promise<Session>;
+/**
+ * Apply a terminal-status mutation to a live session's `session.yaml` AND, in
+ * the same locked write, stamp the tamper-evidence head anchor derived from the
+ * on-disk `events.jsonl` tail. Used by the `exec` / `run` orchestrators for
+ * BOTH terminal writers (the normal end-of-run finalize and the spawn-failure
+ * `failed` finalize).
+ *
+ * Why locked + anchor-from-tail: live appends chain the LOG only and leave the
+ * anchor for finalize. Reading the final tail under the session lock means a
+ * foreign line appended just before finalize (e.g. a `decision record` attached
+ * to a still-running session) is included in the anchor, and a foreign attach
+ * that arrives after the terminal status is set is rejected by the attach gate
+ * — so the anchor can never disagree with the at-rest log. The whole-document
+ * read-modify-write also preserves any field a foreign locked writer set (e.g.
+ * a task attach's `task_id`).
+ *
+ * The anchor is written only when the log is actually chained with at least one
+ * line; a legacy unchained session (and an empty log) is left with no
+ * `integrity` anchor, matching the import writers. The mutator receives the
+ * full {@link Session} document and typically sets
+ * `session.session.status` / `ended_at` / `invocation.exit_code` /
+ * `related_files`.
+ *
+ * Throws the {@link inspectChainTail} errors (torn / mixed log), the
+ * {@link readSessionYaml} errors, a zod error if the mutation produces an
+ * invalid document, or `Error("Failed to overwrite YAML file")` on a disk
+ * failure.
+ */
+declare function finalizeSessionYaml(paths: BasouPaths, sessionId: string, mutate: (session: Session) => void): Promise<void>;
 /**
  * Classify a `running` session as suspect using one of two rules:
  *
@@ -1680,6 +1711,86 @@ declare function chainEvents(events: ReadonlyArray<Event>, sessionId: string): C
  */
 declare function chainRawJsonLines(rawLines: ReadonlyArray<string>, sessionId: string): ChainedEvents;
 
+/**
+ * The chain state of an existing `events.jsonl`, as needed by the live append
+ * and finalize paths.
+ *
+ * - `chained` — whether the NEXT line written to this log must carry a
+ *   `prev_hash`. True for an empty / not-yet-created log (a fresh session
+ *   chains from its genesis) and for a log whose FIRST complete line already
+ *   carries `prev_hash`. False for a legacy / pre-feature log whose first line
+ *   is unchained (so it stays unchained — we never half-chain a file).
+ * - `head` — the `prev_hash` value the next line carries when `chained`:
+ *   `genesisHash(sessionId)` for an empty log, otherwise `lineHash` of the LAST
+ *   complete line's raw bytes. Meaningless (set to the genesis hash) when
+ *   `chained` is false.
+ * - `count` — number of complete (newline-terminated) lines on disk; the
+ *   `event_count` an integrity anchor records.
+ */
+type ChainTailState = {
+    chained: boolean;
+    head: string;
+    count: number;
+};
+/**
+ * Inspect `<sessions>/<sessionId>/events.jsonl` to decide how the next append
+ * (or the finalize anchor) must treat the chain. READ-ONLY; the caller MUST
+ * already hold the session lock so the inspected tail cannot move underneath a
+ * subsequent append.
+ *
+ * Chained-ness is decided from the FIRST complete line (does the log claim to
+ * be chained), and the head pointer is taken from the LAST complete line. If
+ * the first and last lines DISAGREE — a mixed / partially-tampered file — the
+ * call THROWS rather than extending a broken chain; verify is the detector, the
+ * writer must not deepen a break. An unterminated final line (a torn tail from
+ * a crashed prior append) also THROWS so a new line is never glued onto a
+ * fragment.
+ *
+ * Throws `Error("Failed to read events.jsonl")` for non-ENOENT I/O,
+ * `Error("Unterminated final line in events.jsonl")` for a torn tail, and
+ * `Error("events.jsonl is partially chained")` for a mixed first/last line.
