@decibelsystems/tools 2.1.2 → 2.1.4

package/dist/agentInbox.d.ts

@@ -0,0 +1,37 @@
+export interface InboxCommand {
+    id: string;
+    org_id: string;
+    kind: string;
+    payload: Record<string, unknown>;
+    enqueued_at: number;
+}
+/**
+ * Enqueue a command for an SDK session to poll. Idempotent on command id. Also
+ * records the id→session ownership (for ack authorization). cmd.org_id is the
+ * owning org; drainCommands only returns commands whose org matches the caller's.
+ */
+export declare function enqueueCommand(sessionKey: string, cmd: InboxCommand): void;
+/**
+ * Drain pending commands for a session (returns + removes them). Evicts stale
+ * first. Only returns commands belonging to `orgId` — a cross-org command (which
+ * should never be enqueued here given the dispatcher's org-first filter) is
+ * dropped, never delivered.
+ */
+export declare function drainCommands(sessionKey: string, orgId: string): InboxCommand[];
+/** Is this session_key one the inbox is tracking? (has pending commands) */
+export declare function hasInbox(sessionKey: string): boolean;
+/** Store (or replace) the capability token for a session. */
+export declare function setSessionToken(sessionKey: string, token: string): void;
+/** The capability token for a session, or undefined if none is registered. */
+export declare function getSessionToken(sessionKey: string): string | undefined;
+/** Forget a session's token (on 'ended' lifecycle). */
+export declare function dropSessionToken(sessionKey: string): void;
+/** The session_key a command id was enqueued for (for ack authorization). */
+export declare function ackOwnerOf(id: string): string | undefined;
+/** Forget an id→session ownership once the command has been acked/settled. */
+export declare function clearAckOwner(id: string): void;
+/** Total queued commands across all sessions (for /health + tests). */
+export declare function inboxDepth(): number;
+/** Test/shutdown helper — resets inboxes, tokens, and ack-owners. */
+export declare function clearInbox(): void;
+//# sourceMappingURL=agentInbox.d.ts.map

package/dist/agentInbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentInbox.d.ts","sourceRoot":"","sources":["../src/agentInbox.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;CACrB;AAyBD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,CAQ1E;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,EAAE,CAK/E;AAED,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAGpD;AAMD,6DAA6D;AAC7D,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAEvE;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEtE;AAED,uDAAuD;AACvD,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAEzD;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEzD;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAE9C;AAeD,uEAAuE;AACvE,wBAAgB,UAAU,IAAI,MAAM,CAInC;AAED,qEAAqE;AACrE,wBAAgB,UAAU,IAAI,IAAI,CAIjC"}

