@intutic/sync-daemon 1.10.0 → 2.0.0

package/dist/lib/processPoller.d.ts

@@ -1,2 +1,46 @@
+/** One row of `ps -ax -o pid,ppid,comm` output. */
+export interface ProcessTreeEntry {
+    pid: number;
+    ppid: number;
+    /** Short executable name (not the full command line). */
+    comm: string;
+}
+/**
+ * Parses `ps -ax -o pid,ppid,comm` output into structured rows. A pure
+ * function — no process spawning — so it can be exercised directly with a
+ * captured fixture rather than mocking `execSync`.
+ *
+ * Format per line: `<PID> <PPID> <COMM>`, where `comm` may itself contain no
+ * spaces (it is the short executable name column, unlike `args`).
+ */
+export declare function parseProcessTreeOutput(output: string): ProcessTreeEntry[];
+/**
+ * Best-effort, PROBABILISTIC signal that one or more of Claude Code/Codex/
+ * Gemini CLI is running as a descendant of a `tmux` server process — i.e.
+ * something is orchestrating multiple CLI agents via tmux, the exact shape
+ * Xirp uses (tmux session + git worktree, per its own FAQ). This is NOT a
+ * confirmation that Xirp specifically is the orchestrator: any hand-rolled
+ * tmux-based multi-agent workflow (a personal dotfiles script, a different
+ * tool) trips the identical signal, and this function cannot and does not
+ * distinguish them. Treat it as corroborating evidence to combine with
+ * `xirp.ts`'s own `~/.xirp`/`$XIRP_HOME`/`Xirp.app` detection — never as a
+ * standalone "Xirp is running" claim.
+ *
+ * A pure function over an already-parsed process tree (see
+ * `parseProcessTreeOutput`) so the ancestry-walk logic itself is testable
+ * without mocking `execSync` or depending on the test machine's real
+ * process table.
+ */
+export declare function hasTmuxParentedAgent(tree: readonly ProcessTreeEntry[]): boolean;
+/**
+ * Runs `ps -ax -o pid,ppid,comm` and checks for a tmux-parented agent. Wraps
+ * `hasTmuxParentedAgent` with the real process table; see that function's
+ * doc for what this signal does and does not confirm. Defaults to `false`
+ * (a plain "no signal found", not "unknown") on any error — same
+ * fail-to-empty posture `getActiveAgentProcesses` uses, since this is
+ * best-effort telemetry, not a governance decision that needs to fail
+ * closed.
+ */
+export declare function detectTmuxParentedAgents(): boolean;
 export declare function getActiveAgentProcesses(): string[];
 //# sourceMappingURL=processPoller.d.ts.map

package/dist/lib/processPoller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"processPoller.d.ts","sourceRoot":"","sources":["../../src/lib/processPoller.ts"],"names":[],"mappings":"AAgEA,wBAAgB,uBAAuB,IAAI,MAAM,EAAE,CA4BlD"}
+{"version":3,"file":"processPoller.d.ts","sourceRoot":"","sources":["../../src/lib/processPoller.ts"],"names":[],"mappings":"AAmJA,mDAAmD;AACnD,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAczE;AAQD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,gBAAgB,EAAE,GAAG,OAAO,CAmB/E;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,IAAI,OAAO,CAQlD;AAED,wBAAgB,uBAAuB,IAAI,MAAM,EAAE,CA+BlD"}

