@nanonets/graft 0.23.0 → 0.24.0

package/dist/trace/check-reads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-reads.js","sourceRoot":"","sources":["../../src/trace/check-reads.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAA,yEAAyE,CAAC;AAExG,4CAA4C;AAC5C,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAA,uCAAuC,CAAC;AAEjF;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAA,2WAA2W,CAAC;AAEjZ,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE5E,sGAAsG;AACtG,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,mDAAmD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE9G,sFAAsF;AACtF,MAAM,CAAC,MAAM,WAAW,GAAG,qOAAqO,CAAC;AAEjQ,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,OAAO,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7H,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IACjD,OAAO,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACvE,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAc;IACtD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,CAAC,MAAe,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,mGAAmG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzH,IAAI,IAAI;QAAE,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,qFAAqF,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3G,IAAI,IAAI;QAAE,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;IAC1G,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,uEAAuE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACtG,CAAC"}

package/dist/trace/host.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Which agent sent a hook payload, and how much of what it did its transcript
+ * keeps. Worked out from the payload itself, before any transcript is parsed,
+ * never from the settings file that fired the hook: Cursor and Copilot CLI run
+ * the Claude Code hooks in `.claude/settings.json` too, so a payload on a
+ * Claude hook can carry a Cursor or Copilot transcript path. Parsed as Claude,
+ * such a file shows no typed words and no tool results, and every save would
+ * look like the agent's own.
+ *
+ * Tiers (how far Trail can trust the record):
+ *  - A: typed words told apart, tool calls, results with a failure signal,
+ *    compactions. Claude Code.
+ *  - B: a full record whose host checks aren't written up yet. Codex, until HC1 to HC12 are (P31): its rollouts
+ *    are read and folded (phase 2), but learning stays off.
+ *  - C: typed words, calls at best, no results Trail can read. Copilot CLI,
+ *    Gemini CLI (no hooks wired, no parser yet).
+ *  - D: nothing Trail can read, or a shape it doesn't know. Cursor (its
+ *    transcripts keep no results), anything unknown.
+ * Only tier A can make a live item; everything else is held for a yes.
+ *
+ * `subagent` is set when the payload comes from a subagent's tool call or
+ * stop (Claude Code adds `agent_id` there, never on the main thread). Its
+ * transcript path still names the parent session, so the caller stays out.
+ */
+export type Host = "claude" | "codex" | "cursor" | "copilot" | "gemini" | "unknown";
+export type Tier = "A" | "B" | "C" | "D";
+export interface HostInfo {
+    host: Host;
+    tier: Tier;
+    subagent?: true;
+}
+/**
+ * Codex's tier (design 4.18, P31): the one constant that flips to "A", in the commit that writes up HC1 to HC12 in
+ * host-checks.md and passes the Codex legs of J04, J10 and J13 in a real session. Until then a test home may set
+ * TRAIL_TIER_CODEX=A (host-facts.ts `hostTier`).
+ */
+export declare const CODEX_TIER: Tier;
+/** The host that sent `payload` and its tier. Never throws; anything unreadable is unknown. */
+export declare function detectHost(payload: unknown): HostInfo;
+//# sourceMappingURL=host.d.ts.map

package/dist/trace/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/trace/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,MAAM,IAAI,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AACpF,MAAM,MAAM,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;AACzC,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,CAAC,EAAE,IAAI,CAAC;CACjB;AAED;;;;GAIG;AACH,eAAO,MAAM,UAAU,EAAE,IAAU,CAAC;AAsBpC,+FAA+F;AAC/F,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,CA6BrD"}

