@jmanuelcorral/openteam 0.2.2 → 0.9.1

package/dist/telemetry/otel.d.ts

@@ -0,0 +1,86 @@
+import type { EventSink } from "./eventLog";
+import type { OpenTeamEvent } from "./events";
+/**
+ * OpenTelemetry sink layer for openteam telemetry (W1-S02/S03/S05, see #161,
+ * #162, #164).
+ *
+ * The exporter is an **injected port**: this module never imports the concrete
+ * `@opentelemetry/*` SDK and never touches the network, so the privacy and
+ * resilience guarantees are provable with deterministic fakes. The real OTLP
+ * transport lives behind the same port in `./otelExporter.ts`.
+ *
+ * Privacy is enforced **by construction**, not by convention: every event is
+ * projected to a bounded, reference-only record and both the incoming event and
+ * the projected record are run through `assertReferenceOnly` before anything is
+ * handed to the exporter. A raw prompt/content field can therefore never reach
+ * an OpenTelemetry span or attribute.
+ */
+/**
+ * A reference-only span record handed to the OpenTelemetry exporter. Attributes
+ * are primitives only; by construction the record never carries raw prompt or
+ * content text — only already-redacted correlation metadata.
+ */
+export type OtelSpanRecord = {
+    readonly name: string;
+    readonly attributes: Readonly<Record<string, string | number | boolean>>;
+};
+/**
+ * Injected transport port. The real implementation (`./otelExporter.ts`) adapts
+ * an OTLP/HTTP trace exporter; tests inject a recording or failing fake. `export`
+ * may be sync or async and may reject — the sink isolates every failure.
+ */
+export type OtelSpanExporter = {
+    export: (record: OtelSpanRecord) => Promise<void> | void;
+};
+/**
+ * Injected deadline used to bound `emit` even when the exporter never settles.
+ * `sleep` must be an injected timer (no real `setTimeout` in the pure path) so
+ * the resilience contract is deterministic.
+ */
+export type OtelDeadline = {
+    readonly ms: number;
+    readonly sleep: (ms: number) => Promise<void>;
+};
+/**
+ * Privacy decision applied to a projection. Under `forceLocalOnSensitive`, a
+ * node classified `sensitive` is reduced to the minimal reference-only record
+ * (correlation id and counts only) so the cloud sink learns nothing about the
+ * sensitive work beyond that it happened — never content, model, or cost detail.
+ */
+export type PrivacyProjection = {
+    readonly mode: string;
+    readonly nodeClass: "sensitive" | "normal";
+};
+/**
+ * Pure, bounded projection of an `OpenTeamEvent` into a span record. Copies only
+ * safe, already-redacted fields — never `rationale`, error text, or any content
+ * field. `failureReason` is already a bounded classification code by the time an
+ * event is produced (see `classifyFailureForTelemetry` in the coordinator), so
+ * carrying it is reference-only.
+ *
+ * When `privacy` marks the node sensitive under `forceLocalOnSensitive`, the
+ * projection collapses to the minimal reference-only record.
+ */
+export declare function projectEventToOtel(event: OpenTeamEvent, privacy?: PrivacyProjection): OtelSpanRecord;
+/** Dependencies of the OpenTelemetry event sink. */
+export type OtelSinkDeps = {
+    /** Injected transport port. */
+    readonly exporter: OtelSpanExporter;
+    /** Telemetry error handler; the sink never throws out of `emit`. */
+    readonly onError?: (error: unknown) => void;
+    /** Optional deadline so a hanging exporter cannot stall the emit path. */
+    readonly deadline?: OtelDeadline;
+    /** Projection override (defaults to `projectEventToOtel`). */
+    readonly project?: (event: OpenTeamEvent) => OtelSpanRecord;
+};
+/**
+ * Creates an `EventSink` that exports events through the injected OTLP port.
+ *
+ * Contract (`EventSink.emit` never throws): the incoming event and the projected
+ * record are both guarded by `assertReferenceOnly`; a raw content field throws
+ * *before* the exporter is touched, so nothing leaks. Exporter rejections and
+ * timeouts are caught and routed to `onError`. With a `deadline`, `emit` resolves
+ * within the budget even if the exporter never settles.
+ */
+export declare function createOtelSink(deps: OtelSinkDeps): EventSink;
+//# sourceMappingURL=otel.d.ts.map

package/dist/telemetry/otel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel.d.ts","sourceRoot":"","sources":["../../src/telemetry/otel.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE9C;;;;;;;;;;;;;;GAcG;AAEH;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAC1E,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC1D,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,WAAW,GAAG,QAAQ,CAAC;CAC5C,CAAC;AAYF;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,aAAa,EACpB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,cAAc,CA8BhB;AAED,oDAAoD;AACpD,MAAM,MAAM,YAAY,GAAG;IACzB,+BAA+B;IAC/B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,oEAAoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAC5C,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACjC,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,cAAc,CAAC;CAC7D,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,GAAG,SAAS,CA2B5D"}