+ */
+declare function inspectChainTail(paths: BasouPaths, sessionId: string): Promise<ChainTailState>;
+/**
+ * Append one event to `<sessions>/<sessionId>/events.jsonl`, threading the
+ * tamper-evidence hash chain. The caller MUST already hold the session lock
+ * (`acquireLock(paths, "session", sessionId)`); this function does NOT acquire
+ * it, so it composes inside a larger caller-owned critical section (the
+ * convention used by `decision record`, `session note`, task attach and
+ * approval resolution) without re-entrant lock deadlock.
+ *
+ * The event is validated against {@link EventSchema}, then — if the existing
+ * log is chained (or empty) — written with a `prev_hash` back-pointer derived
+ * from the real on-disk tail (see {@link inspectChainTail}); a legacy unchained
+ * log keeps receiving plain unchained lines. The single serializer
+ * ({@link serializeEventLine}) is shared with the bulk writers so the bytes a
+ * chain hashes can never diverge from another path's bytes.
+ *
+ * Does NOT touch `session.yaml.integrity`: the head anchor is written once, at
+ * the terminal-status finalize, by {@link finalizeSessionYaml}. A still-live
+ * session therefore has a chained log but no anchor yet, which `verify` reports
+ * as the benign `in_progress`.
+ *
+ * Throws `"Invalid Basou event payload"` on validation failure, the
+ * {@link inspectChainTail} errors on a torn / mixed log, or `"Failed to append
+ * event to events.jsonl"` on a disk failure. The native error is attached as
+ * `cause`.
+ */
+declare function appendChainedEventLocked(paths: BasouPaths, sessionId: string, event: unknown): Promise<{
+    chained: boolean;
+}>;
+/**
+ * Self-locking wrapper around {@link appendChainedEventLocked} for callers that
+ * do NOT already hold the session lock (the `exec` / `run` orchestrators, which
+ * append one event at a time to a session they own). Acquires the session lock,
+ * appends, and releases. Each append is a short-lived lock hold — the lock is
+ * NEVER held across a child process — so a foreign attach can interleave safely
+ * and the next append chains onto the true tail.
+ */
+declare function appendChainedEvent(paths: BasouPaths, sessionId: string, event: unknown): Promise<{
+    chained: boolean;
+}>;
+
 /**
  * Append a single Basou event to `<sessionDir>/events.jsonl`.
  *
@@ -1688,10 +1799,13 @@ declare function chainRawJsonLines(rawLines: ReadonlyArray<string>, sessionId: s
  * Validation enforces the per-variant contract (required fields, source
  * vocabulary, strict variants such as `adapter_output`).
  *
- * Appended lines are NOT hash-chained: chaining is exclusive to the bulk
- * import writers ({@link writeEventsBulk} with `chain: true`), and imported
- * sessions reject every append path, so a chained file never receives an
- * unchained appended line.
+ * This LOW-LEVEL writer does NOT hash-chain — it writes the validated event as
+ * a plain line. Hash-chained appends go through `appendChainedEvent` /
+ * `appendChainedEventLocked` (the live `exec` / `run` / attach / approval
+ * paths), and the bulk import writers chain via {@link writeEventsBulk} with
+ * `chain: true`. A direct caller of this raw export can still add an unchained
+ * line to a chained log; that is DETECTED by `basou verify`
+ * (`missing_prev_hash`), not prevented — a documented boundary.
  *
  * Atomicity: writes go through `appendFile` which uses `O_APPEND`. Lines up
  * to `PIPE_BUF` bytes (Linux 4096 / macOS 512) are written atomically by the
@@ -1758,10 +1872,15 @@ declare function writeEventsBulk(sessionDir: string, events: Event[], options?:
  *   (an import crashed between the events write and the yaml write, or the
  *   yaml was deleted out of band). Benign: a re-import / `--force` repairs it.
  * - `tampered` — a real integrity break (see {@link ChainBreakReason}).