package/dist/trace/host.js

@@ -0,0 +1,84 @@
+/**
+ * Which agent sent a hook payload, and how much of what it did its transcript
+ * keeps. Worked out from the payload itself, before any transcript is parsed,
+ * never from the settings file that fired the hook: Cursor and Copilot CLI run
+ * the Claude Code hooks in `.claude/settings.json` too, so a payload on a
+ * Claude hook can carry a Cursor or Copilot transcript path. Parsed as Claude,
+ * such a file shows no typed words and no tool results, and every save would
+ * look like the agent's own.
+ *
+ * Tiers (how far Trail can trust the record):
+ *  - A: typed words told apart, tool calls, results with a failure signal,
+ *    compactions. Claude Code.
+ *  - B: a full record whose host checks aren't written up yet. Codex, until HC1 to HC12 are (P31): its rollouts
+ *    are read and folded (phase 2), but learning stays off.
+ *  - C: typed words, calls at best, no results Trail can read. Copilot CLI,
+ *    Gemini CLI (no hooks wired, no parser yet).
+ *  - D: nothing Trail can read, or a shape it doesn't know. Cursor (its
+ *    transcripts keep no results), anything unknown.
+ * Only tier A can make a live item; everything else is held for a yes.
+ *
+ * `subagent` is set when the payload comes from a subagent's tool call or
+ * stop (Claude Code adds `agent_id` there, never on the main thread). Its
+ * transcript path still names the parent session, so the caller stays out.
+ */
+/**
+ * Codex's tier (design 4.18, P31): the one constant that flips to "A", in the commit that writes up HC1 to HC12 in
+ * host-checks.md and passes the Codex legs of J04, J10 and J13 in a real session. Until then a test home may set
+ * TRAIL_TIER_CODEX=A (host-facts.ts `hostTier`).
+ */
+export const CODEX_TIER = "B";
+const TIER = { claude: "A", codex: CODEX_TIER, cursor: "D", copilot: "C", gemini: "C", unknown: "D" };
+/** Keys only Cursor's hooks send, on its own events and on Claude's. */
+const CURSOR_KEYS = ["conversation_id", "generation_id", "cursor_version", "workspace_roots"];
+/** Antigravity: camelCase like Copilot, but its own. Not a host Trail reads yet. */
+const ANTIGRAVITY_KEYS = ["conversationId", "artifactDirectoryPath", "workspacePaths"];
+/** Copilot CLI's own hooks speak camelCase; on a .claude/settings.json it switches to snake_case with an ISO timestamp. */
+const COPILOT_KEYS = ["sessionId", "toolName", "toolArgs", "transcriptPath", "toolResult"];
+/** Events only Gemini CLI has; SessionStart, SessionEnd and Notification it shares with Claude Code. */
+const GEMINI_EVENTS = new Set(["BeforeTool", "AfterTool", "BeforeAgent", "AfterAgent", "BeforeModel", "AfterModel", "BeforeToolSelection", "PreCompress"]);
+function result(host, subagent = false) {
+    return subagent ? { host, tier: TIER[host], subagent: true } : { host, tier: TIER[host] };
+}
+/** Forward slashes, so one set of checks reads Windows paths too. */
+function slashed(p) {
+    return p.replace(/\\/g, "/");
+}
+/** The host that sent `payload` and its tier. Never throws; anything unreadable is unknown. */
+export function detectHost(payload) {
+    try {
+        if (!payload || typeof payload !== "object" || Array.isArray(payload))
+            return result("unknown");
+        const p = payload;
+        const has = (k) => Object.prototype.hasOwnProperty.call(p, k) && p[k] !== undefined && p[k] !== null;
+        const rawPath = has("transcript_path") ? p.transcript_path : p.transcriptPath;
+        const path = typeof rawPath === "string" ? slashed(rawPath) : "";
+        const file = path.slice(path.lastIndexOf("/") + 1);
+        const event = typeof p.hook_event_name === "string" ? p.hook_event_name : "";
+        if (CURSOR_KEYS.some(has) || path.includes("/.cursor/") || path.includes("/agent-transcripts/"))
+            return result("cursor");
+        if (ANTIGRAVITY_KEYS.some(has) || path.includes("/.gemini/antigravity"))
+            return result("unknown");
+        if (has("turn_id") || /^rollout-.*\.jsonl(\.zst)?$/.test(file) || path.includes("/.codex/sessions/"))
+            return result("codex");
+        if (COPILOT_KEYS.some(has) || path.includes("/.copilot/"))
+            return result("copilot");
+        if (GEMINI_EVENTS.has(event) || path.includes("/.gemini/tmp/"))
+            return result("gemini");
+        // Copilot CLI running a .claude/settings.json speaks snake_case like Claude
+        // Code, but stamps an ISO `timestamp`, which Claude Code never sends.
+        if (typeof p.timestamp === "string")
+            return result("copilot");
+        // Claude Code sends a session id and its transcript's path on every event,
+        // and names events in PascalCase. Without a transcript nothing proves it.
+        const claudeEvent = !has("hook_event_name") || /^[A-Z][A-Za-z]+$/.test(event);
+        if (typeof p.session_id === "string" && p.session_id && typeof rawPath === "string" && file.endsWith(".jsonl") && claudeEvent) {
+            return result("claude", typeof p.agent_id === "string" && p.agent_id !== "");
+        }
+        return result("unknown");
+    }
+    catch {
+        return result("unknown");
+    }
+}
+//# sourceMappingURL=host.js.map

