@jinn-network/client 0.1.8 → 0.1.9-canary.023faefb

package/dist/trajectory/scrub/secretlint-stage.d.ts

@@ -0,0 +1,35 @@
+import { type KeyPolicy } from './key-policy.js';
+import type { ScrubStage } from './types.js';
+/**
+ * Secrets stage. Two passes over each `content`-classified string value:
+ *  1. secretlint preset-recommend rules (AWS secret-key assignments, GitHub,
+ *     Slack, npm, GCP service-account JSON, …) — each match replaced inline
+ *     with `[SECRET:<rule>]`. Note the preset's defaults are narrower than the
+ *     rule names suggest: bare AWS key IDs (AKIA…) and `AIza…` GCP API keys
+ *     are NOT detected in this pass.
+ *  2. a conservative Shannon-entropy + secret-shape fallback that catches
+ *     near-random tokens no specific rule matched (≥ 20 chars by entropy alone,
+ *     or 16–19 chars when the token is a single high-density secret-charset run
+ *     mixing multiple character classes), replaced with `[SECRET:high-entropy]`.
+ *     Path-shaped tokens (`owner/repo/slug` and friends, #1348) are judged
+ *     per-segment rather than whole-token, so slug identifiers survive while a
+ *     secret embedded as a path segment still redacts.
+ * `safe` and non-string values pass through untouched.
+ */
+export interface SecretlintStageOptions {
+    /**
+     * Gate for the pass-2 Shannon-entropy fallback (#1409). Default true (trace
+     * profile, unchanged). The seed-import profile sets false: SKILL.md bodies
+     * are public licence-checked prose where the probabilistic sweep demonstrably
+     * false-positives (env-var assignments with dated slugs, ≥20-char camelCase
+     * identifiers) — pass-1 deterministic rules still run unconditionally. With
+     * the fallback off, bare AWS key IDs (AKIA…), `AIza…` GCP API keys, JWTs,
+     * and generic high-entropy blobs pass this stage unredacted (pass-1 catches
+     * AWS secret-key assignments and GCP service-account JSON only). The seed
+     * profile covers the AWS/GCP key-ID shapes upstream in plain-patterns
+     * (#1415); the JWT / high-entropy residual is accepted for public,
+     * licence-checked seed content.
+     */
+    entropyFallback?: boolean;
+}
+export declare function secretlintStage(policy: KeyPolicy, opts?: SecretlintStageOptions): ScrubStage;