package/dist/agentInbox.js

@@ -0,0 +1,128 @@
+// ============================================================================
+// Agent command inbox — daemon-side delivery for SDK (non-broker) runtimes
+// ============================================================================
+// The HQ→agent command dispatcher (agentCommands.ts) delivers `message` to
+// claude-peers sessions via the broker, and answers `request_status` from the
+// broker's live registry. But SDK-registered runtimes (hermes/openclaw/codex/…
+// from @decibelsystems/tools/hq) aren't in the broker — they have no transport.
+//
+// This module bridges that gap WITHOUT giving the SDK any Supabase creds (the
+// "no service_role in untrusted hands" rule holds): the dispatcher ENQUEUES a
+// command targeting a known SDK session here; the SDK polls GET /agents/commands
+// + acks POST /agents/commands/ack (both localhost-only); the daemon settles the
+// hq.agent_commands row in Core via service_role on ack.
+//
+// IDENTITY — capability token, NOT a bare label (security review 2026-06-15):
+// session_key is a GUESSABLE label, so localhost-bind alone would let any
+// co-resident local runtime drain/ack ANOTHER runtime's commands (the SDK's whole
+// premise is several runtimes side-by-side). So the daemon mints a per-session
+// SECRET token at /agents/register, returns it to that one SDK process, and
+// requires it on poll + ack. session_key says "which inbox"; the token proves
+// "I'm the process that registered it." The org-id-first cross-org invariant is
+// preserved here too: InboxCommand carries org_id and drainCommands filters on it,
+// so even a token-authenticated poll only ever receives its own org's commands.
+// ============================================================================
+// session_key → its pending commands. In-memory: the daemon is the single
+// authority for sessions it hosts; a restart re-derives state from Core (pending
+// rows get re-dispatched on the next tick).
+const inboxes = new Map();
+// session_key → its per-session capability token (the secret an SDK must present
+// on poll/ack to prove it's the registrant). Minted by the HTTP register/heartbeat
+// handler; verified there too (timing-safe). Wiped on a daemon restart — the SDK's
+// next heartbeat re-mints, and it stores the fresh token from the response.
+const sessionTokens = new Map();
+// command id → the session_key it was enqueued for, with a timestamp for TTL
+// eviction. The ack arrives AFTER drainCommands has already removed the command
+// from the inbox, so the inbox itself can't tell us who owns an acked id — this
+// map can. The ack handler maps id→session→token to authorize the settle.
+const ackOwners = new Map();
+// Drop inbox entries an SDK never polled, so a vanished runtime doesn't leak
+// memory. Slightly longer than the command expiry (5min) so a slow poller still
+// gets it; the dispatcher's expiry sweep settles the Core row regardless.
+const INBOX_TTL_MS = 6 * 60_000;
+const MAX_PER_SESSION = 100; // backstop against unbounded growth per session
+/**
+ * Enqueue a command for an SDK session to poll. Idempotent on command id. Also
+ * records the id→session ownership (for ack authorization). cmd.org_id is the
+ * owning org; drainCommands only returns commands whose org matches the caller's.
+ */
+export function enqueueCommand(sessionKey, cmd) {
+    const list = inboxes.get(sessionKey) ?? [];
+    if (list.some((c) => c.id === cmd.id))
+        return; // already queued (keep first owner)
+    list.push(cmd);
+    // Trim oldest if a session somehow accumulates a flood (shouldn't happen).
+    while (list.length > MAX_PER_SESSION)
+        list.shift();
+    inboxes.set(sessionKey, list);
+    ackOwners.set(cmd.id, { sessionKey, at: cmd.enqueued_at });
+}
+/**
+ * Drain pending commands for a session (returns + removes them). Evicts stale
+ * first. Only returns commands belonging to `orgId` — a cross-org command (which
+ * should never be enqueued here given the dispatcher's org-first filter) is
+ * dropped, never delivered.
+ */
+export function drainCommands(sessionKey, orgId) {
+    evictStale();
+    const list = inboxes.get(sessionKey) ?? [];
+    inboxes.delete(sessionKey);
+    return list.filter((c) => c.org_id === orgId);
+}
+/** Is this session_key one the inbox is tracking? (has pending commands) */
+export function hasInbox(sessionKey) {
+    const list = inboxes.get(sessionKey);
+    return !!list && list.length > 0;
+}
+// ---------------------------------------------------------------------------
+// Per-session capability tokens (proof-of-possession for poll/ack)
+// ---------------------------------------------------------------------------
+/** Store (or replace) the capability token for a session. */
+export function setSessionToken(sessionKey, token) {
+    sessionTokens.set(sessionKey, token);
+}
+/** The capability token for a session, or undefined if none is registered. */
+export function getSessionToken(sessionKey) {
+    return sessionTokens.get(sessionKey);
+}
+/** Forget a session's token (on 'ended' lifecycle). */
+export function dropSessionToken(sessionKey) {
+    sessionTokens.delete(sessionKey);
+}
+/** The session_key a command id was enqueued for (for ack authorization). */
+export function ackOwnerOf(id) {
+    return ackOwners.get(id)?.sessionKey;
+}
+/** Forget an id→session ownership once the command has been acked/settled. */
+export function clearAckOwner(id) {
+    ackOwners.delete(id);
+}
+/** Evict commands + ack-owners older than the TTL (the dispatcher/DB sweep handles Core-side). */
+function evictStale() {
+    const cutoff = Date.now() - INBOX_TTL_MS;
+    for (const [key, list] of inboxes) {
+        const kept = list.filter((c) => c.enqueued_at >= cutoff);
+        if (kept.length === 0)
+            inboxes.delete(key);
+        else if (kept.length !== list.length)
+            inboxes.set(key, kept);
+    }
+    for (const [id, owner] of ackOwners) {
+        if (owner.at < cutoff)
+            ackOwners.delete(id);
+    }
+}
+/** Total queued commands across all sessions (for /health + tests). */
+export function inboxDepth() {
+    let n = 0;
+    for (const list of inboxes.values())
+        n += list.length;
+    return n;
+}
+/** Test/shutdown helper — resets inboxes, tokens, and ack-owners. */
+export function clearInbox() {
+    inboxes.clear();
+    sessionTokens.clear();
+    ackOwners.clear();
+}
+//# sourceMappingURL=agentInbox.js.map