package/dist/lib/processPoller.js

@@ -56,16 +56,191 @@ const PROCESS_SIGNATURES = [
         name: 'Antigravity',
         patterns: [/\bantigravity\b/i],
     },
+    {
+        name: 'Muse Code',
+        patterns: [/\bmuse\b/],
+    },
+    {
+        name: 'Grok Build',
+        // `grok` is a short, common English word (and xAI's product name shows
+        // up in unrelated contexts too — chat clients, browser tab titles), so
+        // — the same false-positive concern `goose` required a qualifier for —
+        // a bare `\bgrok\b` would trip on a ps line that merely mentions the
+        // word. Anchored on "grok" appearing as an invoked COMMAND NAME: either
+        // the whole line (interactive `grok`), the leading word of the line, or
+        // right after a path separator (`/usr/local/bin/grok`), followed by
+        // whitespace/end-of-string/an argument dash — never merely appearing as
+        // a word inside a longer argument or unrelated sentence. Deliberately
+        // NOT keyed on a specific subcommand the way `goose`'s
+        // `.*\b(run|session)\b` is: Grok Build's subcommand vocabulary was not
+        // confirmed (the binary was not installable in this environment), so a
+        // keyword guess risked a false NEGATIVE on plain interactive `grok`
+        // instead.
+        patterns: [/(^|[/\\\s])grok(\s|$)/],
+    },
+    {
+        name: 'OpenCode',
+        // Anchored like `grok`: `opencode` is a plain word that can appear in
+        // arguments and paths, so only an invoked command name counts. `opencode2`
+        // is the 2.x line's alternate binary name.
+        patterns: [/(^|[/\\\s])opencode2?(\s|$)/],
+    },
+    {
+        name: 'dsh',
+        // `dsh` is a two-letter... no, three-letter token — shorter and more
+        // collision-prone than `grok` (which at least required a qualifier for
+        // being a common English word). A bare `\bdsh\b` would trip on a `ps`
+        // line mentioning it as an argument, a directory component, or a
+        // coincidental fragment. Anchored the same way `grok`'s entry is: only
+        // when `dsh` appears as an invoked COMMAND NAME — the whole line, the
+        // leading word, or right after a path separator — followed by
+        // whitespace/end-of-string/an argument dash, never merely present
+        // inside a longer token. Also matches the npm package name directly
+        // (`@deepseek-ai/dsh`), which `npx`/a locally-run bin often surfaces
+        // verbatim in `ps` output before the resolved binary name does.
+        patterns: [/(^|[/\\\s])dsh(\s|$)/, /@deepseek-ai\/dsh\b/],
+    },
+    {
+        name: 'Xirp',
+        // Xirp is a macOS `.app`, not a CLI binary invoked by name the way
+        // `grok`/`muse` are — its `ps -ax -o args` entries are dominated by the
+        // app bundle path, so that path fragment is the primary, most reliable
+        // signal (mirrors `Cursor.app`/`Claude.app`/`Windsurf.app` above, not
+        // the bare-word CLI pattern grok/muse needed). NOT independently
+        // verified against a real Xirp install — see xirp.ts's module doc and
+        // TD-390. The tmux-ancestry heuristic below is a separate, weaker
+        // signal this single-line regex scan cannot produce on its own (it has
+        // no parent-PID data).
+        patterns: [/\/Xirp\.app\//i],
+    },
+    {
+        name: 'Agentic Orchestrator',
+        // Unlike Xirp, `agentico` IS a CLI binary invoked by name (confirmed:
+        // the real released binary was run directly during this integration's
+        // research — `agentico`, `agentico server`, etc.) — so this follows the
+        // grok/dsh anchoring style, not Xirp's `.app`-path style. `agentico` is
+        // a coined, low-collision word (unlike `grok`/`dsh`'s common-word/
+        // short-token risk), but the same anchoring discipline applies
+        // regardless: only when it appears as an invoked COMMAND NAME — the
+        // whole line, the leading word, or right after a path separator —
+        // followed by whitespace/end-of-string/an argument dash, never merely
+        // present inside a longer token or unrelated argument.
+        patterns: [/(^|[/\\\s])agentico(\s|$)/],
+    },
 ];
+/**
+ * Command-name patterns for the CLI harnesses Xirp is known to spawn inside
+ * its own tmux sessions (per its own FAQ): Claude Code, Codex, and Gemini
+ * CLI. Deliberately a SEPARATE, narrower list from `PROCESS_SIGNATURES`
+ * above — this exists only to recognise "one of the three agents Xirp
+ * wraps" for `detectTmuxParentedAgents` below, not as a general-purpose
+ * harness detector, and is matched against a short `comm` value (not a full