+ * - `in_progress` — a chained log whose session is still LIVE (a non-terminal
+ *   status: initialized / running / waiting_approval). The internal
+ *   back-pointer chain is fully verified, but the tail and head anchor are
+ *   forgiven because a live session's log is legitimately still growing and its
+ *   anchor is not written until the terminal finalize. Informational, exit 0.
  * - `verified` — every back-pointer, genesis, session-id and line-discipline
  *   check passed AND the head anchor matches the on-disk log.
  */
-type ChainVerdictStatus = "verified" | "unchained" | "empty" | "incomplete" | "tampered";
+type ChainVerdictStatus = "verified" | "unchained" | "empty" | "incomplete" | "in_progress" | "tampered";
 /** Machine-readable detail for a `tampered` (or `incomplete`) verdict. */
 type ChainBreakReason = 
 /** The file does not end with `\n`; chained writers always terminate the last line. */
@@ -1818,6 +1937,11 @@ type ChainVerdict = {
  *   and finally the head anchor (`incomplete` when `session.yaml` is entirely
  *   absent; `tampered` when it is present without a matching anchor).
  *
+ * - When the chained log belongs to a LIVE session (a non-terminal status),
+ *   the internal chain is verified but a torn tail / absent / mismatching
+ *   anchor is FORGIVEN as `in_progress`: a live session's tail is legitimately
+ *   still growing and its anchor is written only at the terminal finalize.
+ *
  * NON-CRYPTOGRAPHIC: the anchor lives in `session.yaml`, which is itself
  * editable; an attacker rewriting BOTH files consistently is not detected.
  * Signing is a follow-up.
@@ -1825,6 +1949,12 @@ type ChainVerdict = {
  * Throws `Error("Failed to read events.jsonl")` only for non-ENOENT I/O
  * failures (EACCES etc.) — an unreadable file is an environment problem, not
  * a verdict.
+ *
+ * READ-ONLY and lock-free: a session being finalized concurrently can leave the
+ * two files momentarily out of step (old events read before a finalize, new
+ * anchor read after it). A strict `anchor_mismatch` is therefore re-snapshotted
+ * ONCE before being returned — a genuine mismatch is deterministic across the
+ * retry, while a finalize-in-flight resolves within it.
  */
 declare function verifyEventsChain(paths: BasouPaths, sessionId: string): Promise<ChainVerdict>;
 
@@ -2006,8 +2136,8 @@ declare function isValidPrefixedId(value: string): boolean;
  * Self-edges are rejected so the audit trail stays monotonic.
  */
 declare const TaskStatusSchema: z.ZodEnum<{
-    planned: "planned";
     in_progress: "in_progress";
+    planned: "planned";
     done: "done";
     cancelled: "cancelled";
 }>;
@@ -2027,8 +2157,8 @@ declare const TaskSchema: z.ZodObject<{
         title: z.ZodString;
         label: z.ZodOptional<z.ZodString>;
         status: z.ZodEnum<{
-            planned: "planned";
             in_progress: "in_progress";
+            planned: "planned";
             done: "done";
             cancelled: "cancelled";
         }>;
@@ -3754,4 +3884,4 @@ declare function overwriteYamlFile(filePath: string, value: unknown): Promise<vo
  */
 declare const BASOU_CORE_VERSION = "0.1.0";
 