package/dist/agentInbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentInbox.js","sourceRoot":"","sources":["../src/agentInbox.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAC/E,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,iFAAiF;AACjF,iFAAiF;AACjF,yDAAyD;AACzD,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,kFAAkF;AAClF,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,gFAAgF;AAChF,mFAAmF;AACnF,gFAAgF;AAChF,+EAA+E;AAU/E,0EAA0E;AAC1E,iFAAiF;AACjF,4CAA4C;AAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;AAElD,iFAAiF;AACjF,mFAAmF;AACnF,mFAAmF;AACnF,4EAA4E;AAC5E,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEhD,6EAA6E;AAC7E,gFAAgF;AAChF,gFAAgF;AAChF,0EAA0E;AAC1E,MAAM,SAAS,GAAG,IAAI,GAAG,EAA8C,CAAC;AAExE,6EAA6E;AAC7E,gFAAgF;AAChF,0EAA0E;AAC1E,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC;AAChC,MAAM,eAAe,GAAG,GAAG,CAAC,CAAC,gDAAgD;AAE7E;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,GAAiB;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO,CAAC,oCAAoC;IACnF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,2EAA2E;IAC3E,OAAO,IAAI,CAAC,MAAM,GAAG,eAAe;QAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC9B,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,KAAa;IAC7D,UAAU,EAAE,CAAC;IACb,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,QAAQ,CAAC,UAAkB;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,KAAa;IAC/D,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,OAAO,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,kGAAkG;AAClG,SAAS,UAAU;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACtC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,EAAE,GAAG,MAAM;YAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE;QAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC;IACtD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,UAAU;IACxB,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,aAAa,CAAC,KAAK,EAAE,CAAC;IACtB,SAAS,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC"}

package/dist/agentPresence.d.ts

@@ -0,0 +1,36 @@
+/**
+ * The daemon's host identity for presence + command targeting. Defaults to
+ * os.hostname() but is overridable via DECIBEL_PRESENCE_HOST — needed where the
+ * OS hostname isn't a stable/unique daemon identity (containers with shared
+ * hostnames, or two daemons on one machine, e.g. a rolling restart or a test
+ * harness). target_host on hq.agent_commands matches this, so it must be the same
+ * value the presence writer stamps. Shared by the dispatcher (agentCommands.ts).
+ */
+export declare function resolveHost(): string;
+export interface LocalAgentRegistration {
+    session_key: string;
+    runtime: string;
+    agent?: string | null;
+    cwd?: string | null;
+    summary?: string | null;
+    meta?: Record<string, unknown>;
+    status?: 'active' | 'ended';
+}
+/** Strip control chars/null bytes and cap length. Empty-after-clean → null. */
+export declare function sanitizeText(s: string | null | undefined, maxLen: number): string | null;
+/**
+ * Flatten meta to display-safe primitives: strings cleaned + capped, numbers/
+ * booleans/null kept, nested objects/arrays dropped (HQ typeof-guards numeric
+ * meta and renders strings as text). If the result still exceeds META_MAX_BYTES,
+ * drop it entirely — the caller re-adds the trusted last_action_at.
+ */
+export declare function sanitizeMeta(meta: Record<string, unknown> | undefined): Record<string, unknown>;
+/**
+ * Upsert a local-runtime session into hq.agent_sessions (register or heartbeat).
+ * Returns true on success, false if Supabase is unconfigured or the write failed.
+ * Reuses the presence writer's org config + cwd→project resolution.
+ */
+export declare function writeLocalAgentSession(reg: LocalAgentRegistration): Promise<boolean>;
+/** Start the presence writer loop. Returns a stop function. No-ops if Supabase unconfigured. */
+export declare function startPresenceWriter(): () => void;
+//# sourceMappingURL=agentPresence.d.ts.map