package/dist/trajectory/scrub/secretlint-stage.js

@@ -0,0 +1,250 @@
+import { lintSource } from '@secretlint/core';
+import { creator } from '@secretlint/secretlint-rule-preset-recommend';
+import { classifyKey } from './key-policy.js';
+const VERSION = '0.4.1'; // 0.4.1: public SWE-rebench instance ids skip the entropy fallback
+const PRESET_RULE_ID = '@secretlint/secretlint-rule-preset-recommend';
+// Entropy fallback thresholds. Conservative on purpose: a long token whose
+// character distribution is near-random is almost certainly a key/token, not
+// prose. Tunable; raise the bar if legitimate high-entropy content over-redacts.
+//
+// `ENTROPY_MIN_BITS` stays at 4.0: English prose sits ~4.0–4.5 bits/char, so
+// lowering it below 4.0 globally nukes legitimate prose. `ENTROPY_MIN_LEN` is
+// lowered from 20 → 16 so secret-shaped tokens in the 16–19 char band (which
+// the old 20-char floor never even considered) are caught — but only when they
+// ALSO pass the structural shape gate below, so the longer tail of legit
+// identifiers/words in that band is not swept in. Tokens of length ≥ 20 keep
+// the original entropy-only behaviour (the shape gate does not narrow it).
+const ENTROPY_MIN_LEN = 16;
+const ENTROPY_MIN_BITS = 4.0;
+// Above this length the entropy bar alone decides (original behaviour). Between
+// ENTROPY_MIN_LEN and here the structural shape gate is additionally required.
+const ENTROPY_STRICT_LEN = 20;
+// A "secret-shaped" token: a single run of base64 / base64url / hex charset
+// characters only (letters, digits, and the `+/=_-` set), with NO natural-language
+// punctuation or spaces.
+const SECRET_CHARSET = /^[A-Za-z0-9+/=_-]+$/;
+// Tuning note (#1348): a path-shaped token — slug segments joined by `/`,
+// e.g. `obra/superpowers/skills/test-driven-development` — is judged
+// per-SEGMENT, not whole-token, but ONLY when the whole token mixes at most
+// 2 character classes. Concatenating several short human-readable slugs
+// inflates whole-token Shannon entropy past 4.0 bits/char purely by
+// length/variety, which was redacting seed-import task summaries as
+// `[SECRET:high-entropy]`; real slugs are overwhelmingly lowercase (1–2
+// classes), while secrets that merely contain `/` or `.` (AWS-style base64
+// keys, `dir/<blob>.tar.gz` filenames) almost always mix 3 classes and keep
+// the original whole-token entropy behaviour. The segment charset excludes
+// `+` and `=`, so base64 blobs containing either are never path-shaped.
+// Residual exposure: a secret with ≤ 2 whole-token character classes whose
+// every `[/.]`-split segment is under 16 chars (or below the entropy bar)
+// qualifies as a path and escapes the fallback.
+const PATH_SHAPED = /^[A-Za-z0-9._-]+(\/[A-Za-z0-9._-]+)+$/;
+// SWE-rebench instance ids are public corpus identifiers (`owner__repo-PR`),
+// not key material. Some short bridge summaries repeat them and otherwise cross
+// the defacement gate after entropy redaction.
+const SWE_REBENCH_INSTANCE_ID = /^[a-z0-9][a-z0-9._-]*__[a-z0-9][a-z0-9._-]*-\d+$/;
+// Tuning note (#1391): the entropy fallback's threat model is ASCII key
+// material — base64 / base64url / hex runs. Natural-language text outside the
+// Latin script (CJK especially) has char-level Shannon entropy far above 4.0
+// bits/char (most characters in a sentence are unique), so whole-token entropy
+// classified ordinary Chinese skill prose as secrets and shredded it. A token
+// whose non-ASCII share exceeds this threshold skips the entropy fallback
+// entirely; the pass-1 secretlint preset rules still run on everything.
+// Residual exposure: a generic (rule-less) secret glued WITHOUT whitespace
+// into a majority-non-ASCII token escapes the fallback — prefixed keys
+// (ghp_…, AKIA…, sk-…) are still caught by pass 1, and CJK prose separates
+// embedded ASCII material with spacing or punctuation in practice.
+const NON_ASCII_MAX_SHARE = 0.3;
+// Tuning note (#1391): a STRUCTURED token — one containing characters outside
+// SECRET_CHARSET, i.e. URLs (`://`, `?`, `&`, `#`), markdown links (`](`),
+// shell interpolations (`${…}`), serialised code — cannot itself be a
+// contiguous key: real key material never contains brackets, quotes or `?`.
+// A key can only be EMBEDDED in such a token as a delimited segment, so the
+// token is judged per-segment (mirroring the #1348 PATH_SHAPED carve-out)
+// instead of by whole-token entropy, which URLs and markdown links inflate
+// past 4.0 bits/char purely by punctuation/length variety (every seed
+// envelope's attribution URL published as [SECRET:high-entropy]).
+// Segments split on everything outside `[A-Za-z0-9+=_-]`: `/` and `.` split
+// (slug and query-string segments stay short and human-readable — matching
+// the PATH gate's `[/.]` split), while `-`, `_`, `+`, `=` stay inside a
+// segment because base64url alphabets and key=value pairs use them
+// (`?key=<blob>` gates as one segment; a JWT's `.`-separated base64url
+// segments gate individually). Residual exposure, same shape as the #1348
+// note: a secret whose every delimited segment falls under 16 chars (or the
+// entropy bar, or a single character class) escapes — e.g. a base64 blob
+// with `/` every few chars additionally wrapped in punctuation.
+const STRUCTURED_SEGMENT_DELIMITER = /[^A-Za-z0-9+=_-]+/;
+// Tuning note (#1391): a "wordish" segment — two or more purely-alphabetic
+// runs joined by `_` or `-` (`Microsoft_Azure_Capacity`, `backend-refactor`)
+// — is an identifier, not key material, even when its length and character
+// variety clear the entropy bar (the Azure portal URL's
+// `Microsoft_Azure_Capacity` sits at 4.002 bits/char). Key material of
+// segment-gate length (≥ 16 chars) drawn from a base64/base64url alphabet
+// contains a digit with ~94% probability and separator-split all-alphabetic
+// runs almost never; the residual all-alpha, separator-structured key is
+// accepted as out of the fallback's reach.
+const WORDISH_SEGMENT = /^[A-Za-z]+([_-][A-Za-z]+)+$/;
+function shannonEntropy(s) {
+    const freq = {};
+    for (const ch of s)
+        freq[ch] = (freq[ch] ?? 0) + 1;
+    let e = 0;
+    for (const count of Object.values(freq)) {
+        const p = count / s.length;
+        e -= p * Math.log2(p);
+    }
+    return e;
+}
+/** Count distinct character classes present (lowercase / uppercase / digit). */
+function charClassCount(s) {
+    let n = 0;
+    if (/[a-z]/.test(s))
+        n += 1;
+    if (/[A-Z]/.test(s))
+        n += 1;
+    if (/[0-9]/.test(s))
+        n += 1;
+    return n;
+}
+function isSweRebenchInstanceId(token) {
+    return SWE_REBENCH_INSTANCE_ID.test(token);
+}
+/**
+ * Decide whether a single whitespace-delimited token should be redacted as a
+ * high-entropy / secret-shaped value. Purely additive over the original rule:
+ *  - length ≥ ENTROPY_STRICT_LEN (20): entropy bar alone (unchanged behaviour),
+ *  - ENTROPY_MIN_LEN (16) ≤ length < 20: entropy bar AND the structural shape
+ *    gate — the token must be a single secret-charset run mixing ≥ 2 character
+ *    classes (so dictionary words + a trailing suffix like `authentication123`,
+ *    which sit below 4.0 bits/char anyway, are not swept in).
+ * Never fires below ENTROPY_MIN_LEN.
+ *
+ * Path carve-out (#1348): a PATH_SHAPED token whose WHOLE-token character-
+ * class count is ≤ 2 is redacted only when at least one `[/.]`-delimited
+ * segment independently passes the strict shape gate (length ≥
+ * ENTROPY_MIN_LEN, entropy ≥ ENTROPY_MIN_BITS, secret charset, ≥ 2 character
+ * classes) — applied at ALL lengths, so a long path of short slugs never
+ * trips the whole-token entropy bar, while a real key embedded as a path
+ * segment (`api/v1/ghp_…`) still redacts. A path-shaped token mixing ≥ 3
+ * whole-token classes never takes the carve-out — real slugs are 1–2
+ * classes, and 3-class "paths" are secrets wearing slashes/dots (#1348
+ * review finding) — it falls through to the whole-token logic below.
+ * Splitting on dots as well as slashes means a sentence full stop or a file
+ * extension yields its own (failing) segment instead of poisoning the
+ * secret blob next to it. Non-path tokens are unaffected.
+ *
+ * #1391 additions, checked in order:
+ *  - a non-ASCII-dominant token (share > NON_ASCII_MAX_SHARE) is prose in a
+ *    non-Latin script, not ASCII key material — never entropy-gated;
+ *  - a structured token (any character outside SECRET_CHARSET: URLs,
+ *    markdown links, shell interpolations) is judged per delimited segment
+ *    via the same strict gate as path segments — see the
+ *    STRUCTURED_SEGMENT_DELIMITER tuning note.
+ * Pure SECRET_CHARSET runs keep the original whole-token behaviour.
+ */
+function isSecretShapedToken(token) {
+    if (token.length < ENTROPY_MIN_LEN)
+        return false;
+    if (nonAsciiShare(token) > NON_ASCII_MAX_SHARE)
+        return false;
+    if (isSweRebenchInstanceId(token))
+        return false;
+    if (PATH_SHAPED.test(token) && charClassCount(token) <= 2) {
+        return token.split(/[/.]/).some(passesStrictSegmentGate);
+    }
+    if (!SECRET_CHARSET.test(token)) {
+        // Structured token (#1391) — URL, markdown link, shell interpolation…
+        // A contiguous key can only live inside a delimited segment.
+        return token.split(STRUCTURED_SEGMENT_DELIMITER).some(passesStrictSegmentGate);
+    }
+    if (shannonEntropy(token) < ENTROPY_MIN_BITS)
+        return false;
+    if (token.length >= ENTROPY_STRICT_LEN)
+        return true;
+    return charClassCount(token) >= 2;
+}
+/**
+ * The strict per-segment gate shared by the PATH_SHAPED (#1348) and
+ * structured-token (#1391) carve-outs: a segment is secret-shaped only when
+ * it is ≥ ENTROPY_MIN_LEN chars, clears the entropy bar, is a single
+ * secret-charset run, and mixes ≥ 2 character classes.
+ */
+function passesStrictSegmentGate(segment) {
+    return (segment.length >= ENTROPY_MIN_LEN &&
+        !WORDISH_SEGMENT.test(segment) &&
+        shannonEntropy(segment) >= ENTROPY_MIN_BITS &&
+        SECRET_CHARSET.test(segment) &&
+        charClassCount(segment) >= 2);
+}
+/** Share of characters outside the 7-bit ASCII range (by code point). */
+function nonAsciiShare(s) {
+    let n = 0;
+    let total = 0;
+    for (const ch of s) {
+        total += 1;
+        if ((ch.codePointAt(0) ?? 0) > 0x7f)
+            n += 1;
+    }
+    return total === 0 ? 0 : n / total;
+}
+/** Short label from a secretlint ruleId, e.g. `@secretlint/secretlint-rule-github` → `github`. */
+function shortRule(ruleId) {
+    return ruleId.replace(/^@secretlint\/secretlint-rule-/, '').replace(/^@secretlint\//, '');
+}
+// #1378 cosmetic: a `\S+` token inside serialised JSON drags its wrapping
+// delimiters along (`"…/blob",` is one whitespace-delimited token), so
+// replacing the whole token swallowed the quotes/comma and left malformed
+// JSON (`"resolved_path": [SECRET:high-entropy] "files_modified": …`). Split
+// each token into leading punctuation / core / trailing punctuation, gate on
+// the core, and reattach the punctuation around the placeholder. None of the
+// stripped characters belong to SECRET_CHARSET (`=` deliberately excluded —
+// base64 padding), so no secret material is ever preserved; if anything,
+// stripping the wrapper improves detection (the 16–19 char shape gate
+// previously failed on quoted tokens because the quotes broke the charset).
+const TOKEN_WRAPPING = /^([("'`[{,;:]*)([\s\S]*?)([)"'`\]},;:.]*)$/;
+export function secretlintStage(policy, opts = {}) {
+    const entropyFallback = opts.entropyFallback ?? true;
+    const config = { rules: [{ id: PRESET_RULE_ID, rule: creator }] };
+    return {
+        name: 'secretlint',
+        version: VERSION,
+        async scrub(attributes) {
+            const out = {};
+            const redactions = [];
+            for (const [key, value] of Object.entries(attributes)) {
+                if (typeof value !== 'string' || classifyKey(key, policy) !== 'content') {
+                    out[key] = value;
+                    continue;
+                }
+                // Pass 1 — rule-based detection.
+                const result = await lintSource({
+                    source: { filePath: '/span', content: value, ext: '.txt', contentType: 'text' },
+                    options: { config },
+                });
+                let text = value;
+                // Replace from last range to first so earlier indices stay valid.
+                const ranges = [...result.messages].sort((a, b) => b.range[0] - a.range[0]);
+                for (const m of ranges) {
+                    const label = shortRule(m.ruleId);
+                    text = text.slice(0, m.range[0]) + `[SECRET:${label}]` + text.slice(m.range[1]);
+                    redactions.push({ key, stage: 'secretlint', kind: 'secret', detail: label });
+                }
+                // Pass 2 — entropy + secret-shape fallback on whatever survived.
+                // Wrapping punctuation is preserved around the placeholder (#1378).
+                // Skipped entirely under the seed profile (#1409).
+                if (entropyFallback) {
+                    text = text.replace(/\S+/g, (token) => {
+                        const [, lead = '', core = token, trail = ''] = TOKEN_WRAPPING.exec(token) ?? [];
+                        if (isSecretShapedToken(core)) {
+                            redactions.push({ key, stage: 'secretlint', kind: 'secret', detail: 'high-entropy' });
+                            return `${lead}[SECRET:high-entropy]${trail}`;
+                        }
+                        return token;
+                    });
+                }
+                out[key] = text;
+            }
+            return { attributes: out, redactions };
+        },
+    };
+}
+//# sourceMappingURL=secretlint-stage.js.map