package/dist/telemetry/otelConfig.d.ts

@@ -0,0 +1,128 @@
+import { z } from "zod";
+import { type EventLogSinkDeps, type EventSink } from "./eventLog";
+import { type OtelDeadline, type OtelSpanExporter } from "./otel";
+/**
+ * Telemetry backend resolution and sink composition (W1-S01/S02/S05, see #160,
+ * #161, #164).
+ *
+ * `createTelemetryEventSink` is the single construction point of the fan-out
+ * sink: it composes the local JSONL event log with an optional OpenTelemetry
+ * sink resolved from configuration. The connection-string **secret** is never a
+ * config field — configuration only names the *env var* that holds it, and the
+ * value is read through an injected `EnvReader` (no real `process.env` in the
+ * pure path). This keeps `.opencode/opencode.json` free of credentials (P8 (b)).
+ */
+/** Injected environment-variable reader (never real `process.env` in tests). */
+export type EnvReader = (name: string) => string | undefined;
+/**
+ * OpenTelemetry backend configuration block. Names the env var that provides the
+ * Application Insights connection string; it deliberately carries **no** secret.
+ *
+ * The field is `connectionEnv` (the env var *name*), never `connectionString`:
+ * a field whose name matched the secret vocabulary would trip the config-secret
+ * guard (`tests/contract/portability-boundary.test.ts`).
+ */
+export declare const OtelBackendConfigSchema: z.ZodObject<{
+    backend: z.ZodLiteral<"opentelemetry">;
+    connectionEnv: z.ZodString;
+    serviceName: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type OtelBackendConfig = z.infer<typeof OtelBackendConfigSchema>;
+/** A parsed Application Insights connection string (key/value, `;`-separated). */
+export type ParsedConnectionString = {
+    readonly instrumentationKey: string;
+    readonly ingestionEndpoint?: string;
+};
+/**
+ * Parses an Application Insights connection string. Returns `null` when it is
+ * malformed (no `InstrumentationKey`), which callers treat as a disable-with-
+ * warning condition rather than a hard failure.
+ */
+export declare function parseConnectionString(raw: string): ParsedConnectionString | null;
+/**
+ * Redacts a connection string for human-facing output (e.g. `openteam doctor`).
+ * The raw string never appears: the instrumentation key is masked and only the
+ * non-secret ingestion host is echoed when present.
+ */
+export declare function redactConnectionString(raw: string): string;
+/** Builds a concrete transport port from a parsed connection string. */
+export type ExporterFactory = (connection: ParsedConnectionString, config: OtelBackendConfig) => OtelSpanExporter;
+/** Dependencies for resolving an OpenTelemetry sink from configuration. */
+export type OtelResolutionDeps = {
+    /** Injected env reader that provides the connection string value. */
+    readonly env: EnvReader;
+    /** Injected factory building the concrete OTLP transport port. */
+    readonly buildExporter: ExporterFactory;
+    /** Telemetry error handler passed to the OTel sink. */
+    readonly onError?: (error: unknown) => void;
+    /** Warning handler for misconfiguration (invalid/absent connection string). */
+    readonly onWarn?: (message: string) => void;
+    /** Optional deadline so a hanging exporter cannot stall emit. */
+    readonly deadline?: OtelDeadline;
+};
+/** Outcome of resolving the OpenTelemetry backend. */
+export type OtelResolution = {
+    /** The OpenTelemetry sink, or `undefined` to fall back to JSONL-only. */
+    readonly sink?: EventSink;
+    /** Whether the env var actually provided a value. */
+    readonly connectionStringPresent: boolean;
+    /** A single warning when the backend is disabled by misconfiguration. */
+    readonly warning?: string;
+};
+/**
+ * Resolves an OpenTelemetry sink from an (already-parsed) backend config plus an
+ * injected env reader. Falls back to JSONL-only (no sink) when the env var is
+ * absent, and disables with a single warning when the connection string is
+ * malformed — never aborting startup.
+ */
+export declare function resolveOtelSink(config: OtelBackendConfig | undefined, deps: OtelResolutionDeps): OtelResolution;
+/**
+ * Human-facing OpenTelemetry backend view for `openteam doctor` (W1-S04, see
+ * #163). Carries only **redacted** detail: the raw connection string never
+ * enters this structure, so it cannot leak through doctor output or any JSON
+ * serialization of the doctor input.
+ */
+export type OtelDoctorView = {
+    readonly configured: boolean;
+    /** Env var name that provides the connection string (safe to show). */
+    readonly connectionEnv: string;
+    readonly status: "active" | "unconfigured" | "invalid";
+    /** Redacted, human-facing connection detail. Never the raw string. */
+    readonly redacted?: string;
+};
+/**
+ * Builds the redacted doctor view for the OpenTelemetry backend. The connection
+ * string is read through the injected env reader and passed through
+ * `redactConnectionString`; the raw value is never returned.
+ */
+export declare function describeOtelBackendForDoctor(config: OtelBackendConfig | undefined, env: EnvReader): OtelDoctorView | undefined;
+/** Options controlling telemetry sink composition. */
+export type TelemetrySinkOptions = {
+    /** Master switch: when false, telemetry is the null sink. */
+    readonly enabled: boolean;
+    /** Optional OpenTelemetry backend block (already validated). */
+    readonly otel?: OtelBackendConfig;
+};
+/** Dependencies for composing the telemetry sink. */
+export type TelemetrySinkDeps = {
+    /** JSONL event-log sink dependencies. */
+    readonly eventLog: EventLogSinkDeps;
+    /** OpenTelemetry resolution dependencies. */
+    readonly otel: OtelResolutionDeps;
+};
+/** Result of composing the telemetry sink, exposing the resolution detail. */
+export type TelemetrySinkResult = {
+    readonly sink: EventSink;
+    readonly resolution: OtelResolution;
+};
+/**
+ * Single construction point for the telemetry event sink. Returns:
+ * - the null sink when telemetry is disabled;
+ * - the JSONL sink alone when no OpenTelemetry backend resolves;
+ * - a fan-out of JSONL + OpenTelemetry when a backend resolves.
+ *
+ * This is the function `createEventSink` (`src/index.ts`) delegates to, so the
+ * fan-out has exactly one construction site.
+ */
+export declare function createTelemetryEventSink(options: TelemetrySinkOptions, deps: TelemetrySinkDeps): TelemetrySinkResult;
+//# sourceMappingURL=otelConfig.d.ts.map