package/dist/agentPresence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentPresence.d.ts","sourceRoot":"","sources":["../src/agentPresence.ts"],"names":[],"mappings":"AAsBA;;;;;;;GAOG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAwHD,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAG/B,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;CAC7B;AAmBD,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIxF;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAU/F;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,OAAO,CAAC,CAuC1F;AAED,gGAAgG;AAChG,wBAAgB,mBAAmB,IAAI,MAAM,IAAI,CAchD"}

package/dist/agentPresence.js

@@ -0,0 +1,227 @@
+// ============================================================================
+// Agent-presence writer — heartbeats live claude-peers sessions into Core
+// ============================================================================
+// Daemon-side telemetry writer for the Plan D agent-presence domain. On a 30s
+// loop it:
+//   1. reads live peers from the claude-peers broker (POST /list-peers),
+//   2. upserts each into hq.agent_sessions via SERVICE_ROLE (deliberate scoped
+//      exception — presence is telemetry, peers carry no user JWT, v1 single-org),
+//   3. stale-sweeps active rows that stopped heartbeating → idle (>90s) / ended (>5min).
+// Never throws into the daemon; no-ops if Supabase isn't configured or the broker
+// is down. Contract co-designed with decibel-hq (migration 20260524000005). EPIC-0033.
+// ============================================================================
+import os from 'os';
+import path from 'path';
+import { createClient } from '@supabase/supabase-js';
+import { log } from './config.js';
+import { withRetryResult } from './supabaseRetry.js';
+const BROKER_URL = `http://127.0.0.1:${process.env.CLAUDE_PEERS_PORT ?? '7899'}`;
+const ORG_ID = process.env.DECIBEL_ORG_ID || '1cb79e24-e06f-46c9-8a22-5ee025ffb0f4';
+/**
+ * The daemon's host identity for presence + command targeting. Defaults to
+ * os.hostname() but is overridable via DECIBEL_PRESENCE_HOST — needed where the
+ * OS hostname isn't a stable/unique daemon identity (containers with shared
+ * hostnames, or two daemons on one machine, e.g. a rolling restart or a test
+ * harness). target_host on hq.agent_commands matches this, so it must be the same
+ * value the presence writer stamps. Shared by the dispatcher (agentCommands.ts).
+ */
+export function resolveHost() {
+    return process.env.DECIBEL_PRESENCE_HOST || os.hostname();
+}
+const HEARTBEAT_MS = 30_000;
+const IDLE_AFTER_MS = 90_000;
+const ENDED_AFTER_MS = 5 * 60_000;
+function serviceClient() {
+    const url = process.env.SUPABASE_URL;
+    const key = process.env.SUPABASE_SERVICE_KEY;
+    if (!url || !key)
+        return null;
+    return createClient(url, key, {
+        auth: { persistSession: false, autoRefreshToken: false },
+        db: { schema: 'hq' },
+    });
+}
+async function fetchPeers() {
+    try {
+        const res = await fetch(`${BROKER_URL}/list-peers`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ requester_id: 'decibel-presence', scope: 'machine' }),
+            signal: AbortSignal.timeout(2000),
+        });
+        if (!res.ok)
+            return [];
+        return (await res.json());
+    }
+    catch {
+        return [];
+    }
+}
+// project label (repo dir basename) → hq.projects.id within the org. Cached;
+// refreshed on a miss so newly-onboarded projects resolve.
+let projectMap = null;
+async function loadProjects(client) {
+    const { data, error } = await client.from('projects').select('id,key').eq('org_id', ORG_ID);
+    const m = new Map();
+    if (!error && data)
+        for (const r of data)
+            m.set(r.key, r.id);
+    return m;
+}