package/dist/trajectory/scrub/secretlint-stage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretlint-stage.js","sourceRoot":"","sources":["../../../src/trajectory/scrub/secretlint-stage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,8CAA8C,CAAC;AACvE,OAAO,EAAE,WAAW,EAAkB,MAAM,iBAAiB,CAAC;AAG9D,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,mEAAmE;AAC5F,MAAM,cAAc,GAAG,8CAA8C,CAAC;AAEtE,2EAA2E;AAC3E,6EAA6E;AAC7E,iFAAiF;AACjF,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,yEAAyE;AACzE,6EAA6E;AAC7E,2EAA2E;AAC3E,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,gFAAgF;AAChF,+EAA+E;AAC/E,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,4EAA4E;AAC5E,mFAAmF;AACnF,yBAAyB;AACzB,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAE7C,0EAA0E;AAC1E,qEAAqE;AACrE,4EAA4E;AAC5E,wEAAwE;AACxE,oEAAoE;AACpE,oEAAoE;AACpE,wEAAwE;AACxE,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,wEAAwE;AACxE,2EAA2E;AAC3E,0EAA0E;AAC1E,gDAAgD;AAChD,MAAM,WAAW,GAAG,uCAAuC,CAAC;AAE5D,6EAA6E;AAC7E,gFAAgF;AAChF,+CAA+C;AAC/C,MAAM,uBAAuB,GAAG,kDAAkD,CAAC;AAEnF,wEAAwE;AACxE,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,0EAA0E;AAC1E,wEAAwE;AACxE,2EAA2E;AAC3E,uEAAuE;AACvE,2EAA2E;AAC3E,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,8EAA8E;AAC9E,2EAA2E;AAC3E,sEAAsE;AACtE,4EAA4E;AAC5E,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,sEAAsE;AACtE,kEAAkE;AAClE,4EAA4E;AAC5E,2EAA2E;AAC3E,wEAAwE;AACxE,mEAAmE;AACnE,uEAAuE;AACvE,0EAA0E;AAC1E,4EAA4E;AAC5E,yEAAyE;AACzE,gEAAgE;AAChE,MAAM,4BAA4B,GAAG,mBAAmB,CAAC;AAEzD,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,wDAAwD;AACxD,uEAAuE;AACvE,0EAA0E;AAC1E,4EAA4E;AAC5E,yEAAyE;AACzE,2CAA2C;AAC3C,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAEtD,SAAS,cAAc,CAAC,CAAS;IAC/B,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,EAAE,IAAI,CAAC;QAAE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;QAC3B,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,gFAAgF;AAChF,SAAS,cAAc,CAAC,CAAS;IAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,mBAAmB;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,sBAAsB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,sEAAsE;QACtE,6DAA6D;QAC7D,OAAO,KAAK,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,KAAK,CAAC,MAAM,IAAI,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,OAAe;IAC9C,OAAO,CACL,OAAO,CAAC,MAAM,IAAI,eAAe;QACjC,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9B,cAAc,CAAC,OAAO,CAAC,IAAI,gBAAgB;QAC3C,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAC5B,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI;YAAE,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AACrC,CAAC;AAED,kGAAkG;AAClG,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,MAAM,CAAC,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,0EAA0E;AAC1E,uEAAuE;AACvE,0EAA0E;AAC1E,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,yEAAyE;AACzE,sEAAsE;AACtE,4EAA4E;AAC5E,MAAM,cAAc,GAAG,4CAA4C,CAAC;AAmCpE,MAAM,UAAU,eAAe,CAC7B,MAAiB,EACjB,OAA+B,EAAE;IAEjC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;IACrD,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAElE,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;QAChB,KAAK,CAAC,KAAK,CAAC,UAAsB;YAChC,MAAM,GAAG,GAAe,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAsB,EAAE,CAAC;YAEzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;oBACxE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;oBACjB,SAAS;gBACX,CAAC;gBAED,iCAAiC;gBACjC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;oBAC9B,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE;oBAC/E,OAAO,EAAE,EAAE,MAAM,EAAE;iBACpB,CAAC,CAAC;gBACH,IAAI,IAAI,GAAG,KAAK,CAAC;gBACjB,kEAAkE;gBAClE,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5E,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACvB,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;oBAClC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,KAAK,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChF,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC/E,CAAC;gBAED,iEAAiE;gBACjE,oEAAoE;gBACpE,mDAAmD;gBACnD,IAAI,eAAe,EAAE,CAAC;oBACpB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;wBACpC,MAAM,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,GAAG,KAAK,EAAE,KAAK,GAAG,EAAE,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;wBACjF,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC9B,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;4BACtF,OAAO,GAAG,IAAI,wBAAwB,KAAK,EAAE,CAAC;wBAChD,CAAC;wBACD,OAAO,KAAK,CAAC;oBACf,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YAClB,CAAC;YAED,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/trajectory/scrub/transformers-detector.d.ts