package/dist/telemetry/otelConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otelConfig.d.ts","sourceRoot":"","sources":["../../src/telemetry/otelConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACtB,MAAM,QAAQ,CAAC;AAEhB;;;;;;;;;;GAUG;AAEH,gFAAgF;AAChF,MAAM,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;AAE7D;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;;kBAQzB,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,kFAAkF;AAClF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,GACV,sBAAsB,GAAG,IAAI,CAwB/B;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAc1D;AAED,wEAAwE;AACxE,MAAM,MAAM,eAAe,GAAG,CAC5B,UAAU,EAAE,sBAAsB,EAClC,MAAM,EAAE,iBAAiB,KACtB,gBAAgB,CAAC;AAEtB,2EAA2E;AAC3E,MAAM,MAAM,kBAAkB,GAAG;IAC/B,qEAAqE;IACrE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAC5C,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;CAClC,CAAC;AAEF,sDAAsD;AACtD,MAAM,MAAM,cAAc,GAAG;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,iBAAiB,GAAG,SAAS,EACrC,IAAI,EAAE,kBAAkB,GACvB,cAAc,CAwBhB;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,cAAc,GAAG,SAAS,CAAC;IACvD,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,iBAAiB,GAAG,SAAS,EACrC,GAAG,EAAE,SAAS,GACb,cAAc,GAAG,SAAS,CA0B5B;AAED,sDAAsD;AACtD,MAAM,MAAM,oBAAoB,GAAG;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC;CACnC,CAAC;AAEF,qDAAqD;AACrD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,yCAAyC;IACzC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;CACnC,CAAC;AAEF,8EAA8E;AAC9E,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;CACrC,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,oBAAoB,EAC7B,IAAI,EAAE,iBAAiB,GACtB,mBAAmB,CAmBrB"}

package/dist/telemetry/otelExporter.d.ts

@@ -0,0 +1,7 @@
+import type { ExporterFactory } from "./otelConfig";
+/**
+ * `ExporterFactory` that builds a real OTLP/HTTP trace exporter port. The heavy
+ * SDK import is deferred to the first `export` call and memoized thereafter.
+ */
+export declare const createOtlpSpanExporter: ExporterFactory;
+//# sourceMappingURL=otelExporter.d.ts.map

package/dist/telemetry/otelExporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otelExporter.d.ts","sourceRoot":"","sources":["../../src/telemetry/otelExporter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,eAAe,EAGhB,MAAM,cAAc,CAAC;AA0DtB;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,eAcpC,CAAC"}