-export { ACTIVE_GAP_CAP_MS, type ActiveTimeBasis, type AdapterOutputEvent, type AppendBasouGitignoreResult, type AppendEventToExistingInput, type AppendEventToExistingResult, type Approval, type ApprovalApprovedEvent, type ApprovalExpiredEvent, ApprovalIdSchema, type ApprovalLocation, type ApprovalRejectedEvent, type ApprovalRequestedEvent, ApprovalSchema, type ApprovalStatus, ApprovalStatusSchema, type ArchiveTaskInput, type ArchiveTaskResult, type AttachTaskInput, type AttachUpdateTaskStatusInput, type AttachableStatus, BASOU_CORE_VERSION, type BasouPaths, type BulkChainResult, CLAUDE_IMPORT_SOURCE, CODEX_IMPORT_SOURCE, type CaptureMode, type ChainBreakReason, type ChainVerdict, type ChainVerdictStatus, type ChainedEvents, ChildProcessRunner, type ClaudeTranscriptRecord, type ClaudeTranscriptToPayloadOptions, type CodexRolloutRecord, type CodexRolloutToPayloadOptions, type CommandExecutedEvent, type CommandLookup, type CreateAdHocSessionInput, type CreateAdHocSessionResult, type CreateAdHocTaskInput, type CreateManifestInput, type CreateTaskInput, type CreateTaskResult, type DayWorkStats, DecisionIdSchema, type DecisionRecordedEvent, type DecisionsRendererInput, type DecisionsRendererResult, type DeleteTaskInput, type DeleteTaskResult, type DiffResult, type EditTaskInput, type EditTaskResult, type Event, EventIdSchema, EventSchema, EventSourceSchema, FailedToFinalizeError, type FileChange, type FileChangeStatus, type FileChangedEvent, GENERATED_END, GENERATED_START, type GitSnapshot, type GitSnapshotEvent, type HandoffRendererInput, type HandoffRendererResult, ID_PREFIXES, type IdPrefix, type ImportSessionOptions, type ImportSessionResult, IsoTimestampSchema, JSON_SCHEMA_VERSION, type JsonSchemaArtifact, type LoadSessionEntriesOptions, type LoadTaskEntriesOptions, type LoadedApproval, type LockHandle, type LockScope, type Manifest, ManifestSchema, type MarkerSection, type MeasureAvailability, type NoteAddedEvent, type PrefixedId, type ProcessRunner, type RechainOptions, type RechainResult, type ReconcileAllResult, type ReconcileAllTasksInput, type ReconcileAllTasksOptions, type ReconcileFailure, type ReconcileResult, type ReconcileTaskInput, type RefreshLinkageInput, type RefreshLinkageResult, type ReimportOptions, type ReimportResult, type ReplayOptions, type ReplayWarning, type RiskLevel, RiskLevelSchema, type RunOptions, type RunResult, STUCK_THRESHOLD_MS, type SanitizePathOptions, type SanitizeRelatedFilesResult, SchemaVersionSchema, type Session, type SessionEndedEvent, type SessionEntry, SessionIdSchema, type SessionImportPayload, SessionImportPayloadSchema, type SessionInnerImportInput, SessionInnerImportSchema, type SessionIntegrity, SessionIntegritySchema, type SessionMetrics, SessionMetricsSchema, SessionSchema, type SessionSkipReason, type SessionSourceKind, SessionSourceKindSchema, type SessionStartedEvent, type SessionStatus, type SessionStatusChangedEvent, SessionStatusSchema, type SessionWorkStats, type SourceWorkStats, type StatusCount, StatusSchema, type StatusSnapshot, type SuspectReason, type Task, type TaskArchivedEvent, type TaskCreatedEvent, type TaskDeletedEvent, type TaskDocument, TaskIdSchema, type TaskLinkageRefreshedEvent, type TaskReconciledEvent, TaskSchema, type TaskSkipReason, type TaskStatus, type TaskStatusChangedEvent, TaskStatusSchema, TaskWriteAfterEventError, type TaskWriteAfterEventPhase, type TokenTotals, type UpdateAdHocTaskStatusInput, type UpdateTaskStatusInput, type UpdateTaskStatusResult, type WorkStatsInput, type WorkStatsResult, type WorkStatsTotals, WorkspaceIdSchema, type