package/dist/trace/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../src/trace/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAUH;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAS,GAAG,CAAC;AAEpC,MAAM,IAAI,GAAuB,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAE1H,wEAAwE;AACxE,MAAM,WAAW,GAAG,CAAC,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;AAC9F,oFAAoF;AACpF,MAAM,gBAAgB,GAAG,CAAC,gBAAgB,EAAE,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;AACvF,2HAA2H;AAC3H,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;AAC3F,wGAAwG;AACxG,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,qBAAqB,EAAE,aAAa,CAAC,CAAC,CAAC;AAE3J,SAAS,MAAM,CAAC,IAAU,EAAE,QAAQ,GAAG,KAAK;IAC1C,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED,qEAAqE;AACrE,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,UAAU,CAAC,OAAgB;IACzC,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;QAChG,MAAM,CAAC,GAAG,OAAkC,CAAC;QAC7C,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAC7G,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;QAC9E,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;QAE7E,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzH,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;QAClG,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7H,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;QACpF,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxF,4EAA4E;QAC5E,sEAAsE;QACtE,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;QAE9D,2EAA2E;QAC3E,0EAA0E;QAC1E,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC;YAC9H,OAAO,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC"}

package/dist/trace/redact.d.ts

@@ -0,0 +1,8 @@
+/** The fold-time secret rule (4.10). */
+export declare function redactSecrets(cmd: string): {
+    cmd: string | null;
+    secret?: 'named' | 'refused';
+};
+/** flatLine(text, max), or undefined when secretReason finds anything in it. */
+export declare function cleanLine(text: string, max: number): string | undefined;
+//# sourceMappingURL=redact.d.ts.map

package/dist/trace/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/trace/redact.ts"],"names":[],"mappings":"AAyBA,wCAAwC;AACxC,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAAE,CAwB/F;AAED,gFAAgF;AAChF,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKvE"}