+async function resolveProjectId(client, cwd) {
+    const key = path.basename(cwd || '');
+    if (!key)
+        return null;
+    if (!projectMap)
+        projectMap = await loadProjects(client);
+    if (!projectMap.has(key))
+        projectMap = await loadProjects(client); // refresh once on miss
+    return projectMap.get(key) ?? null;
+}
+async function tick(client) {
+    const host = resolveHost();
+    const nowMs = Date.now();
+    const nowIso = new Date(nowMs).toISOString();
+    const peers = await fetchPeers();
+    for (const p of peers) {
+        if (!p.id)
+            continue;
+        const project_id = await resolveProjectId(client, p.cwd);
+        const row = {
+            org_id: ORG_ID,
+            host,
+            session_key: p.id,
+            agent: null,
+            // These are Claude Code sessions read from the claude-peers broker; tag the
+            // runtime so HQ's /agents board renders the runtime badge + filter (P1/P5).
+            runtime: 'claude-code',
+            summary: p.summary || null,
+            cwd: p.cwd || null,
+            project_id,
+            status: 'active',
+            started_at: p.registered_at || nowIso,
+            last_seen_at: nowIso,
+            ended_at: null,
+            // last_action_at = the broker's per-peer last_seen → HQ's ActivityLine renders
+            // a tool-call pulse from it. Richer self-report fields (tokens, current_file)
+            // are a follow-on (agent-side self-report; not daemon-observable).
+            meta: { last_action_at: p.last_seen || nowIso },
+        };
+        const { error } = await withRetryResult(() => client.from('agent_sessions').upsert(row, { onConflict: 'org_id,host,session_key' }), `presence.upsert ${p.id}`);
+        if (error)
+            log(`Presence: upsert ${p.id} failed: ${error.message}`);
+    }
+    // Stale-sweep: sessions that stopped heartbeating (broker dropped them, or daemon
+    // missed beats). idle first, then ended (ended uses status<>'ended' so it also
+    // catches idle rows past the longer cutoff).
+    const idleCut = new Date(nowMs - IDLE_AFTER_MS).toISOString();
+    const endedCut = new Date(nowMs - ENDED_AFTER_MS).toISOString();
+    await client.from('agent_sessions').update({ status: 'idle' })
+        .eq('org_id', ORG_ID).eq('status', 'active').lt('last_seen_at', idleCut);
+    await client.from('agent_sessions').update({ status: 'ended', ended_at: nowIso })
+        .eq('org_id', ORG_ID).neq('status', 'ended').lt('last_seen_at', endedCut);
+}
+// ---------------------------------------------------------------------------
+// Write-time presence-field belt (NON-encoding) — co-designed with decibel-hq.
+// ---------------------------------------------------------------------------
+// HQ's /agents board already escapes these at render (React JSX text children),
+// so the daemon MUST NOT HTML-encode here — that would double-escape and corrupt
+// legitimate data (a real summary like "fix <Button> when a < b"). The correct
+// write-time defense-in-depth is non-encoding: cap length + strip control chars /
+// null bytes (preserving \t\n\r) so the stored value stays faithful but bounded.
+// Also closes the review's "no validation on meta/result blobs" finding.
+const FIELD_CAPS = { agent: 200, summary: 500, cwd: 1024 };
+const META_VALUE_CAP = 1000;
+const META_MAX_BYTES = 4096;
+// C0 controls (U+0000..U+001F) + DEL (U+007F), EXCEPT tab/newline/carriage-return.
+// eslint-disable-next-line no-control-regex
+const CONTROL_CHARS = /[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/g;
+/** Strip control chars/null bytes and cap length. Empty-after-clean → null. */
+export function sanitizeText(s, maxLen) {
+    if (s == null)
+        return null;
+    const cleaned = String(s).replace(CONTROL_CHARS, '').slice(0, maxLen);