WriteEventsBulkOptions, type WriteTaskFileMode, acquireLock, appendBasouGitignore, appendEvent, appendEventToExistingSession, archiveTask, assertBasouRootSafe, basouPaths, buildJsonSchemas, buildStatusSnapshot, chainEvents, chainRawJsonLines, classifySuspect, claudeCodeAdapterMetadata, claudeTranscriptToImportPayload, codexRolloutToImportPayload, computeWorkStats, createAdHocSessionWithEvent, createManifest, createTaskWithEvent, deleteTask, editTask, ensureBasouDirectory, enumerateApprovals, enumerateArchivedTaskIds, enumerateSessionDirs, enumerateTaskIds, findErrorCode, genesisHash, getDiff, getSnapshot, importSessionFromJson, isImportDerivedSource, isLazyExpired, isValidPrefixedId, lineHash, linkYamlFile, loadApproval, loadSessionEntries, loadTaskEntries, overwriteYamlFile, parseDuration, parseMarkers, prefixedUlid, readAllEvents, readManifest, readMarkdownFile, readSessionYaml, readStatus, readTaskFile, readTaskFileWithArchiveFallback, readYamlFile, rechainSessionInPlace, reconcileAllTasks, reconcileTask, refreshTaskLinkedSessions, reimportPreservingId, renderDecisions, renderHandoff, renderWithMarkers, replayEvents, resolveClaudeCodeCommand, resolveRepositoryRoot, resolveSessionId, resolveTaskId, sanitizePath, sanitizeRelatedFiles, sanitizeWorkingDirectory, serializeEventLine, serializeJsonSchema, sessionWorkStatsFromEvents, summarizeAdapterOutput, tryRemoteUrl, ulid, updateTaskStatusWithEvent, verifyEventsChain, writeEventsBulk, writeManifest, writeMarkdownFile, writeStatus, writeTaskFile, writeYamlFile };
+export { ACTIVE_GAP_CAP_MS, type ActiveTimeBasis, type AdapterOutputEvent, type AppendBasouGitignoreResult, type AppendEventToExistingInput, type AppendEventToExistingResult, type Approval, type ApprovalApprovedEvent, type ApprovalExpiredEvent, ApprovalIdSchema, type ApprovalLocation, type ApprovalRejectedEvent, type ApprovalRequestedEvent, ApprovalSchema, type ApprovalStatus, ApprovalStatusSchema, type ArchiveTaskInput, type ArchiveTaskResult, type AttachTaskInput, type AttachUpdateTaskStatusInput, type AttachableStatus, BASOU_CORE_VERSION, type BasouPaths, type BulkChainResult, CLAUDE_IMPORT_SOURCE, CODEX_IMPORT_SOURCE, type CaptureMode, type ChainBreakReason, type ChainTailState, type ChainVerdict, type ChainVerdictStatus, type ChainedEvents, ChildProcessRunner, type ClaudeTranscriptRecord, type ClaudeTranscriptToPayloadOptions, type CodexRolloutRecord, type CodexRolloutToPayloadOptions, type CommandExecutedEvent, type CommandLookup, type CreateAdHocSessionInput, type CreateAdHocSessionResult, type CreateAdHocTaskInput, type CreateManifestInput, type CreateTaskInput, type CreateTaskResult, type DayWorkStats, DecisionIdSchema, type DecisionRecordedEvent, type DecisionsRendererInput, type DecisionsRendererResult, type DeleteTaskInput, type DeleteTaskResult, type DiffResult, type EditTaskInput, type EditTaskResult, type Event, EventIdSchema, EventSchema, EventSourceSchema, FailedToFinalizeError, type FileChange, type FileChangeStatus, type FileChangedEvent, GENERATED_END, GENERATED_START, type GitSnapshot, type GitSnapshotEvent, type HandoffRendererInput, type HandoffRendererResult, ID_PREFIXES, type IdPrefix, type ImportSessionOptions, type ImportSessionResult, IsoTimestampSchema, JSON_SCHEMA_VERSION, type JsonSchemaArtifact, type LoadSessionEntriesOptions, type LoadTaskEntriesOptions, type LoadedApproval, type