@@ -0,0 +1,35 @@
+import type { PiiDetector, PiiEntity } from './ml-pii-stage.js';
+/** Default Transformers.js-compatible ONNX NER model (person/org/location/misc). */
+export declare const DEFAULT_NER_MODEL = "Xenova/bert-base-NER";
+/**
+ * Entity groups treated as PII to redact. Structured PII (emails, cards, SSNs)
+ * is handled upstream by openredaction; this tier catches the free-text
+ * entities regex can't — names, organizations, places. MISC is excluded (noisy).
+ */
+export declare const DEFAULT_PII_ENTITY_GROUPS: string[];
+export interface TransformersPiiDetectorOptions {
+    model?: string;
+    /** Minimum NER confidence to redact (0–1). */
+    threshold?: number;
+    /** Entity groups to treat as PII. */
+    entityGroups?: string[];
+}
+/**
+ * Real ML PII detector — the production implementation of the `PiiDetector`
+ * seam. Wraps a Transformers.js token-classification (NER) pipeline running an
+ * ONNX model entirely in-process (no Python, no separate process). Loaded lazily
+ * (or eagerly via `init()`); the heavy onnxruntime-node dependency is pulled in
+ * only when the detector is actually used.
+ */
+export declare class TransformersPiiDetector implements PiiDetector {
+    private pipe;
+    private initPromise;
+    private readonly model;
+    private readonly threshold;
+    private readonly entityGroups;
+    constructor(opts?: TransformersPiiDetectorOptions);
+    /** Eagerly load the model (e.g. at daemon boot) so the first publish isn't slow. */
+    init(): Promise<void>;
+    private ensureReady;
+    detect(text: string): Promise<PiiEntity[]>;
+}