package/dist/telemetry/read.d.ts

@@ -1,11 +1,25 @@
 import type { StorageProvider } from "../storage/provider";
 import { type CostRecord } from "./types";
-export declare const DEFAULT_TELEMETRY_PATH = ".opencode/openteam-telemetry.jsonl";
+/** Machine-local cost telemetry file (P15b): lives under the git-ignored
+ * `.opencode/openteam-local/` directory so it never enters the portable repo. */
+export declare const DEFAULT_TELEMETRY_PATH = ".opencode/openteam-local/telemetry.jsonl";
+/** Rejection detail for a single telemetry JSONL line. */
+export type TelemetryJsonlLineRejection = {
+    readonly lineNumber: number;
+    readonly detail: string;
+};
+/** Result of parsing legacy cost telemetry JSONL. */
+export type ParseCostRecordsJsonlResult = {
+    readonly records: CostRecord[];
+    readonly rejectedLines: number;
+    readonly rejections: readonly TelemetryJsonlLineRejection[];
+};
 /**
  * Parse newline-delimited JSON cost records.
- * Pure: silently skips blank lines and lines that fail schema validation,
- * so a partially corrupted telemetry file never throws.
+ * Pure: skips blank lines, counts malformed or schema-invalid nonblank lines,
+ * and never throws for bad records so callers can warn without breaking runtime.
  */
-export declare function parseCostRecordsJsonl(text: string): CostRecord[];
+export declare function parseCostRecordsJsonl(text: string): ParseCostRecordsJsonlResult;
+export declare function warnCostRecordRejections(result: ParseCostRecordsJsonlResult, source: string): void;
 export declare function readCostRecords(path: string, storage?: StorageProvider): Promise<CostRecord[]>;
 //# sourceMappingURL=read.d.ts.map

package/dist/telemetry/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../src/telemetry/read.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,KAAK,UAAU,EAAoB,MAAM,SAAS,CAAC;AAE5D,eAAO,MAAM,sBAAsB,uCAAuC,CAAC;AAE3E;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,CAuBhE;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,eAAwD,GAChE,OAAO,CAAC,UAAU,EAAE,CAAC,CAGvB"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../src/telemetry/read.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,KAAK,UAAU,EAAoB,MAAM,SAAS,CAAC;AAE5D;iFACiF;AACjF,eAAO,MAAM,sBAAsB,6CACS,CAAC;AAE7C,0DAA0D;AAC1D,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,qDAAqD;AACrD,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,2BAA2B,EAAE,CAAC;CAC7D,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,GACX,2BAA2B,CAiC7B;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,2BAA2B,EACnC,MAAM,EAAE,MAAM,GACb,IAAI,CAaN;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,eAAwD,GAChE,OAAO,CAAC,UAAU,EAAE,CAAC,CAQvB"}

package/dist/telemetry/types.d.ts

@@ -11,13 +11,14 @@ export declare const CostRecordSchema: z.ZodObject<{
         trivial: "trivial";
     }>;
     routeKind: z.ZodEnum<{
+        blocked: "blocked";
         frontier: "frontier";
         local: "local";
     }>;
     selected: z.ZodObject<{
         providerID: z.ZodString;
         modelID: z.ZodString;
-    }, z.core.$strip>;
+    }, z.core.$strict>;
     rationale: z.ZodString;
     estimatedCostUSD: z.ZodNumber;
     baselineCostUSD: z.ZodNumber;
@@ -25,6 +26,6 @@ export declare const CostRecordSchema: z.ZodObject<{
     budgetAction: z.ZodString;
     tokensIn: z.ZodOptional<z.ZodNumber>;
     tokensOut: z.ZodOptional<z.ZodNumber>;
-}, z.core.$strip>;
+}, z.core.$strict>;
 export type CostRecord = z.infer<typeof CostRecordSchema>;
 //# sourceMappingURL=types.d.ts.map

package/dist/telemetry/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/telemetry/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAe3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/telemetry/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiBlB,CAAC;AAEZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/web/configApi.d.ts