package/dist/trace/redact.js

@@ -0,0 +1,63 @@
+/**
+ * The fold-time secret rule (design 4.10). A command that ran is kept only in
+ * a form with no secret in it: a secret assigned to a name (`NPM_TOKEN=…`,
+ * `--token …`) becomes `${NAME:?set NAME}`, which still runs and says what to
+ * set; anything else secret-shaped makes the whole command unusable, stored
+ * as null. Nothing secret-shaped reaches `sessions/`, `runs/`, marks or a
+ * skill.
+ *
+ * A named value ends where the shell word ends (`;`, `&&`, `|` stay put), and
+ * its placeholder is always double-quoted so it expands. A command over 2,000
+ * characters is never compiled (the fold marks it truncated), so it is stored
+ * as null without a look.
+ */
+import { flatLine } from '../notes/flatten.js';
+import { secretReason } from '../notes/secrets.js';
+const placeholder = (name) => `\${${name}:?set ${name}}`;
+/** A value: quoted (anything but its quote), or a bare word (up to a space, a quote or a shell operator). */
+const VALUE = String.raw `(?:'([^']*)'|"([^"]*)"|([^\s'"\x60;&|<>()]+))`;
+const ASSIGNED = new RegExp(String.raw `\b([A-Z][A-Z0-9_]{2,})=${VALUE}`, 'g');
+const FLAG = new RegExp(String.raw `--(token|password|api-key|apikey|secret|key)([= ])${VALUE}`, 'g');
+const BEARER = /(\bBearer\s+)([^\s'"]+)/gi;
+/** Commands longer than this are never compiled (4.1 `truncated`) and are not scanned. */
+const MAX_SCANNED = 2000;
+/** The fold-time secret rule (4.10). */
+export function redactSecrets(cmd) {
+    const raw = String(cmd ?? '');
+    if (raw.length > MAX_SCANNED)
+        return { cmd: null, secret: 'refused' };
+    if (secretReason(raw) === null)
+        return { cmd: raw };
+    // Values assigned to a name, so a later `Bearer <value>` can take that name.
+    const named = new Map();
+    let out = raw.replace(ASSIGNED, (whole, name, sq, dq, bare) => {
+        const value = sq ?? dq ?? bare ?? '';
+        if (secretReason(`${name}=${value}`) === null && secretReason(value) === null)
+            return whole;
+        named.set(value, name);
+        // Double quotes, or none: a placeholder in single quotes would never expand.
+        return `${name}=${bare === undefined ? '"' : ''}${placeholder(name)}${bare === undefined ? '"' : ''}`;
+    });
+    out = out.replace(FLAG, (whole, flag, sep, sq, dq, bare) => {
+        const value = sq ?? dq ?? bare ?? '';
+        if (secretReason(`--${flag} ${value}`) === null && secretReason(value) === null)
+            return whole;
+        return `--${flag}${sep}"${placeholder(flag.toUpperCase().replace(/-/g, '_'))}"`;
+    });
+    out = out.replace(BEARER, (whole, lead, value) => {
+        const name = named.get(value);
+        return name ? `${lead}${placeholder(name)}` : whole;
+    });
+    if (out === raw || secretReason(out) !== null)
+        return { cmd: null, secret: 'refused' };
+    return { cmd: out, secret: 'named' };
+}
+/** flatLine(text, max), or undefined when secretReason finds anything in it. */
+export function cleanLine(text, max) {
+    const raw = typeof text === 'string' ? text : '';
+    if (secretReason(raw) !== null)
+        return undefined;
+    const line = flatLine(raw, max);
+    return secretReason(line) === null ? line : undefined;
+}
+//# sourceMappingURL=redact.js.map

package/dist/trace/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/trace/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC;AACjE,6GAA6G;AAC7G,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAA,+CAA+C,CAAC;AACxE,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,0BAA0B,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;AAC9E,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,qDAAqD,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;AACrG,MAAM,MAAM,GAAG,2BAA2B,CAAC;AAC3C,0FAA0F;AAC1F,MAAM,WAAW,GAAG,IAAI,CAAC;AAEzB,wCAAwC;AACxC,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC9B,IAAI,GAAG,CAAC,MAAM,GAAG,WAAW;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACtE,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACpD,6EAA6E;IAC7E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,IAAI,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAW,EAAE,EAAW,EAAE,IAAa,EAAE,EAAE;QAC/F,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;QACrC,IAAI,YAAY,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC5F,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvB,6EAA6E;QAC7E,OAAO,GAAG,IAAI,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACxG,CAAC,CAAC,CAAC;IACH,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,GAAW,EAAE,EAAW,EAAE,EAAW,EAAE,IAAa,EAAE,EAAE;QACpG,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;QACrC,IAAI,YAAY,CAAC,KAAK,IAAI,IAAI,KAAK,EAAE,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC9F,OAAO,KAAK,IAAI,GAAG,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC;IAClF,CAAC,CAAC,CAAC;IACH,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,KAAa,EAAE,EAAE;QAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,IAAI,GAAG,KAAK,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACvF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,GAAW;IACjD,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC"}

