@event4u/agent-config 16.3.0 → 16.5.0

package/dist/cli-delegate/chunk-OAFSJBHH.js

@@ -0,0 +1,272 @@
+import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
+
+// src/scripts/_lib/cc_transcript.ts
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { homedir } from "node:os";
+var DEFAULT_PROJECTS_ROOT = path.join(homedir(), ".claude", "projects");
+function projectStoreSlug(cwd) {
+  return cwd.replace(/[^A-Za-z0-9-]/g, "-");
+}
+function billableInputTokens(u) {
+  return u.input_tokens + u.cache_read_input_tokens + u.cache_creation_input_tokens;
+}
+function weightedInputUnits(u) {
+  const knownSplit = u.ephemeral_5m_input_tokens + u.ephemeral_1h_input_tokens;
+  const unaccounted = Math.max(0, u.cache_creation_input_tokens - knownSplit);
+  return u.input_tokens * 1 + u.cache_read_input_tokens * 0.1 + (u.ephemeral_5m_input_tokens + unaccounted) * 1.25 + u.ephemeral_1h_input_tokens * 2;
+}
+function numOr0(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : 0;
+}
+function toTokenCounts(raw) {
+  const cc = raw?.cache_creation ?? {};
+  return {
+    input_tokens: numOr0(raw?.input_tokens),
+    cache_read_input_tokens: numOr0(raw?.cache_read_input_tokens),
+    cache_creation_input_tokens: numOr0(raw?.cache_creation_input_tokens),
+    output_tokens: numOr0(raw?.output_tokens),
+    ephemeral_5m_input_tokens: numOr0(cc.ephemeral_5m_input_tokens),
+    ephemeral_1h_input_tokens: numOr0(cc.ephemeral_1h_input_tokens)
+  };
+}
+function measureContentBytes(raw) {
+  const content = raw.message?.content;
+  if (content === void 0 || content === null) return null;
+  if (typeof content === "string") return Buffer.byteLength(content, "utf8");
+  try {
+    return Buffer.byteLength(JSON.stringify(content), "utf8");
+  } catch {
+    return null;
+  }
+}
+function classifyBucket(raw) {
+  const hasAgentId = typeof raw.agentId === "string" && raw.agentId.length > 0;
+  return hasAgentId || raw.isSidechain === true ? "subagent" : "main";
+}
+function dedupKey(raw) {
+  const id = typeof raw.message?.id === "string" ? raw.message.id : "";
+  const reqId = typeof raw.requestId === "string" ? raw.requestId : "";
+  return `${id}\0${reqId}`;
+}
+function parseLine(line) {
+  if (line.trim().length === 0) return null;
+  try {
+    return JSON.parse(line);
+  } catch {
+    return null;
+  }
+}
+function listTranscriptFiles(opts = {}) {
+  const root = opts.root ?? DEFAULT_PROJECTS_ROOT;
+  const base = opts.projectDir ? path.isAbsolute(opts.projectDir) ? opts.projectDir : path.join(root, opts.projectDir) : root;
+  if (!fs.existsSync(base)) return [];
+  const cutoffMs = opts.maxAgeDays !== void 0 ? (opts.now ?? /* @__PURE__ */ new Date()).getTime() - opts.maxAgeDays * 24 * 60 * 60 * 1e3 : null;
+  const out = [];
+  const stack = [base];
+  while (stack.length > 0) {
+    const dir = stack.pop();
+    let entries;
+    try {
+      entries = fs.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const entry of entries) {
+      const full = path.join(dir, entry.name);
+      if (entry.isDirectory()) {
+        stack.push(full);
+        continue;
+      }