@@ -0,0 +1,154 @@
+import { type OpenTeamConfig } from "../config/schema";
+import type { StorageProvider } from "../storage/provider";
+/**
+ * Machine-specific key paths. Edits to these are routed to the ignored local
+ * overlay instead of the committed base, so saving in the console never pushes a
+ * value that would be wrong on a teammate's machine (P16, #197). `local.runtimes`
+ * is listed as the whole array because arrays replace wholesale on merge — the
+ * documented caveat is that overriding one runtime's `baseURL` restates the
+ * entire array.
+ */
+export declare const MACHINE_SPECIFIC_KEYS: readonly ["local.runtimes", "console.host", "console.port"];
+/**
+ * Keys the console process can serve fresh through a config getter WITHOUT a
+ * restart (P14 hybrid, hot half). Deliberately conservative: only
+ * `console.refreshMs` is read per-request by the renderer, so it is the one key
+ * the console genuinely applies live. Every other key is consumed by the
+ * opencode plugin session, which froze config at load and therefore needs a
+ * restart — reporting them as live would be the exact silent no-op the P14
+ * decision forbids.
+ */
+export declare const HOT_RELOADABLE_KEYS: readonly ["console.refreshMs"];
+/**
+ * Env-sourced secret descriptors (P8b). The value is NEVER read into any
+ * response — only its presence is reported, marked "set via environment".
+ */
+export declare const KNOWN_ENV_SECRETS: readonly [{
+    readonly key: "telemetry.connectionString";
+    readonly envVar: "APPLICATIONINSIGHTS_CONNECTION_STRING";
+    readonly label: "Application Insights connection string";
+}];
+export declare const SET_VIA_ENVIRONMENT: "set via environment";
+export declare function isMachineSpecificPath(path: string): boolean;
+export declare function isHotReloadablePath(path: string): boolean;
+/**
+ * Collect changed leaf paths comparing `next` against `prev`. Objects recurse;
+ * arrays and scalars are compared as a whole (the path stops at the array key),
+ * matching the merge semantics where arrays replace wholesale.
+ */
+export declare function diffConfigLeaves(prev: unknown, next: unknown, base?: string): string[];
+/** One audited config-write entry: the path plus a content-free descriptor. */
+export type ConfigAuditEntry = {
+    readonly path: string;
+    readonly valueHash?: string;
+    readonly chars?: number;
+    readonly value?: number | boolean | null;
+};
+export type ConfigAuditRecord = {
+    readonly ts: string;
+    readonly kind: "config.write";
+    readonly changed: readonly string[];
+    readonly entries: readonly ConfigAuditEntry[];
+    readonly wroteBase: boolean;
+    readonly wroteOverlay: boolean;
+};
+/**
+ * Describe a changed value for the audit trail WITHOUT leaking its content.
+ * Strings and structured values are stored as a hash plus character count;
+ * only non-string scalars (numbers, booleans, null) are recorded verbatim,
+ * because they can never carry a prompt body. This mirrors telemetry's stance:
+ * hash, never raw.
+ */
+export declare function auditValue(value: unknown): Omit<ConfigAuditEntry, "path">;
+/**
+ * Defensive scrub: replace any string that carries a known env-secret value with
+ * a redaction marker. The committed schema is already secret-free, so this never
+ * fires on a real config; it is belt-and-suspenders that guarantees a secret can
+ * never round-trip through the read endpoint even if one ever leaked into config.
+ */
+export declare function scrubSecretStrings(value: unknown, secrets: readonly string[]): unknown;
+export type ConfigSecretDescriptor = {
+    readonly key: string;
+    readonly source: typeof SET_VIA_ENVIRONMENT;
+    readonly set: boolean;
+};
+export type ConfigReadResult = {
+    readonly config: OpenTeamConfig;
+    readonly reload: {
+        readonly hotReloadable: readonly string[];
+        readonly restartRequired: readonly string[];
+    };
+    readonly overlay: {
+        readonly active: boolean;
+        readonly machineSpecificKeys: readonly string[];
+    };
+    readonly secrets: readonly ConfigSecretDescriptor[];
+};
+export type ConfigWriteResult = {
+    readonly status: 200;
+    readonly body: {
+        readonly ok: true;
+        readonly changed: readonly string[];
+        readonly applied: readonly string[];
+        readonly pendingRestart: readonly string[];
+        readonly wroteBase: boolean;
+        readonly wroteOverlay: boolean;
+    };
+} | {
+    readonly status: 400;
+    readonly body: {
+        readonly ok: false;
+        readonly error: string;
+    };
+};
+export type ConfigEditorPorts = {
+    storage: StorageProvider;
+    basePath?: string;
+    overlayPath?: string;
+    /** Reads an environment variable; injected so the read side is deterministic. */
+    env?: (name: string) => string | undefined;
+    /** Audit sink; every persisted write appends one content-free record. */
+    audit?: (record: ConfigAuditRecord) => void | Promise<void>;
+    /** Clock for the audit timestamp; injected for determinism. */
+    now?: () => string;
+    /**
+     * Fires after a write persists at least one change, so the composition root
+     * can reload the live config getter (P14 hybrid). Optional.
+     */
+    onPersisted?: () => void | Promise<void>;
+};
+/**
+ * Default machine-local audit log for console config writes. Content-free
+ * (paths + hashes, never a raw value) and git-ignored, so it never leaves the
+ * developer's machine and never lands in committed history.
+ */
+export declare const DEFAULT_CONFIG_AUDIT_PATH = ".opencode/openteam-local/config-audit.jsonl";
+/**
+ * The editor's editable surface (W7-S16 / #200). The console edits the openteam
+ * config object only. "System prompt" is the body of an agent Markdown file
+ * under `.opencode/agent/*.md`, not a config field; "harness" and "skills" have
+ * no openteam representation. The editor therefore mounts NO systemPrompt /
+ * harness / skills sub-tab, so it never claims to edit a field that does not
+ * exist.
+ */
+export type EditableArtifact = {
+    readonly id: string;
+    readonly kind: "openteam-config" | "agent-markdown";
+    readonly validated: boolean;
+    readonly mvp: boolean;
+};
+export declare function editableSurface(): readonly EditableArtifact[];
+export declare function createConfigEditor(ports: ConfigEditorPorts): {
+    editableSurface: typeof editableSurface;
+    read(): Promise<ConfigReadResult>;
+    write(submittedRaw: unknown): Promise<ConfigWriteResult>;
+};
+export type ConfigEditor = ReturnType<typeof createConfigEditor>;
+/**
+ * Restart-required top-level keys surfaced by the read endpoint. Behaviourally
+ * significant keys consumed by the opencode plugin session, which reads config
+ * once at load. Kept beside `HOT_RELOADABLE_KEYS` as the single classification
+ * source of truth (#193).
+ */
+export declare const RESTART_REQUIRED_KEYS: readonly ["baseline", "router", "local", "privacyMode", "graph", "orchestrator", "memory", "console.host", "console.port"];
+//# sourceMappingURL=configApi.d.ts.map