package/dist/trajectory/scrub/transformers-detector.js

@@ -0,0 +1,68 @@
+/** Default Transformers.js-compatible ONNX NER model (person/org/location/misc). */
+export const DEFAULT_NER_MODEL = 'Xenova/bert-base-NER';
+/**
+ * Entity groups treated as PII to redact. Structured PII (emails, cards, SSNs)
+ * is handled upstream by openredaction; this tier catches the free-text
+ * entities regex can't — names, organizations, places. MISC is excluded (noisy).
+ */
+export const DEFAULT_PII_ENTITY_GROUPS = ['PER', 'ORG', 'LOC'];
+/**
+ * Real ML PII detector — the production implementation of the `PiiDetector`
+ * seam. Wraps a Transformers.js token-classification (NER) pipeline running an
+ * ONNX model entirely in-process (no Python, no separate process). Loaded lazily
+ * (or eagerly via `init()`); the heavy onnxruntime-node dependency is pulled in
+ * only when the detector is actually used.
+ */
+export class TransformersPiiDetector {
+    pipe;
+    initPromise;
+    model;
+    threshold;
+    entityGroups;
+    constructor(opts = {}) {
+        this.model = opts.model ?? DEFAULT_NER_MODEL;
+        this.threshold = opts.threshold ?? 0.6;
+        this.entityGroups = new Set(opts.entityGroups ?? DEFAULT_PII_ENTITY_GROUPS);
+    }
+    /** Eagerly load the model (e.g. at daemon boot) so the first publish isn't slow. */
+    async init() {
+        await this.ensureReady();
+    }
+    ensureReady() {
+        if (this.pipe)
+            return Promise.resolve(this.pipe);
+        if (!this.initPromise) {
+            this.initPromise = (async () => {
+                const { pipeline } = await import('@huggingface/transformers');
+                const pipe = (await pipeline('token-classification', this.model));
+                this.pipe = pipe;
+                return pipe;
+            })();
+        }
+        return this.initPromise;
+    }
+    async detect(text) {
+        if (!text.trim())
+            return [];
+        const pipe = await this.ensureReady();
+        const results = await pipe(text, { aggregation_strategy: 'simple' });
+        const out = [];
+        const seen = new Set();
+        for (const r of results) {
+            if (r.score < this.threshold)
+                continue;
+            if (!this.entityGroups.has(r.entity_group))
+                continue;
+            const t = r.word.trim();
+            if (!t)
+                continue;
+            const key = `${r.entity_group}:${t}`;
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            out.push({ label: r.entity_group, text: t });
+        }
+        return out;
+    }
+}
+//# sourceMappingURL=transformers-detector.js.map

package/dist/trajectory/scrub/transformers-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transformers-detector.js","sourceRoot":"","sources":["../../../src/trajectory/scrub/transformers-detector.ts"],"names":[],"mappings":"AAEA,oFAAoF;AACpF,MAAM,CAAC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AAExD;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAe/D;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IAC1B,IAAI,CAA0B;IAC9B,WAAW,CAAmC;IACrC,KAAK,CAAS;IACd,SAAS,CAAS;IAClB,YAAY,CAAc;IAE3C,YAAY,OAAuC,EAAE;QACnD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,iBAAiB,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,yBAAyB,CAAC,CAAC;IAC9E,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC;IAEO,WAAW;QACjB,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC7B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;gBAC/D,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,sBAAsB,EAAE,IAAI,CAAC,KAAK,CAAC,CAA2B,CAAC;gBAC5F,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,MAAM,GAAG,GAAgB,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS;gBAAE,SAAS;YACvC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;gBAAE,SAAS;YACrD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/trajectory/scrub/types.d.ts