+ * command line), so it does not need `grok`'s word-boundary-in-a-sentence
+ * defenses — `comm` is already just the executable name.
+ */
+const XIRP_WRAPPED_AGENT_COMM_PATTERNS = [/^claude$/, /^codex$/, /^gemini$/];
+/**
+ * Parses `ps -ax -o pid,ppid,comm` output into structured rows. A pure
+ * function — no process spawning — so it can be exercised directly with a
+ * captured fixture rather than mocking `execSync`.
+ *
+ * Format per line: `<PID> <PPID> <COMM>`, where `comm` may itself contain no
+ * spaces (it is the short executable name column, unlike `args`).
+ */
+export function parseProcessTreeOutput(output) {
+    const rows = [];
+    for (const line of output.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        const parts = trimmed.split(/\s+/);
+        if (parts.length < 3)
+            continue;
+        const pid = Number.parseInt(parts[0], 10);
+        const ppid = Number.parseInt(parts[1], 10);
+        const comm = parts[2];
+        if (Number.isNaN(pid) || Number.isNaN(ppid))
+            continue;
+        rows.push({ pid, ppid, comm });
+    }
+    return rows;
+}
+/** Ancestor-chain walk depth cap — a real process tree is a handful of
+ *  levels deep; bounding this avoids a pathological loop if `ps` ever
+ *  returns a cyclic or self-referential PPID (has happened on some
+ *  container/namespace setups). */
+const MAX_ANCESTRY_DEPTH = 32;
+/**
+ * Best-effort, PROBABILISTIC signal that one or more of Claude Code/Codex/
+ * Gemini CLI is running as a descendant of a `tmux` server process — i.e.
+ * something is orchestrating multiple CLI agents via tmux, the exact shape
+ * Xirp uses (tmux session + git worktree, per its own FAQ). This is NOT a
+ * confirmation that Xirp specifically is the orchestrator: any hand-rolled
+ * tmux-based multi-agent workflow (a personal dotfiles script, a different
+ * tool) trips the identical signal, and this function cannot and does not
+ * distinguish them. Treat it as corroborating evidence to combine with
+ * `xirp.ts`'s own `~/.xirp`/`$XIRP_HOME`/`Xirp.app` detection — never as a
+ * standalone "Xirp is running" claim.
+ *
+ * A pure function over an already-parsed process tree (see
+ * `parseProcessTreeOutput`) so the ancestry-walk logic itself is testable
+ * without mocking `execSync` or depending on the test machine's real
+ * process table.
+ */
+export function hasTmuxParentedAgent(tree) {
+    const byPid = new Map(tree.map((p) => [p.pid, p]));
+    const isTmux = (comm) => comm === 'tmux' || comm.startsWith('tmux:');
+    for (const proc of tree) {
+        if (!XIRP_WRAPPED_AGENT_COMM_PATTERNS.some((p) => p.test(proc.comm)))
+            continue;
+        let current = proc;
+        const seen = new Set();
+        for (let depth = 0; current && depth < MAX_ANCESTRY_DEPTH; depth++) {
+            if (seen.has(current.pid))
+                break; // cyclic PPID chain — stop, not infinite-loop
+            seen.add(current.pid);
+            const parent = byPid.get(current.ppid);
+            if (!parent)
+                break;
+            if (isTmux(parent.comm))
+                return true;
+            current = parent;
+        }
+    }
+    return false;
+}
+/**
+ * Runs `ps -ax -o pid,ppid,comm` and checks for a tmux-parented agent. Wraps
+ * `hasTmuxParentedAgent` with the real process table; see that function's
+ * doc for what this signal does and does not confirm. Defaults to `false`
+ * (a plain "no signal found", not "unknown") on any error — same
+ * fail-to-empty posture `getActiveAgentProcesses` uses, since this is
+ * best-effort telemetry, not a governance decision that needs to fail
+ * closed.
+ */
+export function detectTmuxParentedAgents() {
+    if (process.platform === 'win32')
+        return false; // tmux does not exist on Windows
+    try {
+        const rawOutput = execSync('ps -ax -o pid,ppid,comm', { encoding: 'utf-8', timeout: 3000 });
+        return hasTmuxParentedAgent(parseProcessTreeOutput(rawOutput));
+    }
+    catch {
+        return false;
+    }
+}
 export function getActiveAgentProcesses() {
     const isWindows = process.platform === 'win32';
-    let rawOutput = '';
+    let rawOutput;
     try {
         rawOutput = isWindows
             ? execSync('tasklist /FO CSV /NH', { encoding: 'utf-8', timeout: 3000 })
             : execSync('ps -ax -o args', { encoding: 'utf-8', timeout: 3000 });
     }
     catch {
+        // Deliberate fail-open: the process table is best-effort telemetry, so a
+        // missing/blocked `ps`/`tasklist` (or the 3 s timeout) reports "no agents"
+        // rather than failing the poll. Nothing after this point can run without it.
         return [];
     }
     const lines = rawOutput.split('\n').filter((line) => line.trim().length > 0);