+    return cleaned.length ? cleaned : null;
+}
+/**
+ * Flatten meta to display-safe primitives: strings cleaned + capped, numbers/
+ * booleans/null kept, nested objects/arrays dropped (HQ typeof-guards numeric
+ * meta and renders strings as text). If the result still exceeds META_MAX_BYTES,
+ * drop it entirely — the caller re-adds the trusted last_action_at.
+ */
+export function sanitizeMeta(meta) {
+    if (!meta || typeof meta !== 'object')
+        return {};
+    const out = {};
+    for (const [k, v] of Object.entries(meta)) {
+        if (typeof v === 'string')
+            out[k] = v.replace(CONTROL_CHARS, '').slice(0, META_VALUE_CAP);
+        else if (typeof v === 'number' || typeof v === 'boolean' || v === null)
+            out[k] = v;
+        // nested objects/arrays intentionally dropped
+    }
+    if (Buffer.byteLength(JSON.stringify(out)) > META_MAX_BYTES)
+        return {};
+    return out;
+}
+/**
+ * Upsert a local-runtime session into hq.agent_sessions (register or heartbeat).
+ * Returns true on success, false if Supabase is unconfigured or the write failed.
+ * Reuses the presence writer's org config + cwd→project resolution.
+ */
+export async function writeLocalAgentSession(reg) {
+    const client = serviceClient();
+    if (!client)
+        return false;
+    if (!reg.session_key || !reg.runtime)
+        return false;
+    const host = resolveHost();
+    const nowIso = new Date().toISOString();
+    const project_id = await resolveProjectId(client, reg.cwd || '');
+    const ended = reg.status === 'ended';
+    const row = {
+        org_id: ORG_ID,
+        host,
+        session_key: reg.session_key,
+        runtime: reg.runtime,
+        // Non-encoding belt on caller-supplied display fields (store-raw / escape-at-
+        // render is HQ's job; we only cap length + strip control chars/null bytes).
+        agent: sanitizeText(reg.agent, FIELD_CAPS.agent),
+        summary: sanitizeText(reg.summary, FIELD_CAPS.summary),
+        cwd: sanitizeText(reg.cwd, FIELD_CAPS.cwd),
+        project_id,
+        status: ended ? 'ended' : 'active',
+        started_at: nowIso,
+        last_seen_at: nowIso,
+        ended_at: ended ? nowIso : null,
+        // Default last_action_at to now; a self-reporting SDK may override it via meta
+        // (intended richer signal — HQ reads last_seen_at, not this, for liveness).
+        meta: { last_action_at: nowIso, ...sanitizeMeta(reg.meta) },
+    };
+    // started_at only matters on first insert; onConflict updates the rest. We let it
+    // re-send started_at — harmless on heartbeat since HQ reads last_seen_at for liveness.
+    const { error } = await withRetryResult(() => client.from('agent_sessions').upsert(row, { onConflict: 'org_id,host,session_key' }), `presence.local-register ${reg.session_key}`);
+    if (error) {
+        log(`Presence: local register ${reg.session_key} (${reg.runtime}) failed: ${error.message}`);
+        return false;
+    }
+    return true;
+}
+/** Start the presence writer loop. Returns a stop function. No-ops if Supabase unconfigured. */
+export function startPresenceWriter() {
+    const client = serviceClient();
+    if (!client) {
+        log('Presence: SUPABASE_URL/SERVICE_KEY not set — agent-presence writer disabled.');
+        return () => { };
+    }
+    log(`Presence: writer started (30s heartbeat → hq.agent_sessions, org ${ORG_ID}).`);
+    const run = () => {
+        tick(client).catch((e) => log(`Presence: tick error: ${e instanceof Error ? e.message : String(e)}`));
+    };
+    run();
+    const iv = setInterval(run, HEARTBEAT_MS);
+    if (typeof iv.unref === 'function')
+        iv.unref();
+    return () => clearInterval(iv);
+}
+//# sourceMappingURL=agentPresence.js.map