package/dist/trace/seen-cache.d.ts

@@ -0,0 +1,9 @@
+/** The set of `st.seen`, for one fold to check and add to; give it back with keepSeen. */
+export declare function takeSeenSet(st: {
+    seen?: string;
+}, hex: number): Set<string>;
+/** Appends `fresh` to `st.seen` (the newest `max` kept) and keeps `set` for the next fold of this state. */
+export declare function keepSeen(st: {
+    seen?: string;
+}, set: Set<string> | null, fresh: string[], hex: number, max: number): void;
+//# sourceMappingURL=seen-cache.d.ts.map

package/dist/trace/seen-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seen-cache.d.ts","sourceRoot":"","sources":["../../src/trace/seen-cache.ts"],"names":[],"mappings":"AAgBA,0FAA0F;AAC1F,wBAAgB,WAAW,CAAC,EAAE,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAK3E;AAQD,4GAA4G;AAC5G,wBAAgB,QAAQ,CAAC,EAAE,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAYxH"}

package/dist/trace/seen-cache.js

@@ -0,0 +1,46 @@
+/**
+ * D56d's `st.seen` (10 hex a key, the newest 6,000) as a Set, kept across
+ * folds of the same state object. Init's replay folds one in-memory state
+ * turn by turn, and parsing 6,000 hashes on every fold made a 10,000-turn
+ * session take about 8 s (b5 review). A hook reads its state from disk each
+ * time, so it parses once, as before.
+ *
+ * The kept set is always exactly the parse of `st.seen`: it is taken out of
+ * the cache while a fold changes it (a fold that throws leaves none behind),
+ * put back with the string it matches, and a `st.seen` changed any other way
+ * is parsed again.
+ */
+const CACHE = new WeakMap();
+const parse = (s, hex) => new Set(s.match(new RegExp(`.{${hex}}`, 'g')) ?? []);
+/** The set of `st.seen`, for one fold to check and add to; give it back with keepSeen. */
+export function takeSeenSet(st, hex) {
+    const s = st.seen ?? '';
+    const c = CACHE.get(st);
+    CACHE.delete(st);
+    return c && c.seen === s ? c.set : parse(s, hex);
+}
+/** Whether `h` sits in `s` at a key's boundary. */
+function holds(s, h, hex) {
+    for (let i = s.indexOf(h); i >= 0; i = s.indexOf(h, i + 1))
+        if (i % hex === 0)
+            return true;
+    return false;
+}
+/** Appends `fresh` to `st.seen` (the newest `max` kept) and keeps `set` for the next fold of this state. */
+export function keepSeen(st, set, fresh, hex, max) {
+    if (fresh.length) {
+        const all = (st.seen ?? '') + fresh.join('');
+        const cut = all.length > max * hex ? all.length - max * hex : 0;
+        st.seen = cut ? all.slice(cut) : all;
+        if (set && cut)
+            for (let i = 0; i < cut; i += hex) {
+                const h = all.slice(i, i + hex);
+                if (!holds(st.seen, h, hex))
+                    set.delete(h);
+            }
+    }
+    const s = st.seen ?? '';
+    if (set && s.length % hex === 0)
+        CACHE.set(st, { seen: s, set });
+}
+//# sourceMappingURL=seen-cache.js.map