package/dist/lib/processPoller.js.map

@@ -1 +1 @@
-{"version":3,"file":"processPoller.js","sourceRoot":"","sources":["../../src/lib/processPoller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAE7C,MAAM,kBAAkB,GAGnB;IACH;QACE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,kBAAkB,EAAE,oCAAoC,CAAC;KACrE;IACD;QACE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,CAAC,8BAA8B,EAAE,6BAA6B,CAAC;KAC1E;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,CAAC,6BAA6B,CAAC;KAC1C;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,CAAC,kBAAkB,EAAE,YAAY,CAAC;KAC7C;IACD;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,CAAC,WAAW,CAAC;KACxB;IACD;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,CAAC,WAAW,CAAC;KACxB;IACD;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,CAAC,8BAA8B,CAAC;KAC3C;IACD;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,CAAC,eAAe,CAAC;KAC5B;IACD;QACE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;KAChD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,CAAC,mEAAmE,CAAC;KAChF;IACD;QACE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,CAAC,gBAAgB,CAAC;KAC7B;IACD;QACE,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE,CAAC,SAAS,CAAC;KACtB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,CAAC,eAAe,EAAE,oBAAoB,CAAC;KAClD;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,CAAC,kBAAkB,CAAC;KAC/B;CACF,CAAA;AAED,MAAM,UAAU,uBAAuB;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAA;IAC9C,IAAI,SAAS,GAAG,EAAE,CAAA;IAElB,IAAI,CAAC;QACH,SAAS,GAAG,SAAS;YACnB,CAAC,CAAC,QAAQ,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACxE,CAAC,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAClC,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACnC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;oBACpB,MAAK;gBACP,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,CAAA;AACpB,CAAC"}
+{"version":3,"file":"processPoller.js","sourceRoot":"","sources":["../../src/lib/processPoller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAE7C,MAAM,kBAAkB,GAGnB;IACH;QACE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,kBAAkB,EAAE,oCAAoC,CAAC;KACrE;IACD;QACE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,CAAC,8BAA8B,EAAE,6BAA6B,CAAC;KAC1E;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,CAAC,6BAA6B,CAAC;KAC1C;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,CAAC,kBAAkB,EAAE,YAAY,CAAC;KAC7C;IACD;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,CAAC,WAAW,CAAC;KACxB;IACD;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,CAAC,WAAW,CAAC;KACxB;IACD;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,CAAC,8BAA8B,CAAC;KAC3C;IACD;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,CAAC,eAAe,CAAC;KAC5B;IACD;QACE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;KAChD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,CAAC,mEAAmE,CAAC;KAChF;IACD;QACE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,CAAC,gBAAgB,CAAC;KAC7B;IACD;QACE,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE,CAAC,SAAS,CAAC;KACtB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,CAAC,eAAe,EAAE,oBAAoB,CAAC;KAClD;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,CAAC,kBAAkB,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;KACvB;IACD;QACE,IAAI,EAAE,YAAY;QAClB,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,qEAAqE;QACrE,wEAAwE;QACxE,wEAAwE;QACxE,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,uDAAuD;QACvD,uEAAuE;QACvE,uEAAuE;QACvE,oEAAoE;QACpE,WAAW;QACX,QAAQ,EAAE,CAAC,uBAAuB,CAAC;KACpC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,sEAAsE;QACtE,2EAA2E;QAC3E,2CAA2C;QAC3C,QAAQ,EAAE,CAAC,6BAA6B,CAAC;KAC1C;IACD;QACE,IAAI,EAAE,KAAK;QACX,qEAAqE;QACrE,uEAAuE;QACvE,sEAAsE;QACtE,iEAAiE;QACjE,uEAAuE;QACvE,sEAAsE;QACtE,8DAA8D;QAC9D,kEAAkE;QAClE,oEAAoE;QACpE,qEAAqE;QACrE,gEAAgE;QAChE,QAAQ,EAAE,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;KAC1D;IACD;QACE,IAAI,EAAE,MAAM;QACZ,mEAAmE;QACnE,wEAAwE;QACxE,uEAAuE;QACvE,sEAAsE;QACtE,iEAAiE;QACjE,sEAAsE;QACtE,kEAAkE;QAClE,uEAAuE;QACvE,uBAAuB;QACvB,QAAQ,EAAE,CAAC,gBAAgB,CAAC;KAC7B;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,wEAAwE;QACxE,mEAAmE;QACnE,+DAA+D;QAC/D,oEAAoE;QACpE,kEAAkE;QAClE,sEAAsE;QACtE,uDAAuD;QACvD,QAAQ,EAAE,CAAC,2BAA2B,CAAC;KACxC;CACF,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,gCAAgC,GAAa,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;AAUtF;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,IAAI,GAAuB,EAAE,CAAA;IACnC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO;YAAE,SAAQ;QACtB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAClC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAQ;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAQ;QACrD,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAChC,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;mCAGmC;AACnC,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAE7B;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAiC;IACpE,MAAM,KAAK,GAAG,IAAI,GAAG,CAA2B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5E,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAE5E,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,SAAQ;QAE9E,IAAI,OAAO,GAAiC,IAAI,CAAA;QAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,OAAO,IAAI,KAAK,GAAG,kBAAkB,EAAE,KAAK,EAAE,EAAE,CAAC;YACnE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,MAAK,CAAC,8CAA8C;YAC/E,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YACrB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACtC,IAAI,CAAC,MAAM;gBAAE,MAAK;YAClB,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAA;YACpC,OAAO,GAAG,MAAM,CAAA;QAClB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB;IACtC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAA,CAAC,iCAAiC;IAChF,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,QAAQ,CAAC,yBAAyB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3F,OAAO,oBAAoB,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAA;IAC9C,IAAI,SAAiB,CAAA;IAErB,IAAI,CAAC;QACH,SAAS,GAAG,SAAS;YACnB,CAAC,CAAC,QAAQ,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACxE,CAAC,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,2EAA2E;QAC3E,6EAA6E;QAC7E,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAClC,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACnC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;oBACpB,MAAK;gBACP,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,CAAA;AACpB,CAAC"}

