@pat-lewczuk/cezar 0.1.2 → 0.1.4

package/dist/runs/title-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"title-summary.js","sourceRoot":"","sources":["../../src/runs/title-summary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,8EAA8E;AAC9E,MAAM,OAAO,GAAG,EAAE,CAAC;AAEnB,qEAAqE;AACrE,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB;6EAC6E;AAC7E,MAAM,SAAS,GAAG;IAChB,8FAA8F;IAC9F,uGAAuG;IACvG,yCAAyC;CAC1C,CAAC;AAEF,yDAAyD;AACzD,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,IAAI;SACR,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,iBAAiB;SAC3C,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,cAAc;SACnD,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,oBAAoB;SACzC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC;SACjC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC;SAC7B,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC;SAC7B,OAAO,CAAC,sCAAsC,EAAE,MAAM,CAAC,CAAC,wCAAwC;SAChG,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC;SAC3B,OAAO,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC,qBAAqB;SAC7D,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,CAAS;IAC9B,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,IAAY;IAC3D,2EAA2E;IAC3E,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;IAElE,MAAM,IAAI,GAAG,aAAa;SACvB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;SAClC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,sEAAsE;IACtE,wEAAwE;IACxE,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,KAAK,IAAI,QAAQ,GAAG,IAAI,EAAE,QAAQ,GAAI,CAAC;QACrC,QAAQ,GAAG,KAAK,CAAC;QACjB,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,CAAC,GAAG,IAAI,CAAC;gBACT,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IACD,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAE5B,mEAAmE;IACnE,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO;QAAE,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC;IAErF,mEAAmE;IACnE,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,SAAS;QAAE,OAAO,SAAS,CAAC;IACxE,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9E,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,aAAa;QAAE,OAAO,SAAS,CAAC;IAExD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACrD,CAAC"}

package/dist/runs/ui-event-sink.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Protocol-v2 persistence + fan-out policy for one agent session — the
+ * RunManager feeds every `UiEvent` a runner emits (`SessionOptions.onUiEvent`)
+ * through one sink instance and the sink decides, per the spec's performance
+ * guardrails (§"Normalized agent-event protocol v2" and
+ * `.ai/analysis/cockpit-ui-redesign/protocol-rationale-and-performance.md` §5):
+ *
+ *  - `item.delta` is COALESCED per item (~40 ms flush) onto the live wire
+ *    only — raw deltas NEVER hit the NDJSON file; replay needs no delta
+ *    reduction because every item's final state rides `item.completed`.
+ *  - Everything else persists as snapshots via `persist()` (the store stamps
+ *    `seq`/`ts`, and `appendEvent` already fans persisted lines out live, so
+ *    a persisted event is never double-emitted here).
+ *  - `item.updated` hits disk only on a meaningful change (status flip, new
+ *    diffs/title/…) — streamed-content-only growth goes to the live wire
+ *    ephemerally, mirroring what the deltas already carry.
+ *  - `usage.updated` is cumulative per session: persisted only when the
+ *    total (or cost) actually moved, mirroring v1's token-usage cadence.
+ *
+ * Output errors are swallowed: v2 is additive and best-effort — a persist
+ * failure (e.g. the run was deleted mid-flush) must never disturb the v1
+ * stream or crash a timer callback.
+ */
+import type { StopReason, UiEvent } from '../core/ui-events.js';
+/** Spec guardrail: coalesce `item.delta` at ~30–50 ms boundaries. */
+export declare const DELTA_FLUSH_MS = 40;
+/**
+ * v2 lines share the NDJSON file and the store's event bus with v1, but ride
+ * a DIFFERENT SSE event name (`ui-event` vs `run-event`) so the legacy UI —
+ * which knew only `run-event` and JSON-dumped unknown types into the
+ * transcript; retired in R7, but the name split stays as wire shape — never
+ * saw them. The discriminator is the dotted namespace:
+ * every v2 type on the wire is dotted (`item.started`, `turn.completed`, …)
+ * and no v1 type is. v2's only undotted type, `image`, never reaches the
+ * store: the sink drops it in favor of the v1 image pipeline (which persists
+ * the file and re-emits a URL instead of raw base64).
+ */
+export declare function isV2WireEventType(type: string): boolean;
+/** A loose event as the store consumes it (the sink adds no seq/ts — the
+ *  store stamps those). */
+type WireEvent = {
+    type: string;
+    [key: string]: unknown;
+};
+export interface UiEventSinkOutput {
+    /** Append to the run's NDJSON file (which also fans out live). */
+    persist(event: WireEvent): void;
+    /** Fan out live only — never written to disk (coalesced deltas). */
+    emitLive(event: WireEvent): void;
+}
+export declare class UiEventSink {
+    private readonly out;
+    private readonly flushMs;
+    /** Pending delta text per open item, per streamed field (insertion order
+     *  preserved so a flush replays fields in first-arrival order). */
+    private readonly buffers;
+    private readonly timers;
+    /** Last persisted non-streamed shape per item — the `item.updated`
+     *  meaningful-change filter. */
+    private readonly shapes;
+    private lastUsage;
+    private ended;
+    constructor(out: UiEventSinkOutput, flushMs?: number);
+    /** Fold one runner-emitted v2 event into the persist/live outputs. */
+    handle(event: UiEvent): void;
+    /**
+     * Session close, called by the RunManager exactly once when the v1 session
+     * settles: flush everything, then persist v2 `session.error` (fatal) when
+     * the session failed, and `session.ended` — the v2 counterparts of v1's
+     * `done`/`error`, which the mappers deliberately left to the RunManager.
+     */
+    sessionEnded(reason: StopReason, errorMessage?: string): void;
+    /** Flush every open coalescer now (turn end, session settle). */
+    flushAll(): void;
+    private bufferDelta;
+    /** Emit one merged `item.delta` per buffered field of the item, live only. */
+    private flushItem;
+    private persist;
+    private emitLive;
+}
+export {};