package/dist/web/configApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configApi.d.ts","sourceRoot":"","sources":["../../src/web/configApi.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,KAAK,cAAc,EAEpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AA6B3D;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,YAChC,gBAAgB,EAChB,cAAc,EACd,cAAc,CACN,CAAC;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,YAAI,mBAAmB,CAAU,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,iBAAiB;aAE1B,GAAG,EAAE,4BAA4B;aACjC,MAAM,EAAE,uCAAuC;aAC/C,KAAK,EAAE,wCAAwC;EAEzC,CAAC;AAEX,eAAO,MAAM,mBAAmB,EAAG,qBAA8B,CAAC;AAElE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI3D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD;AAwBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,OAAO,EACb,IAAI,SAAK,GACR,MAAM,EAAE,CAgBV;AA8BD,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAYzE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,OAAO,CAwBT;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,OAAO,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;KAC7C,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;QACzB,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;KACjD,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,iBAAiB,GACzB;IACE,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;QAClB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;QAC3C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;QAC5B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;KAChC,CAAC;CACH,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/D,CAAC;AAEN,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,eAAe,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC3C,yEAAyE;IACzE,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,gDACS,CAAC;AAEhD;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,gBAAgB,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,wBAAgB,eAAe,IAAI,SAAS,gBAAgB,EAAE,CAS7D;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,iBAAiB;;YAgCzC,OAAO,CAAC,gBAAgB,CAAC;wBA6Bb,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC;EA8FjE;AAED,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,YAChC,UAAU,EACV,QAAQ,EACR,OAAO,EACP,aAAa,EACb,OAAO,EACP,cAAc,EACd,QAAQ,EACR,cAAc,EACd,cAAc,CACN,CAAC"}

package/dist/web/configRoute.d.ts

@@ -0,0 +1,57 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { ConfigEditor } from "./configApi";
+/**
+ * HTTP routes for the console config editor: `GET /api/config` (read, redacted)
+ * and `POST /api/config` (write, validated). Both require the per-launch
+ * ephemeral token — config is more sensitive than the read-only dashboard, so it
+ * is token-gated even on pure loopback (a strict hardening, never a relaxation).
+ *
+ * Mutations are additionally CSRF-safe (W7-S06 / #190): the token is accepted
+ * ONLY in the `Authorization: Bearer` header (never `?token=`), cross-origin
+ * requests are rejected by `Origin`/`Sec-Fetch-Site`, and no ambient cookie auth
+ * exists. The surface is loopback-only (W7-S07 / #191): `console.host` cannot
+ * widen past `ConsoleHostSchema`, enforced by the write validator.
+ */
+export type ConfigRouteDeps = {
+    token: string;
+    editor: Pick<ConfigEditor, "read" | "write">;
+};
+/**
+ * A mutation is CSRF-safe only when it is same-origin. Any `Origin` whose host
+ * is not loopback is cross-origin and rejected. A missing `Origin`
+ * (same-origin navigations, non-browser clients) is allowed, but the bearer
+ * token is still required separately.
+ */
+export declare function isCrossOriginMutation(request: IncomingMessage): boolean;
+/**
+ * Routes `/api/config`. Returns `true` when it handled (and answered) the
+ * request, `false` so the server continues with its other routes.
+ */
+export declare function handleConfigRoute(request: IncomingMessage, response: ServerResponse, url: URL, deps: ConfigRouteDeps): Promise<boolean>;
+/** A synthetic or real opencode watcher event, narrowed to the fields we read. */
+export type ConfigChangeEvent = {
+    readonly type?: string;
+    readonly properties?: {
+        readonly event?: string;
+        readonly file?: string;
+    };
+};
+/**
+ * P14 hybrid reload (hot half). Holds a mutable config reference behind a getter
+ * and re-runs `load` when a `file.watcher.updated` `change` event names the
+ * config path. The console renderer consults `current()` per request, so a
+ * hot-reloadable key (`console.refreshMs`) is served fresh WITHOUT a restart; the
+ * `file.watcher.updated` firing for an external write is verified at integration
+ * time (it needs a live opencode process), with `watchSources` on the config
+ * path as the deterministic fallback.
+ */
+export declare function createConfigReloader<T>(deps: {
+    initial: T;
+    load: () => Promise<T>;
+    configPath: string;
+}): {
+    current: () => T;
+    reload: () => Promise<T>;
+    handleEvent: (event: ConfigChangeEvent) => Promise<boolean>;
+};
+//# sourceMappingURL=configRoute.d.ts.map