package/dist/lib/runtimeEnv.d.ts

@@ -14,6 +14,7 @@
  *   INTUTIC_HOST=https://api.intutic.ai
  *   INTUTIC_API_KEY=sk-live-...
  *   INTUTIC_WORKSPACE_ID=ws_...
+ *   INTUTIC_VALKEY_URL=redis://127.0.0.1:6379   (only when a local Valkey is running)
  *
  * LLD #14 — Dual-path hook telemetry (WS-A1)
  *
@@ -36,6 +37,13 @@ export interface RuntimeEnvOptions {
     mcpProxyMode?: string;
     /** WS-5 Q3: 'rewrite' | 'immutable' | 'alert-only' (default: 'rewrite') */
     bypassEnforcementTier?: string;
+    /**
+     * The local Valkey the MCP governance proxies share their anomaly session
+     * window through (Wave 5.3, TD-437). Written as `INTUTIC_VALKEY_URL` only
+     * when the caller has one running; omitted otherwise, so a proxy never
+     * probes a Valkey nobody started.
+     */
+    valkeyUrl?: string;
 }
 /**
  * Write runtime credentials to `~/.intutic/env/runtime.env`.

package/dist/lib/runtimeEnv.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtimeEnv.d.ts","sourceRoot":"","sources":["../../src/lib/runtimeEnv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AASH,kFAAkF;AAClF,eAAO,MAAM,wBAAwB,QAA4D,CAAA;AAEjG,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,eAAe,EAAE,MAAM,CAAA;IACvB,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,mDAAmD;IACnD,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,2EAA2E;IAC3E,qBAAqB,CAAC,EAAE,MAAM,CAAA;CAC/B;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqC5E"}
+{"version":3,"file":"runtimeEnv.d.ts","sourceRoot":"","sources":["../../src/lib/runtimeEnv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AASH,kFAAkF;AAClF,eAAO,MAAM,wBAAwB,QAA4D,CAAA;AAEjG,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,eAAe,EAAE,MAAM,CAAA;IACvB,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,mDAAmD;IACnD,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,2EAA2E;IAC3E,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuC5E"}

package/dist/lib/runtimeEnv.js

@@ -14,6 +14,7 @@
  *   INTUTIC_HOST=https://api.intutic.ai
  *   INTUTIC_API_KEY=sk-live-...
  *   INTUTIC_WORKSPACE_ID=ws_...
+ *   INTUTIC_VALKEY_URL=redis://127.0.0.1:6379   (only when a local Valkey is running)
  *
  * LLD #14 — Dual-path hook telemetry (WS-A1)
  *
@@ -42,6 +43,7 @@ export async function writeRuntimeEnv(opts) {
     const host = (opts.controlPlaneUrl ?? '').replace(/[\r\n]/g, '');
     const key = (opts.apiKey ?? '').replace(/[\r\n]/g, '');
     const wsId = (opts.workspaceId ?? '').replace(/[\r\n]/g, '');
+    const valkeyUrl = (opts.valkeyUrl ?? '').replace(/[\r\n]/g, '');
     const content = [
         `# Intutic hook runtime credentials — auto-generated. DO NOT EDIT.`,
         `# Sourced by ~/.intutic/hooks/*.sh and parsed by ~/.intutic/hooks/*.js at invocation time.`,
@@ -53,6 +55,7 @@ export async function writeRuntimeEnv(opts) {
         `INTUTIC_MCP_FAIL_OPEN=${(opts.mcpProxyFailBehavior ?? 'open') !== 'closed' ? 'true' : 'false'}`,
         `INTUTIC_MCP_PROXY_MODE=${opts.mcpProxyMode ?? 'per-session'}`,
         `INTUTIC_BYPASS_TIER=${opts.bypassEnforcementTier ?? 'rewrite'}`,
+        ...(valkeyUrl ? [`INTUTIC_VALKEY_URL=${valkeyUrl}`] : []),
         ``,
         `# LLM proxy routing (uncomment when Intutic Rust proxy is running on port 8080)`,
         `# GOOSE_BASE_URL=http://127.0.0.1:8080`,