+      if (!entry.isFile() || !entry.name.endsWith(".jsonl")) continue;
+      if (cutoffMs !== null) {
+        let mtimeMs;
+        try {
+          mtimeMs = fs.statSync(full).mtimeMs;
+        } catch {
+          continue;
+        }
+        if (mtimeMs < cutoffMs) continue;
+      }
+      out.push(full);
+    }
+  }
+  return out.sort();
+}
+function scanTranscripts(opts = {}) {
+  const files = listTranscriptFiles(opts);
+  const seen = /* @__PURE__ */ new Set();
+  const records = [];
+  let totalSeen = 0;
+  for (const file of files) {
+    let text;
+    try {
+      text = fs.readFileSync(file, "utf-8");
+    } catch {
+      continue;
+    }
+    for (const line of text.split("\n")) {
+      const raw = parseLine(line);
+      if (!raw || raw.type !== "assistant" || !raw.message?.usage) continue;
+      totalSeen += 1;
+      const key = dedupKey(raw);
+      if (seen.has(key)) continue;
+      seen.add(key);
+      records.push({
+        bucket: classifyBucket(raw),
+        agentId: typeof raw.agentId === "string" ? raw.agentId : null,
+        model: typeof raw.message.model === "string" ? raw.message.model : "unknown",
+        timestamp: typeof raw.timestamp === "string" ? raw.timestamp : null,
+        usage: toTokenCounts(raw.message.usage),
+        content_bytes: opts.measureBytes === true ? measureContentBytes(raw) : null
+      });
+    }
+  }
+  const dedupedCount = records.length;
+  return {
+    records,
+    totalSeen,
+    dedupedCount,
+    dedup_ratio: totalSeen > 0 ? (totalSeen - dedupedCount) / totalSeen : 0
+  };
+}
+function measureBytesPerToken(records) {
+  let bytes = 0;
+  let tokens = 0;
+  let n = 0;
+  for (const rec of records) {
+    if (rec.content_bytes === null || rec.usage.output_tokens <= 0) continue;
+    bytes += rec.content_bytes;
+    tokens += rec.usage.output_tokens;
+    n += 1;
+  }
+  if (n === 0 || tokens <= 0) return null;
+  return {
+    basis: "measured",
+    content_bytes: bytes,
+    output_tokens: tokens,
+    bytes_per_token: bytes / tokens,
+    records: n
+  };
+}
+function derivedBytes(tokens, factor) {
+  if (factor === null) return null;
+  return {
+    basis: "derived",
+    tokens,
+    factor,
+    bytes: Math.round(tokens * factor.bytes_per_token)
+  };
+}
+function emptyAggregate(bucket) {
+  return {
+    bucket,
+    calls: 0,
+    input_tokens: 0,
+    cache_read_input_tokens: 0,
+    cache_creation_input_tokens: 0,
+    output_tokens: 0,
+    ephemeral_5m_input_tokens: 0,
+    ephemeral_1h_input_tokens: 0,
+    read_share: 0,
+    weighted_input_units: 0
+  };
+}
+function aggregateByBucket(records) {
+  const buckets = {
+    main: emptyAggregate("main"),
+    subagent: emptyAggregate("subagent")
+  };
+  for (const rec of records) {
+    const agg = buckets[rec.bucket];
+    agg.calls += 1;
+    agg.input_tokens += rec.usage.input_tokens;
+    agg.cache_read_input_tokens += rec.usage.cache_read_input_tokens;
+    agg.cache_creation_input_tokens += rec.usage.cache_creation_input_tokens;
+    agg.output_tokens += rec.usage.output_tokens;
+    agg.ephemeral_5m_input_tokens += rec.usage.ephemeral_5m_input_tokens;