package/dist/web/configRoute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configRoute.d.ts","sourceRoot":"","sources":["../../src/web/configRoute.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAOjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;CAC9C,CAAC;AA0CF;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAcvE;AAiCD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,OAAO,CAAC,CAmElB;AAED,kFAAkF;AAClF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;CACH,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,IAAI,EAAE;IAC5C,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG;IACF,OAAO,EAAE,MAAM,CAAC,CAAC;IACjB,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,WAAW,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7D,CAwBA"}

package/dist/web/console.d.ts

@@ -18,6 +18,14 @@ export type ConsoleRouteDeps = {
     drilldownEnabled?: boolean;
     /** Habilita la vista "Terminal" (PTY real, Fase 5). Opt-in. */
     ptyEnabled?: boolean;
+    /**
+     * Habilita el **modo diagnóstico local** (P11b): opt-in del operador para que
+     * las rutas de lectura (`stream`, `messages`) puedan servir texto verbatim en
+     * lugar de la referencia redactada por defecto. Requiere además `?diagnostic=1`
+     * en la petición. Off por defecto: sin esta bandera el contenido va redactado
+     * aunque la petición pida diagnóstico. Nunca debilita el token ni el loopback.
+     */
+    diagnosticEnabled?: boolean;
     /** Resuelve el origen del servidor opencode de una sesión (o `undefined`). */
     resolveEndpoint: (sessionID: string) => Promise<string | undefined>;
     /** Crea un cliente opencode para un endpoint (inyectable en tests). */

package/dist/web/console.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"console.d.ts","sourceRoot":"","sources":["../../src/web/console.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAM/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,8EAA8E;IAC9E,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpE,uEAAuE;IACvE,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,aAAa,CAAC;IAClD,mEAAmE;IACnE,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC;CACnD,CAAC;AA4OF;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,OAAO,CAAC,CAqDlB"}
+{"version":3,"file":"console.d.ts","sourceRoot":"","sources":["../../src/web/console.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAM/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,8EAA8E;IAC9E,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpE,uEAAuE;IACvE,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,aAAa,CAAC;IAClD,mEAAmE;IACnE,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC;CACnD,CAAC;AAiPF;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,OAAO,CAAC,CA4DlB"}

package/dist/web/paths.d.ts

@@ -1,4 +1,5 @@
-/** Rutas por defecto de las fuentes que alimentan el console. */
-export declare const DEFAULT_BACKLOG_PATH = ".opencode/openteam-backlog.md";
-export declare const DEFAULT_DECISIONS_PATH = ".opencode/openteam-decisions.md";
+/** Rutas por defecto de las fuentes que alimentan el console.
+ * Portable team-state (P15b): committed under `.opencode/openteam/`. */
+export declare const DEFAULT_BACKLOG_PATH = ".opencode/openteam/backlog.md";
+export declare const DEFAULT_DECISIONS_PATH = ".opencode/openteam/decisions.md";
 //# sourceMappingURL=paths.d.ts.map

package/dist/web/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/web/paths.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,eAAO,MAAM,oBAAoB,kCAAkC,CAAC;AACpE,eAAO,MAAM,sBAAsB,oCAAoC,CAAC"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/web/paths.ts"],"names":[],"mappings":"AAAA;wEACwE;AACxE,eAAO,MAAM,oBAAoB,kCAAkC,CAAC;AACpE,eAAO,MAAM,sBAAsB,oCAAoC,CAAC"}