package/dist/agentPresence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentPresence.js","sourceRoot":"","sources":["../src/agentPresence.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,0EAA0E;AAC1E,+EAA+E;AAC/E,8EAA8E;AAC9E,WAAW;AACX,yEAAyE;AACzE,+EAA+E;AAC/E,mFAAmF;AACnF,yFAAyF;AACzF,kFAAkF;AAClF,uFAAuF;AACvF,+EAA+E;AAE/E,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,UAAU,GAAG,oBAAoB,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,EAAE,CAAC;AACjF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,sCAAsC,CAAC;AAEpF;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;AAC5D,CAAC;AACD,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,cAAc,GAAG,CAAC,GAAG,MAAM,CAAC;AAYlC,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC7C,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;QAC5B,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;QACxD,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;KACrB,CAAC,CAAC;AACL,CAAC;AAGD,KAAK,UAAU,UAAU;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,aAAa,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,kBAAkB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAC5E,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,2DAA2D;AAC3D,IAAI,UAAU,GAA+B,IAAI,CAAC;AAClD,KAAK,UAAU,YAAY,CAAC,MAAgB;IAC1C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5F,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,IAAI,CAAC,KAAK,IAAI,IAAI;QAAE,KAAK,MAAM,CAAC,IAAI,IAA0C;YAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACnG,OAAO,CAAC,CAAC;AACX,CAAC;AACD,KAAK,UAAU,gBAAgB,CAAC,MAAgB,EAAE,GAAW;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC,UAAU;QAAE,UAAU,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,UAAU,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,uBAAuB;IAC1F,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,MAAgB;IAClC,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAE7C,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,SAAS;QACpB,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG;YACV,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,WAAW,EAAE,CAAC,CAAC,EAAE;YACjB,KAAK,EAAE,IAAqB;YAC5B,4EAA4E;YAC5E,4EAA4E;YAC5E,OAAO,EAAE,aAAa;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;YAC1B,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,IAAI;YAClB,UAAU;YACV,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,CAAC,CAAC,aAAa,IAAI,MAAM;YACrC,YAAY,EAAE,MAAM;YACpB,QAAQ,EAAE,IAAqB;YAC/B,+EAA+E;YAC/E,8EAA8E;YAC9E,mEAAmE;YACnE,IAAI,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,SAAS,IAAI,MAAM,EAAE;SAChD,CAAC;QACF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CACrC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,yBAAyB,EAAE,CAAC,EAC1F,mBAAmB,CAAC,CAAC,EAAE,EAAE,CAC1B,CAAC;QACF,IAAI,KAAK;YAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC,EAAE,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,kFAAkF;IAClF,+EAA+E;IAC/E,6CAA6C;IAC7C,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,MAAM,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;SAC3D,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC3E,MAAM,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;SAC9E,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;AAC9E,CAAC;AA6BD,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,gFAAgF;AAChF,iFAAiF;AACjF,+EAA+E;AAC/E,kFAAkF;AAClF,iFAAiF;AACjF,yEAAyE;AAEzE,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAW,CAAC;AACpE,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,mFAAmF;AACnF,4CAA4C;AAC5C,MAAM,aAAa,GAAG,iDAAiD,CAAC;AAExE,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,CAA4B,EAAE,MAAc;IACvE,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAyC;IACpE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;aACrF,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACnF,8CAA8C;IAChD,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,cAAc;QAAE,OAAO,EAAE,CAAC;IACvE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAA2B;IACtE,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAEnD,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC;IACrC,MAAM,GAAG,GAAG;QACV,MAAM,EAAE,MAAM;QACd,IAAI;QACJ,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,8EAA8E;QAC9E,4EAA4E;QAC5E,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC;QAChD,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC;QACtD,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC;QAC1C,UAAU;QACV,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;QAClC,UAAU,EAAE,MAAM;QAClB,YAAY,EAAE,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAC/B,+EAA+E;QAC/E,4EAA4E;QAC5E,IAAI,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;KAC5D,CAAC;IACF,kFAAkF;IAClF,uFAAuF;IACvF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CACrC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,yBAAyB,EAAE,CAAC,EAC1F,2BAA2B,GAAG,CAAC,WAAW,EAAE,CAC7C,CAAC;IACF,IAAI,KAAK,EAAE,CAAC;QACV,GAAG,CAAC,4BAA4B,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,OAAO,aAAa,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,mBAAmB;IACjC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,8EAA8E,CAAC,CAAC;QACpF,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IACD,GAAG,CAAC,oEAAoE,MAAM,IAAI,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,GAAG,EAAE;QACf,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,yBAAyB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxG,CAAC,CAAC;IACF,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC1C,IAAI,OAAQ,EAA6B,CAAC,KAAK,KAAK,UAAU;QAAG,EAA4B,CAAC,KAAK,EAAE,CAAC;IACtG,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;AACjC,CAAC"}