@@ -0,0 +1,25 @@
+export type Attributes = Record<string, unknown>;
+export interface RedactionRecord {
+    /** attribute key affected */
+    key: string;
+    /** stage that made the redaction (matches ScrubStage.name) */
+    stage: string;
+    /** category, e.g. 'dropped-key' | 'secret' | 'pii' */
+    kind: string;
+    /** optional detail, e.g. a rule id or entity type */
+    detail?: string;
+}
+export interface ScrubResult {
+    attributes: Attributes;
+    redactions: RedactionRecord[];
+}
+/**
+ * A single stage in the seller-side scrub pipeline. `name` + `version` are
+ * recorded in the signed provenance manifest so a buyer/auditor can see exactly
+ * which components (and versions) produced a published trajectory.
+ */
+export interface ScrubStage {
+    readonly name: string;
+    readonly version: string;
+    scrub(attributes: Attributes): ScrubResult | Promise<ScrubResult>;
+}

package/dist/trajectory/scrub/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/trajectory/scrub/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/trajectory/scrub/types.ts"],"names":[],"mappings":""}

package/dist/trajectory/transcript-parsers/types.d.ts

@@ -1,4 +1,4 @@
-import { z } from 'zod';
+import { z } from 'zod/v3';
 export declare const TranscriptEventSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
     kind: z.ZodLiteral<"user-message">;
     timestamp: z.ZodString;

package/dist/trajectory/transcript-parsers/types.js

@@ -1,4 +1,4 @@
-import { z } from 'zod';
+import { z } from 'zod/v3';
 export const TranscriptEventSchema = z.discriminatedUnion('kind', [
     z.object({
         kind: z.literal('user-message'),

package/dist/trajectory/transcript-parsers/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/trajectory/transcript-parsers/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAChE,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;CACH,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/trajectory/transcript-parsers/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAChE,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;CACH,CAAC,CAAC"}

package/dist/trajectory/transcript-watcher.d.ts

@@ -74,8 +74,34 @@ export interface TranscriptWatcherConfig {
     /** Standard session directories (Codex, Claude Code, …). */
     directories?: WatchedDirectory[];
     onEvent: (envelope: DispatchEnvelope) => void;
+    /**
+     * #1422: skip `directories`-mode session files whose mtime is older than
+     * this many ms — dormant sessions are done growing and don't need a live
+     * OS-level watch handle. On an operator machine with a large accumulated
+     * history under `~/.claude/projects` / `~/.codex/sessions`, watching every
+     * historical file unbounded creates tens of thousands of native FSWatcher
+     * handles, starving the daemon's event loop (confirmed live: 15k+ handles,
+     * multiple daemon loops wedged for 70+ minutes; closing the handles
+     * in-process immediately unwedged them). Explicit `sources` are always
+     * watched regardless — they're operator-supplied, not bulk-enumerated.
+     * Default 7 days. `jinn capture import` remains the one-shot path for
+     * ingesting older history.
+     */
+    maxDirectoryFileAgeMs?: number;
 }
 export interface TranscriptWatcher {
     shutdown(): Promise<void>;
 }
+/**
+ * #1422: whether a `directories`-mode file is recent enough to warrant an
+ * active watch (pre-registration + chokidar's native handle). `stats` is
+ * `undefined` on chokidar's path-only pre-check (before it has stat'd the
+ * candidate) — always allow through at that stage; it re-checks with stats
+ * once available. Directories are always kept so recursion can still
+ * discover freshly-active sessions underneath an old-looking parent.
+ */
+export declare function shouldWatchDirectoryFile(filePath: string, stats: {
+    isDirectory(): boolean;
+    mtimeMs: number;
+} | undefined, maxAgeMs: number): boolean;
 export declare function startTranscriptWatcher(cfg: TranscriptWatcherConfig): Promise<TranscriptWatcher>;