package/dist/web/server.d.ts

@@ -4,11 +4,24 @@ import type { ConsoleClient } from "../console/opencodeClient";
 import type { PtyClient } from "../console/pty";
 import type { ConsoleInputs } from "../console/state";
 import type { GraphViewProjectionV1 } from "../telemetry/graphView";
+import { type ConfigRouteDeps } from "./configRoute";
 import { type StorageRouteDeps } from "./storageRoute";
 export type ConsoleServerDeps = {
     /** Relee las fuentes y produce los inputs crudos del console. */
     readSnapshot: () => Promise<ConsoleInputs>;
     config: ConsoleConfig;
+    /**
+     * Live console-config getter (P14 hybrid, hot half). When provided, the
+     * renderer reads hot-reloadable presentation keys (`console.refreshMs`) from
+     * this getter instead of the frozen `config`, so a reloaded value is served
+     * fresh without a restart. Absent → behaviour is identical to today.
+     */
+    getConsoleConfig?: () => ConsoleConfig;
+    /**
+     * Config editor surface (`/api/config`, read + write). Opt-in: without it the
+     * console exposes no config endpoint. Token-gated even on loopback.
+     */
+    configApi?: ConfigRouteDeps;
     /** Inyectable para tests; por defecto el `createServer` de `node:http`. */
     createServer?: typeof createHttpServer;
     /** Logger (por defecto `console`). */
@@ -26,12 +39,18 @@ export type ConsoleServerDeps = {
         drilldownEnabled?: boolean;
         /** Habilita la vista "Terminal" (PTY real, Fase 5). Opt-in. */
         ptyEnabled?: boolean;
+        /**
+         * Habilita el **modo diagnóstico local** (P11b): opt-in del operador para que
+         * el drill-down sirva texto verbatim en vez de la referencia redactada por
+         * defecto (requiere además `?diagnostic=1` en la petición). Off por defecto.
+         */
+        diagnosticEnabled?: boolean;
         createClient: (endpoint: string) => ConsoleClient;
         createPtyClient?: (endpoint: string) => PtyClient;
     };
     /**
      * Endpoint remoto de storage (`/storage/*`). Opcional y opt-in: expone el
-     * estado del equipo autenticado con token para una Console remota vía tunnel.
+     * estado del equipo autenticado con token para una Console remota.
      */
     storageApi?: StorageRouteDeps;
     /**
@@ -43,6 +62,16 @@ export type ConsoleServerDeps = {
     graphApi?: {
         readView: () => Promise<GraphViewProjectionV1 | null>;
     };
+    /**
+     * `true` when the operator enabled the console agent-tree view
+     * (`console.graphView.enabled`) but the graph engine is off (`graph.mode` ==
+     * "off"), so no `graphApi` provider is wired. The shell still mounts the
+     * agent-tree tab and renders the `graph.mode` remediation hint instead of a
+     * bare-missing tab (PRD W7 acceptance #9). `/api/graph` and the SSE `graph`
+     * frame stay absent because they follow `graphApi`. Absent/`false` → behaviour
+     * is identical to today.
+     */
+    graphDisabled?: boolean;
 };
 export type ConsoleServer = {
     url: string;

package/dist/web/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,IAAI,gBAAgB,EAIjC,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAOpE,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAW3E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,iEAAiE;IACjE,YAAY,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,EAAE,aAAa,CAAC;IACtB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,gBAAgB,CAAC;IACvC,sCAAsC;IACtC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,8EAA8E;IAC9E,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,eAAe,EAAE,OAAO,CAAC;QACzB;;;;;WAKG;QACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,+DAA+D;QAC/D,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,aAAa,CAAC;QAClD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC;KACnD,CAAC;IACF;;;OAGG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE;QACT,QAAQ,EAAE,MAAM,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;KACvD,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AA2FF;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,aAAa,CAAC,CA2LxB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,IAAI,gBAAgB,EAIjC,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,KAAK,eAAe,EAAqB,MAAM,eAAe,CAAC;AAOxE,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAW3E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,iEAAiE;IACjE,YAAY,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,EAAE,aAAa,CAAC;IACtB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,aAAa,CAAC;IACvC;;;OAGG;IACH,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,gBAAgB,CAAC;IACvC,sCAAsC;IACtC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,8EAA8E;IAC9E,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,eAAe,EAAE,OAAO,CAAC;QACzB;;;;;WAKG;QACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,+DAA+D;QAC/D,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB;;;;WAIG;QACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,aAAa,CAAC;QAClD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC;KACnD,CAAC;IACF;;;OAGG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE;QACT,QAAQ,EAAE,MAAM,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;KACvD,CAAC;IACF;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AAuGF;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,aAAa,CAAC,CAsMxB"}