package/dist/lib/runtimeEnv.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtimeEnv.js","sourceRoot":"","sources":["../../src/lib/runtimeEnv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,GAAG,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAA;AAE5C,kFAAkF;AAClF,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;AAmBjG;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB;IAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,wBAAwB,CAAA;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAEpC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE3C,yEAAyE;IACzE,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAChE,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IACtD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAE5D,MAAM,OAAO,GAAG;QACd,mEAAmE;QACnE,4FAA4F;QAC5F,4GAA4G;QAC5G,sHAAsH;QACtH,gBAAgB,IAAI,EAAE;QACtB,mBAAmB,GAAG,EAAE;QACxB,wBAAwB,IAAI,EAAE;QAC9B,yBAAyB,CAAC,IAAI,CAAC,oBAAoB,IAAI,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE;QAChG,0BAA0B,IAAI,CAAC,YAAY,IAAI,aAAa,EAAE;QAC9D,uBAAuB,IAAI,CAAC,qBAAqB,IAAI,SAAS,EAAE;QAChE,EAAE;QACF,iFAAiF;QACjF,wCAAwC;QACxC,yCAAyC;QACzC,4CAA4C;QAC5C,sCAAsC;QACtC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEZ,MAAM,OAAO,GAAG,OAAO,GAAG,MAAM,CAAA;IAChC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;IAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAC9B,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAEjC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,4BAA4B,CAAC,CAAA;AAC3F,CAAC"}
+{"version":3,"file":"runtimeEnv.js","sourceRoot":"","sources":["../../src/lib/runtimeEnv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,GAAG,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAA;AAE5C,kFAAkF;AAClF,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;AA0BjG;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB;IAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,wBAAwB,CAAA;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAEpC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE3C,yEAAyE;IACzE,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAChE,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IACtD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAC5D,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAE/D,MAAM,OAAO,GAAG;QACd,mEAAmE;QACnE,4FAA4F;QAC5F,4GAA4G;QAC5G,sHAAsH;QACtH,gBAAgB,IAAI,EAAE;QACtB,mBAAmB,GAAG,EAAE;QACxB,wBAAwB,IAAI,EAAE;QAC9B,yBAAyB,CAAC,IAAI,CAAC,oBAAoB,IAAI,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE;QAChG,0BAA0B,IAAI,CAAC,YAAY,IAAI,aAAa,EAAE;QAC9D,uBAAuB,IAAI,CAAC,qBAAqB,IAAI,SAAS,EAAE;QAChE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,EAAE;QACF,iFAAiF;QACjF,wCAAwC;QACxC,yCAAyC;QACzC,4CAA4C;QAC5C,sCAAsC;QACtC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEZ,MAAM,OAAO,GAAG,OAAO,GAAG,MAAM,CAAA;IAChC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;IAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAC9B,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAEjC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,4BAA4B,CAAC,CAAA;AAC3F,CAAC"}

package/dist/localTrajectoryHeuristics.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Local trajectory heuristics (Wave 7, audit-remediation).
+ *
+ * Ports 4 of the 5 deterministic pre-screen rules from the enterprise
+ * control plane's `trajectoryAnalysisService.ts` (`HEURISTIC_RULES`) so an
+ * open-core or standalone daemon — no control plane connection required —
+ * still gets a trajectory guardrail, matching this codebase's tier boundary:
+ * free = local/deterministic, paid = judge/team/auto-learning.
+ *
+ * `BUDGET_EXCEEDED` does NOT port. It reads `budgetUtilization`,
+ * workspace-scoped spend-vs-cap state that only the control plane resolves
+ * today — `trajectoryMonitor.ts`'s `submitSummary` calls
+ * `buffer.toSummary([], 0)` with the comment "SOPs and budget filled by CP",
+ * meaning the daemon has no real value for this field at all, only a
+ * placeholder `0`. The proxy's own `local_spend.rs` tracks a DIFFERENT
+ * thing — a per-machine daily dollar cap, not this workspace-scoped budget
+ * percentage — so porting a rule under the same name against that source
+ * would silently change what the rule means, not just where it runs.
+ *
+ * Deterministic only, matching this package's own standing doctrine
+ * (`trajectoryMonitor.ts`'s module doc: "No LLM calls on developer
+ * machine — all judgment is server-side"). This module makes the same true
+ * of a fourth thing: a local guardrail that needs no server round trip at
+ * all, judgment or otherwise.
+ *
+ * @module
+ */
+export type LocalHeuristicRule = 'RUNAWAY_VELOCITY' | 'LOOP_DETECTED' | 'ERROR_STORM' | 'TOOL_ABUSE';
+export type LocalHeuristicSeverity = 'HIGH' | 'MEDIUM';
+export interface LocalHeuristicResult {
+    triggered: true;
+    rule: LocalHeuristicRule;
+    severity: LocalHeuristicSeverity;
+    message: string;
+}
+/** The subset of `TrajectorySummaryPayload` these four rules need — every
+ *  one of these fields is computed locally in `TrajectoryBuffer.toSummary`,
+ *  unlike `budgetUtilization`. */
+export interface LocalHeuristicInput {
+    tokenVelocity: number;
+    toolCallVelocity: number;
+    maxConsecutiveIdenticalCalls: number;
+    errorCount: number;
+}
+/**
+ * Runs the four portable heuristics against a locally-computed trajectory
+ * summary. Pure and synchronous — no I/O, no network, safe to call on every
+ * window regardless of control-plane reachability.
+ */
+export declare function runLocalTrajectoryHeuristics(summary: LocalHeuristicInput): LocalHeuristicResult[];
+//# sourceMappingURL=localTrajectoryHeuristics.d.ts.map