package/dist/agenticJobs.d.ts

@@ -0,0 +1,49 @@
+export type JobStatus = 'queued' | 'claimed' | 'running' | 'done' | 'cancelled' | 'failed';
+export interface AgenticJob {
+    id: string;
+    project_id: string;
+    prompt: string;
+    status: JobStatus;
+    claimed_by?: string;
+    claimed_at?: string;
+    completed_at?: string;
+    result?: {
+        output?: string;
+        files_changed?: string[];
+    };
+    created_at: string;
+    created_by?: string;
+    [key: string]: unknown;
+}
+export interface EnqueueJobInput {
+    projectId: string;
+    prompt: string;
+    createdBy?: string;
+}
+export interface EnqueueJobOutput {
+    jobId: string;
+    queuePosition: number;
+    filePath: string;
+}
+export interface CancelJobInput {
+    projectId: string;
+    jobId: string;
+}
+/**
+ * List all jobs for a project. Returns oldest-first (creation order). Reads
+ * from both .decibel/ and decibel/ paths, deduplicating by id.
+ */
+export declare function listJobs(projectId: string): Promise<AgenticJob[]>;
+/**
+ * Enqueue a new dispatch job. Allocates the next JOB-NNNN id, writes the
+ * YAML file, and returns the id + queue position (number of active jobs
+ * ahead of this one, inclusive).
+ */
+export declare function enqueueJob(input: EnqueueJobInput): Promise<EnqueueJobOutput>;
+/**
+ * Cancel a queued / claimed job. No-op if the job is already terminal
+ * (done / cancelled / failed). Marks status: cancelled and stamps
+ * completed_at.
+ */
+export declare function cancelJob(input: CancelJobInput): Promise<AgenticJob>;
+//# sourceMappingURL=agenticJobs.d.ts.map

package/dist/agenticJobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agenticJobs.d.ts","sourceRoot":"","sources":["../src/agenticJobs.ts"],"names":[],"mappings":"AAqBA,MAAM,MAAM,SAAS,GACjB,QAAQ,GACR,SAAS,GACT,SAAS,GACT,MAAM,GACN,WAAW,GACX,QAAQ,CAAC;AAEb,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AA2FD;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAoBvE;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsClF;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CA6B1E"}