package/dist/trajectory/transcript-watcher.js

@@ -51,6 +51,7 @@ import { GeminiSessionParser } from './transcript-parsers/gemini-session.js';
 import { AiderHistoryParser } from './transcript-parsers/aider-history.js';
 import { ContinueDevDataParser } from './transcript-parsers/continue-devdata.js';
 import { listSessionJsonlFiles } from './transcript-session-dirs.js';
+const DEFAULT_MAX_DIRECTORY_FILE_AGE_MS = 7 * 24 * 60 * 60 * 1000;
 function makeParser(tool) {
     switch (tool) {
         case 'claude-code':
@@ -84,6 +85,23 @@ async function tailOffsetForPath(filePath) {
 function isJsonlSessionFile(filePath) {
     return filePath.endsWith('.jsonl');
 }
+/**
+ * #1422: whether a `directories`-mode file is recent enough to warrant an
+ * active watch (pre-registration + chokidar's native handle). `stats` is
+ * `undefined` on chokidar's path-only pre-check (before it has stat'd the
+ * candidate) — always allow through at that stage; it re-checks with stats
+ * once available. Directories are always kept so recursion can still
+ * discover freshly-active sessions underneath an old-looking parent.
+ */
+export function shouldWatchDirectoryFile(filePath, stats, maxAgeMs) {
+    if (!stats)
+        return true;
+    if (stats.isDirectory())
+        return true;
+    if (!isJsonlSessionFile(filePath))
+        return false;
+    return Date.now() - stats.mtimeMs <= maxAgeMs;
+}
 export async function startTranscriptWatcher(cfg) {
     const sources = cfg.sources ?? [];
     const directories = cfg.directories ?? [];
@@ -92,6 +110,7 @@ export async function startTranscriptWatcher(cfg) {
     }
     const states = new Map();
     const directoryParsers = new Map();
+    const maxDirectoryFileAgeMs = cfg.maxDirectoryFileAgeMs ?? DEFAULT_MAX_DIRECTORY_FILE_AGE_MS;
     const registerSource = async (source, opts) => {
         const normalizedPath = resolvePath(source.path);
         const nextOffset = opts.tailFromEnd ? await tailOffsetForPath(normalizedPath) : 0;
@@ -111,6 +130,9 @@ export async function startTranscriptWatcher(cfg) {
         directoryParsers.set(dir.tool, parser);
         const files = await listSessionJsonlFiles(dir.directory, dir.recursive === true);
         for (const filePath of files) {
+            const stats = await fs.stat(filePath).catch(() => undefined);
+            if (!shouldWatchDirectoryFile(filePath, stats, maxDirectoryFileAgeMs))
+                continue;
             await registerSource({
                 tool: dir.tool,
                 path: filePath,
@@ -123,10 +145,21 @@ export async function startTranscriptWatcher(cfg) {
         ...sources.map((s) => s.path),
         ...directories.map((d) => d.directory),
     ];
+    // #1422: explicit `sources` are operator-supplied and always watched
+    // regardless of extension/age; only `directories`-mode bulk enumeration is
+    // bounded (see maxDirectoryFileAgeMs above — this is the other half of the
+    // same fix, applied where it actually matters: chokidar's own native watch
+    // handles, not just this module's pre-registration).
+    const explicitSourcePaths = new Set(sources.map((s) => resolvePath(s.path)));
     const watcher = chokidar.watch(watchPaths, {
         persistent: true,
         awaitWriteFinish: { stabilityThreshold: 50, pollInterval: 25 },
         ignoreInitial: true,
+        ignored: (candidatePath, stats) => {
+            if (explicitSourcePaths.has(resolvePath(candidatePath)))
+                return false;
+            return !shouldWatchDirectoryFile(candidatePath, stats, maxDirectoryFileAgeMs);
+        },
     });
     const resolveDirectoryForPath = (filepath) => {
         const normalized = resolvePath(filepath);