package/dist/localTrajectoryHeuristics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localTrajectoryHeuristics.d.ts","sourceRoot":"","sources":["../src/localTrajectoryHeuristics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,GAAG,eAAe,GAAG,aAAa,GAAG,YAAY,CAAA;AACpG,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,QAAQ,CAAA;AAEtD,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,IAAI,CAAA;IACf,IAAI,EAAE,kBAAkB,CAAA;IACxB,QAAQ,EAAE,sBAAsB,CAAA;IAChC,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;kCAEkC;AAClC,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,4BAA4B,EAAE,MAAM,CAAA;IACpC,UAAU,EAAE,MAAM,CAAA;CACnB;AA0DD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,mBAAmB,GAAG,oBAAoB,EAAE,CAOjG"}

package/dist/localTrajectoryHeuristics.js

@@ -0,0 +1,90 @@
+/**
+ * Local trajectory heuristics (Wave 7, audit-remediation).
+ *
+ * Ports 4 of the 5 deterministic pre-screen rules from the enterprise
+ * control plane's `trajectoryAnalysisService.ts` (`HEURISTIC_RULES`) so an
+ * open-core or standalone daemon — no control plane connection required —
+ * still gets a trajectory guardrail, matching this codebase's tier boundary:
+ * free = local/deterministic, paid = judge/team/auto-learning.
+ *
+ * `BUDGET_EXCEEDED` does NOT port. It reads `budgetUtilization`,
+ * workspace-scoped spend-vs-cap state that only the control plane resolves
+ * today — `trajectoryMonitor.ts`'s `submitSummary` calls
+ * `buffer.toSummary([], 0)` with the comment "SOPs and budget filled by CP",
+ * meaning the daemon has no real value for this field at all, only a
+ * placeholder `0`. The proxy's own `local_spend.rs` tracks a DIFFERENT
+ * thing — a per-machine daily dollar cap, not this workspace-scoped budget
+ * percentage — so porting a rule under the same name against that source
+ * would silently change what the rule means, not just where it runs.
+ *
+ * Deterministic only, matching this package's own standing doctrine
+ * (`trajectoryMonitor.ts`'s module doc: "No LLM calls on developer
+ * machine — all judgment is server-side"). This module makes the same true
+ * of a fourth thing: a local guardrail that needs no server round trip at
+ * all, judgment or otherwise.
+ *
+ * @module
+ */
+/** Thresholds and severities mirror `HEURISTIC_RULES` in the enterprise
+ *  `trajectoryAnalysisService.ts` exactly — this is a port, not a redesign. */
+const LOCAL_HEURISTIC_RULES = [
+    {
+        rule: 'RUNAWAY_VELOCITY',
+        check: (s) => s.tokenVelocity > 50_000
+            ? {
+                triggered: true,
+                rule: 'RUNAWAY_VELOCITY',
+                severity: 'HIGH',
+                message: `Token velocity: ${s.tokenVelocity.toFixed(0)} tokens/min (threshold: 50,000)`,
+            }
+            : null,
+    },
+    {
+        rule: 'LOOP_DETECTED',
+        check: (s) => s.maxConsecutiveIdenticalCalls >= 5
+            ? {
+                triggered: true,
+                rule: 'LOOP_DETECTED',
+                severity: 'HIGH',
+                message: `${s.maxConsecutiveIdenticalCalls} consecutive identical tool calls detected`,
+            }
+            : null,
+    },
+    {
+        rule: 'ERROR_STORM',
+        check: (s) => s.errorCount > 10
+            ? {
+                triggered: true,
+                rule: 'ERROR_STORM',
+                severity: 'MEDIUM',
+                message: `${s.errorCount} errors in current window`,
+            }
+            : null,
+    },
+    {
+        rule: 'TOOL_ABUSE',
+        check: (s) => s.toolCallVelocity > 30
+            ? {
+                triggered: true,
+                rule: 'TOOL_ABUSE',
+                severity: 'MEDIUM',
+                message: `Tool call velocity: ${s.toolCallVelocity.toFixed(1)} calls/min (threshold: 30)`,
+            }
+            : null,
+    },
+];
+/**
+ * Runs the four portable heuristics against a locally-computed trajectory
+ * summary. Pure and synchronous — no I/O, no network, safe to call on every
+ * window regardless of control-plane reachability.
+ */
+export function runLocalTrajectoryHeuristics(summary) {
+    const results = [];
+    for (const { check } of LOCAL_HEURISTIC_RULES) {
+        const result = check(summary);
+        if (result)
+            results.push(result);
+    }
+    return results;
+}
+//# sourceMappingURL=localTrajectoryHeuristics.js.map