package/dist/trace/seen-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seen-cache.js","sourceRoot":"","sources":["../../src/trace/seen-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,KAAK,GAAG,IAAI,OAAO,EAA8C,CAAC;AAExE,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,GAAW,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAE/F,0FAA0F;AAC1F,MAAM,UAAU,WAAW,CAAC,EAAqB,EAAE,GAAW;IAC5D,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IACxB,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjB,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,mDAAmD;AACnD,SAAS,KAAK,CAAC,CAAS,EAAE,CAAS,EAAE,GAAW;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAAE,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,QAAQ,CAAC,EAAqB,EAAE,GAAuB,EAAE,KAAe,EAAE,GAAW,EAAE,GAAW;IAChH,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACrC,IAAI,GAAG,IAAI,GAAG;YAAE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;gBAClD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;gBAChC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC;oBAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC;IACH,CAAC;IACD,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IACxB,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,KAAK,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;AACnE,CAAC"}

package/dist/trace/shell-scan.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The lexer under `shell.ts`: one pass over a command that finds its
+ * top-level segments the way the shell would. Quotes, `$'…'`, `$(…)`,
+ * `$((…))`, backticks, `${…}`, `(…)` subshells, `{ …; }` groups, `[[ … ]]`,
+ * comments, and loops and ifs (when asked) are opaque; a heredoc body is
+ * skipped as text and, at the top level, belongs to the segment whose line
+ * opened it. Ranges into the original text are returned, so callers can cut
+ * a command without retyping any of it.
+ *
+ * The PreToolUse fast path loads this file through `shell.ts`: it imports
+ * nothing.
+ */
+export type Sep = '&&' | '||' | ';' | '|' | '&' | '';
+/** One top-level segment, as ranges of the original text. */
+export interface Piece {
+    start: number;
+    end: number;
+    sep: Sep;
+    nl: boolean;
+    /** Heredoc bodies that sit after the line this segment ended on. */
+    bodies: Array<[number, number]>;
+    /** The segment starts with a subshell or group: where it opens and closes. */
+    group: {
+        open: number;
+        close: number;
+    } | null;
+}
+export interface Scan {
+    segs: Piece[];
+    heredoc: boolean;
+    newline: boolean;
+    keep: Array<[number, number]>;
+}
+export declare const OPEN_KW: Set<string>;
+/**
+ * The one scanner. `compounds`: a loop or an if is one segment (false splits
+ * inside them, to look at what they run).
+ */
+export declare function scan(s: string, compounds?: boolean): Scan;
+/** A piece's head text plus its detached heredoc bodies. */
+export declare function pieceText(s: string, p: Piece): string;
+/**
+ * `s` with `ranges` removed, except what `keep` protects (heredoc bodies and
+ * the newline before them), trimmed.
+ */
+export declare function cut(s: string, ranges: Array<[number, number]>, keep: Array<[number, number]>): string;
+/** Words of one segment's head, split on unquoted spaces; quotes kept; a `#` comment is not a word. */
+export declare function words(text: string): string[];
+export declare const unquote: (w: string) => string;
+export declare const base: (w: string) => string;
+export declare const ASSIGN: RegExp;
+//# sourceMappingURL=shell-scan.d.ts.map

package/dist/trace/shell-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-scan.d.ts","sourceRoot":"","sources":["../../src/trace/shell-scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;AACrD,6DAA6D;AAC7D,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,GAAG,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAClD,oEAAoE;IACpE,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChC,8EAA8E;IAC9E,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC/C;AACD,MAAM,WAAW,IAAI;IAAG,IAAI,EAAE,KAAK,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE;AAE1G,eAAO,MAAM,OAAO,aAA6D,CAAC;AAKlF;;;GAGG;AACH,wBAAgB,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,UAAO,GAAG,IAAI,CAqJtD;AAED,4DAA4D;AAC5D,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,GAAG,MAAM,CAErD;AAED;;;GAGG;AACH,wBAAgB,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAOrG;AAED,uGAAuG;AACvG,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CA4B5C;AAED,eAAO,MAAM,OAAO,GAAI,GAAG,MAAM,WAA2C,CAAC;AAC7E,eAAO,MAAM,IAAI,GAAI,GAAG,MAAM,WAA0D,CAAC;AACzF,eAAO,MAAM,MAAM,QAA6B,CAAC"}