package/dist/trajectory/transcript-watcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"transcript-watcher.js","sourceRoot":"","sources":["../../src/trajectory/transcript-watcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,QAA4B,MAAM,UAAU,CAAC;AAEpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAkDrE,SAAS,UAAU,CAAC,IAAiB;IACnC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,aAAa;YAChB,OAAO,IAAI,qBAAqB,EAAE,CAAC;QACrC,KAAK,OAAO;YACV,OAAO,IAAI,kBAAkB,EAAE,CAAC;QAClC,KAAK,YAAY;YACf,OAAO,IAAI,mBAAmB,EAAE,CAAC;QACnC,KAAK,OAAO;YACV,OAAO,IAAI,kBAAkB,EAAE,CAAC;QAClC,KAAK,UAAU;YACb,OAAO,IAAI,qBAAqB,EAAE,CAAC;QACrC,KAAK,QAAQ;YACX,MAAM,IAAI,KAAK,CACb,6EAA6E;gBAC3E,+DAA+D,CAClE,CAAC;QACJ,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,IAAI,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;AACH,CAAC;AAWD,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IAC/C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAA4B;IAE5B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAClC,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAiC,CAAC;IAElE,MAAM,cAAc,GAAG,KAAK,EAC1B,MAAqB,EACrB,IAAyD,EAC1C,EAAE;QACjB,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE;YACzB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE;YAC3C,MAAM;YACN,UAAU;YACV,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;QACjF,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,MAAM,cAAc,CAClB;gBACE,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC;aAC3C,EACD,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,MAAM,UAAU,GAAG;QACjB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7B,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;KACvC,CAAC;IAEF,MAAM,OAAO,GAAc,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE;QACpD,UAAU,EAAE,IAAI;QAChB,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QAC9D,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC;IAEH,MAAM,uBAAuB,GAAG,CAAC,QAAgB,EAAgC,EAAE;QACjF,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACzC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;YACtD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzD,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,QAAgB,EAAoC,EAAE;QACtF,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,MAAM,GAAG,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;YAAE,OAAO,SAAS,CAAC;QAE9D,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtE,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAkB;YAC5B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC;SAC7C,CAAC;QACF,MAAM,KAAK,GAAgB;YACzB,MAAM;YACN,MAAM;YACN,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE;SAC5B,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAQ,EAAE;QACzC,IAAI,YAAY;YAAE,OAAO;QACzB,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACzC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAC7E,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE9B,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,6EAA6E;IAC7E,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE7B,KAAK,UAAU,YAAY,CAAC,KAAkB;QAC5C,IAAI,YAAY;YAAE,OAAO;QACzB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,IAAI,IAAI,KAAK,CAAC,UAAU;YAAE,OAAO;QAErC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC;YACvC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACvE,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;YAExB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;gBACrC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;gBACjC,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,IAAI,YAAY;gBAAE,OAAO;YACzB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,GAAG,CAAC,OAAO,CAAC;oBACV,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;oBACvB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;oBACjC,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,QAAQ;YACZ,YAAY,GAAG,IAAI,CAAC;YACpB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,OAAO,CAAC,UAAU,CACtB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CACvD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"transcript-watcher.js","sourceRoot":"","sources":["../../src/trajectory/transcript-watcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,QAA4B,MAAM,UAAU,CAAC;AAEpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AA4DrE,MAAM,iCAAiC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAMlE,SAAS,UAAU,CAAC,IAAiB;IACnC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,aAAa;YAChB,OAAO,IAAI,qBAAqB,EAAE,CAAC;QACrC,KAAK,OAAO;YACV,OAAO,IAAI,kBAAkB,EAAE,CAAC;QAClC,KAAK,YAAY;YACf,OAAO,IAAI,mBAAmB,EAAE,CAAC;QACnC,KAAK,OAAO;YACV,OAAO,IAAI,kBAAkB,EAAE,CAAC;QAClC,KAAK,UAAU;YACb,OAAO,IAAI,qBAAqB,EAAE,CAAC;QACrC,KAAK,QAAQ;YACX,MAAM,IAAI,KAAK,CACb,6EAA6E;gBAC3E,+DAA+D,CAClE,CAAC;QACJ,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,IAAI,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;AACH,CAAC;AAWD,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IAC/C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,KAA8D,EAC9D,QAAgB;IAEhB,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAA4B;IAE5B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAClC,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAiC,CAAC;IAClE,MAAM,qBAAqB,GACzB,GAAG,CAAC,qBAAqB,IAAI,iCAAiC,CAAC;IAEjE,MAAM,cAAc,GAAG,KAAK,EAC1B,MAAqB,EACrB,IAAyD,EAC1C,EAAE;QACjB,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE;YACzB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE;YAC3C,MAAM;YACN,UAAU;YACV,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;QACjF,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,KAAK,EAAE,qBAAqB,CAAC;gBAAE,SAAS;YAChF,MAAM,cAAc,CAClB;gBACE,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC;aAC3C,EACD,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,MAAM,UAAU,GAAG;QACjB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7B,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;KACvC,CAAC;IAEF,qEAAqE;IACrE,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,qDAAqD;IACrD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE7E,MAAM,OAAO,GAAc,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE;QACpD,UAAU,EAAE,IAAI;QAChB,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QAC9D,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE;YAChC,IAAI,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YACtE,OAAO,CAAC,wBAAwB,CAAC,aAAa,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAC;QAChF,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,uBAAuB,GAAG,CAAC,QAAgB,EAAgC,EAAE;QACjF,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACzC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;YACtD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzD,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,QAAgB,EAAoC,EAAE;QACtF,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,MAAM,GAAG,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;YAAE,OAAO,SAAS,CAAC;QAE9D,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtE,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAkB;YAC5B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC;SAC7C,CAAC;QACF,MAAM,KAAK,GAAgB;YACzB,MAAM;YACN,MAAM;YACN,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE;SAC5B,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAQ,EAAE;QACzC,IAAI,YAAY;YAAE,OAAO;QACzB,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACzC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAC7E,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE9B,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,6EAA6E;IAC7E,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE7B,KAAK,UAAU,YAAY,CAAC,KAAkB;QAC5C,IAAI,YAAY;YAAE,OAAO;QACzB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,IAAI,IAAI,KAAK,CAAC,UAAU;YAAE,OAAO;QAErC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC;YACvC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACvE,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;YAExB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;gBACrC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;gBACjC,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,IAAI,YAAY;gBAAE,OAAO;YACzB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,GAAG,CAAC,OAAO,CAAC;oBACV,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;oBACvB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;oBACjC,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,QAAQ;YACZ,YAAY,GAAG,IAAI,CAAC;YACpB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,OAAO,CAAC,UAAU,CACtB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CACvD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tx-retry.d.ts

@@ -27,6 +27,18 @@ export declare function isRecoverableTransactionError(error: unknown): boolean;
  * to refresh the pinned nonce before the next retry attempt.
  */
 export declare function isNonceTooLowError(error: unknown): boolean;
+/**
+ * True when the RPC rejected an `eth_sendRawTransaction` because a tx already
+ * occupies the target nonce and the resubmission's fee bump was insufficient to
+ * replace it ("replacement underpriced"). Distinct from `nonce too low`: the
+ * original tx is still PENDING at this nonce, not yet mined.
+ *
+ * Issue #897: the Safe execTransaction retry uses this to refresh the pinned
+ * nonce before the next fee bump and to trigger a reconcile against the
+ * pending original tx (it may mine mid-retry). The substrings mirror the
+ * replacement branch of `isRecoverableTransactionError`.
+ */
+export declare function isReplacementUnderpricedError(error: unknown): boolean;
 export declare function sleep(ms: number): Promise<void>;
 export declare function backoffDelay(attemptIndex: number, baseMs: number, maxMs: number): Promise<void>;
 export interface TxRetryOptions {