+    agg.ephemeral_1h_input_tokens += rec.usage.ephemeral_1h_input_tokens;
+  }
+  for (const bucket of Object.values(buckets)) {
+    const billable = billableInputTokens(bucket);
+    bucket.read_share = billable > 0 ? bucket.cache_read_input_tokens / billable : 0;
+    bucket.weighted_input_units = weightedInputUnits(bucket);
+  }
+  return buckets;
+}
+
+// src/scripts/_lib/spawn_env.ts
+var DENY_EXACT = /* @__PURE__ */ new Set([
+  // dynamic loader
+  "LD_PRELOAD",
+  "LD_LIBRARY_PATH",
+  "LD_AUDIT",
+  "DYLD_INSERT_LIBRARIES",
+  "DYLD_LIBRARY_PATH",
+  "DYLD_FRAMEWORK_PATH",
+  "GCONV_PATH",
+  // git command-injection
+  "GIT_EXTERNAL_DIFF",
+  "GIT_SSH",
+  "GIT_SSH_COMMAND",
+  "GIT_PROXY_COMMAND",
+  "GIT_PAGER",
+  "PAGER",
+  // git config-injection: GIT_ALTERNATE_OBJECT_DIRECTORIES can point git at
+  // attacker-controlled object stores; the GIT_CONFIG* family is handled by
+  // prefix below (it is a general arbitrary-config-injection primitive).
+  "GIT_ALTERNATE_OBJECT_DIRECTORIES",
+  // git path-redirection: GIT_DIR / GIT_INDEX_FILE / GIT_NAMESPACE point a
+  // child's git at an attacker-controlled repo, index file, or ref namespace
+  // — ordinary git ops then read and write attacker state (low severity,
+  // same family as GIT_ALTERNATE_OBJECT_DIRECTORIES above).
+  "GIT_DIR",
+  "GIT_INDEX_FILE",
+  "GIT_NAMESPACE",
+  // resolver hijack: HOSTALIASES remaps hostnames via an attacker file,
+  // redirecting any network fetch the child performs (CWE-427-adjacent).
+  "HOSTALIASES",
+  // runtime auto-exec hooks
+  "NODE_OPTIONS",
+  "BASH_ENV",
+  "ENV",
+  "PYTHONPATH",
+  "PYTHONSTARTUP",
+  "PYTHONINSPECT",
+  "PERL5OPT",
+  "PERL5LIB",
+  "RUBYOPT",
+  // shell field-splitting
+  "IFS"
+]);
+function isDeniedByFamily(name) {
+  if (name.startsWith("LD_") || name.startsWith("DYLD_")) return true;
+  if (name.startsWith("GIT_") && name.endsWith("_COMMAND")) return true;
+  if (name === "GIT_CONFIG" || name.startsWith("GIT_CONFIG_")) return true;
+  return false;
+}
+function hardenedSpawnEnv(overrides = {}) {
+  const out = {};
+  for (const [key, value] of Object.entries(process.env)) {
+    if (value === void 0) continue;
+    if (DENY_EXACT.has(key)) continue;
+    if (isDeniedByFamily(key)) continue;
+    out[key] = value;
+  }
+  for (const [key, value] of Object.entries(overrides)) {
+    out[key] = value;
+  }
+  return out;
+}
+
+export {
+  DEFAULT_PROJECTS_ROOT,
+  projectStoreSlug,
+  billableInputTokens,
+  weightedInputUnits,
+  scanTranscripts,
+  measureBytesPerToken,
+  derivedBytes,
+  aggregateByBucket,
+  hardenedSpawnEnv
+};

package/dist/cli-delegate/{chunk-GKE7ZVFA.js → chunk-PWX7CKMD.js}

@@ -2,7 +2,7 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   DEFAULT_PROJECT_FILE,
   logger
-} from "./chunk-JY2I2DXV.js";
+} from "./chunk-H76PHZBI.js";
 import {
   artefact_roots
 } from "./chunk-YCU3TIXH.js";

package/dist/cli-delegate/{chunk-NDJLNC6Q.js → chunk-T6BP34WI.js}

@@ -161,6 +161,7 @@ function _ensure_breadcrumb(legacy_root) {
 }
 
 export {
+  DEFAULT_EVENT4U_ROOT_RELATIVE,
   event4u_root,
   legacy_xdg_root,
   resolve_with_fallback,