package/dist/localTrajectoryHeuristics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localTrajectoryHeuristics.js","sourceRoot":"","sources":["../src/localTrajectoryHeuristics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAsBH;+EAC+E;AAC/E,MAAM,qBAAqB,GAGtB;IACH;QACE,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACX,CAAC,CAAC,aAAa,GAAG,MAAM;YACtB,CAAC,CAAC;gBACE,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,kBAAkB;gBACxB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,mBAAmB,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC;aACxF;YACH,CAAC,CAAC,IAAI;KACX;IACD;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACX,CAAC,CAAC,4BAA4B,IAAI,CAAC;YACjC,CAAC,CAAC;gBACE,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,GAAG,CAAC,CAAC,4BAA4B,4CAA4C;aACvF;YACH,CAAC,CAAC,IAAI;KACX;IACD;QACE,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACX,CAAC,CAAC,UAAU,GAAG,EAAE;YACf,CAAC,CAAC;gBACE,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,GAAG,CAAC,CAAC,UAAU,2BAA2B;aACpD;YACH,CAAC,CAAC,IAAI;KACX;IACD;QACE,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACX,CAAC,CAAC,gBAAgB,GAAG,EAAE;YACrB,CAAC,CAAC;gBACE,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,uBAAuB,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B;aAC1F;YACH,CAAC,CAAC,IAAI;KACX;CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,OAA4B;IACvE,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,qBAAqB,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;QAC7B,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/sessionReporter.d.ts

@@ -0,0 +1,70 @@
+/**
+ * sessionReporter.ts — turn harness detection into real control-plane
+ * sessions.
+ *
+ * The full-fidelity session path (POST /api/v1/sessions — branch/commit
+ * capture and the Jira/Linear/GitHub task-context cascade) had no production
+ * caller: sessions only ever existed as synthetic `ssp_` rows minted
+ * server-side. The daemon knows everything the route wants — workspace root,
+ * harness, git branch and commit — so it reports them once per harness per
+ * daemon run when the harness is first detected.
+ *
+ * WHICH row it reports them onto (TD-231, Wave 5.6): when a local proxy is
+ * reachable, the caller passes that process's `proxyInstanceId` and the
+ * control plane puts the context on the proxy's OWN row — the
+ * `ssp_<ws>_<harness>_<instance>` session it derives for that process's
+ * traces, so the branch, the task and the cost sit on one row (AI intensity
+ * reads them together) and the hook gate's blocks resolve to the same row.
+ * That row's lifecycle stays the control plane's 30-minute idle rule; the
+ * daemon never ends it, because an externally started proxy keeps serving
+ * after the daemon stops and an ended row would vanish from Active Sessions
+ * and from the hook gate's resolver while traces still attach to it. A
+ * respawned proxy has a new instance id, so it gets a new row on the next
+ * iteration. Without an instance id (no local proxy, or a shared gateway —
+ * `fetchLocalProxyInstanceId` refuses a `gw_` id) the daemon opens a `ses_`
+ * STANDARD row as before and ends it on shutdown
+ * (PATCH /api/v1/sessions/:id/end).
+ *
+ * Dedupe lives here (module state keyed workspace+harness+instance), so
+ * callers — `startSyncLoop`'s iteration as well as the CLI's inline connect
+ * loop — can call `startHarnessSession` every iteration and only the first
+ * one POSTs. Git context is captured once per key, not on a branch switch.
+ * Everything is best-effort: a dead control plane costs a warning, never the
+ * sync loop.
+ *
+ * @module
+ */
+import type { HarnessType } from '@intutic/shared-types';
+export interface GitInfo {
+    branchName?: string;
+    commitHash?: string;
+    commitMessage?: string;
+}
+/** Best-effort git context from the workspace root. */
+export declare function readGitInfo(workspaceRoot: string): Promise<GitInfo>;
+/**
+ * Report a harness session once per run — onto the local proxy's own row when
+ * `proxyInstanceId` is given (see the module doc), else as a new `ses_` row.
+ * Returns the sessionId when one is known (new or previously created).
+ */
+export declare function startHarnessSession(opts: {
+    controlPlaneUrl: string;
+    apiKey: string;
+    workspaceId: string;
+    harnessType: HarnessType;
+    workspaceRoot: string;
+    agentRole?: string;
+    /**
+     * The local proxy process's instance id (`fetchLocalProxyInstanceId`).
+     * Present: the context is registered onto that process's proxy row, which
+     * this module never ends. Absent: a `ses_` row, ended on shutdown.
+     */
+    proxyInstanceId?: string;
+}): Promise<string | null>;
+/**
+ * End every `ses_` session this run opened. Called from shutdown paths. Proxy
+ * rows registered through `proxyInstanceId` are forgotten, not ended — the
+ * module doc says why.
+ */
+export declare function endAllOpenSessions(controlPlaneUrl: string, apiKey: string): Promise<void>;
+//# sourceMappingURL=sessionReporter.d.ts.map

package/dist/sessionReporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionReporter.d.ts","sourceRoot":"","sources":["../src/sessionReporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAiBxD,MAAM,WAAW,OAAO;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,uDAAuD;AACvD,wBAAsB,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAgBzE;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,eAAe,EAAE,MAAM,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,WAAW,CAAA;IACxB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuCzB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB/F"}