LockHandle, type LockScope, type Manifest, ManifestSchema, type MarkerSection, type MeasureAvailability, type NoteAddedEvent, type PrefixedId, type ProcessRunner, type RechainOptions, type RechainResult, type ReconcileAllResult, type ReconcileAllTasksInput, type ReconcileAllTasksOptions, type ReconcileFailure, type ReconcileResult, type ReconcileTaskInput, type RefreshLinkageInput, type RefreshLinkageResult, type ReimportOptions, type ReimportResult, type ReplayOptions, type ReplayWarning, type RiskLevel, RiskLevelSchema, type RunOptions, type RunResult, STUCK_THRESHOLD_MS, type SanitizePathOptions, type SanitizeRelatedFilesResult, SchemaVersionSchema, type Session, type SessionEndedEvent, type SessionEntry, SessionIdSchema, type SessionImportPayload, SessionImportPayloadSchema, type SessionInnerImportInput, SessionInnerImportSchema, type SessionIntegrity, SessionIntegritySchema, type SessionMetrics, SessionMetricsSchema, SessionSchema, type SessionSkipReason, type SessionSourceKind, SessionSourceKindSchema, type SessionStartedEvent, type SessionStatus, type SessionStatusChangedEvent, SessionStatusSchema, type SessionWorkStats, type SourceWorkStats, type StatusCount, StatusSchema, type StatusSnapshot, type SuspectReason, type Task, type TaskArchivedEvent, type TaskCreatedEvent, type TaskDeletedEvent, type TaskDocument, TaskIdSchema, type TaskLinkageRefreshedEvent, type TaskReconciledEvent, TaskSchema, type TaskSkipReason, type TaskStatus, type TaskStatusChangedEvent, TaskStatusSchema, TaskWriteAfterEventError, type TaskWriteAfterEventPhase, type TokenTotals, type UpdateAdHocTaskStatusInput, type UpdateTaskStatusInput, type UpdateTaskStatusResult, type WorkStatsInput, type WorkStatsResult, type WorkStatsTotals, WorkspaceIdSchema, type WriteEventsBulkOptions, type WriteTaskFileMode, acquireLock, appendBasouGitignore, appendChainedEvent, appendChainedEventLocked, appendEvent, appendEventToExistingSession, archiveTask, assertBasouRootSafe, basouPaths, buildJsonSchemas, buildStatusSnapshot, chainEvents, chainRawJsonLines, classifySuspect, claudeCodeAdapterMetadata, claudeTranscriptToImportPayload, codexRolloutToImportPayload, computeWorkStats, createAdHocSessionWithEvent, createManifest, createTaskWithEvent, deleteTask, editTask, ensureBasouDirectory, enumerateApprovals, enumerateArchivedTaskIds, enumerateSessionDirs, enumerateTaskIds, finalizeSessionYaml, findErrorCode, genesisHash, getDiff, getSnapshot, importSessionFromJson, inspectChainTail, isImportDerivedSource, isLazyExpired, isValidPrefixedId, lineHash, linkYamlFile, loadApproval, loadSessionEntries, loadTaskEntries, overwriteYamlFile, parseDuration, parseMarkers, prefixedUlid, readAllEvents, readManifest, readMarkdownFile, readSessionYaml, readStatus, readTaskFile, readTaskFileWithArchiveFallback, readYamlFile, rechainSessionInPlace, reconcileAllTasks, reconcileTask, refreshTaskLinkedSessions, reimportPreservingId, renderDecisions, renderHandoff, renderWithMarkers, replayEvents, resolveClaudeCodeCommand, resolveRepositoryRoot, resolveSessionId, resolveTaskId, sanitizePath, sanitizeRelatedFiles, sanitizeWorkingDirectory, serializeEventLine, serializeJsonSchema, sessionWorkStatsFromEvents, summarizeAdapterOutput, tryRemoteUrl, ulid, updateTaskStatusWithEvent, verifyEventsChain, writeEventsBulk, writeManifest, writeMarkdownFile, writeStatus, writeTaskFile, writeYamlFile };