package/dist/runs/ui-event-sink.js

@@ -0,0 +1,210 @@
+/**
+ * Protocol-v2 persistence + fan-out policy for one agent session — the
+ * RunManager feeds every `UiEvent` a runner emits (`SessionOptions.onUiEvent`)
+ * through one sink instance and the sink decides, per the spec's performance
+ * guardrails (§"Normalized agent-event protocol v2" and
+ * `.ai/analysis/cockpit-ui-redesign/protocol-rationale-and-performance.md` §5):
+ *
+ *  - `item.delta` is COALESCED per item (~40 ms flush) onto the live wire
+ *    only — raw deltas NEVER hit the NDJSON file; replay needs no delta
+ *    reduction because every item's final state rides `item.completed`.
+ *  - Everything else persists as snapshots via `persist()` (the store stamps
+ *    `seq`/`ts`, and `appendEvent` already fans persisted lines out live, so
+ *    a persisted event is never double-emitted here).
+ *  - `item.updated` hits disk only on a meaningful change (status flip, new
+ *    diffs/title/…) — streamed-content-only growth goes to the live wire
+ *    ephemerally, mirroring what the deltas already carry.
+ *  - `usage.updated` is cumulative per session: persisted only when the
+ *    total (or cost) actually moved, mirroring v1's token-usage cadence.
+ *
+ * Output errors are swallowed: v2 is additive and best-effort — a persist
+ * failure (e.g. the run was deleted mid-flush) must never disturb the v1
+ * stream or crash a timer callback.
+ */
+/** Spec guardrail: coalesce `item.delta` at ~30–50 ms boundaries. */
+export const DELTA_FLUSH_MS = 40;
+/** Backstop so one item can never buffer unboundedly within a window. */
+const MAX_DELTA_BUFFER = 64_000;
+/**
+ * v2 lines share the NDJSON file and the store's event bus with v1, but ride
+ * a DIFFERENT SSE event name (`ui-event` vs `run-event`) so the legacy UI —
+ * which knew only `run-event` and JSON-dumped unknown types into the
+ * transcript; retired in R7, but the name split stays as wire shape — never
+ * saw them. The discriminator is the dotted namespace:
+ * every v2 type on the wire is dotted (`item.started`, `turn.completed`, …)
+ * and no v1 type is. v2's only undotted type, `image`, never reaches the
+ * store: the sink drops it in favor of the v1 image pipeline (which persists
+ * the file and re-emits a URL instead of raw base64).
+ */
+export function isV2WireEventType(type) {
+    return type.includes('.');
+}
+export class UiEventSink {
+    out;
+    flushMs;
+    /** Pending delta text per open item, per streamed field (insertion order
+     *  preserved so a flush replays fields in first-arrival order). */
+    buffers = new Map();
+    timers = new Map();
+    /** Last persisted non-streamed shape per item — the `item.updated`
+     *  meaningful-change filter. */
+    shapes = new Map();
+    lastUsage = null;
+    ended = false;
+    constructor(out, flushMs = DELTA_FLUSH_MS) {
+        this.out = out;
+        this.flushMs = flushMs;
+    }
+    /** Fold one runner-emitted v2 event into the persist/live outputs. */
+    handle(event) {
+        if (this.ended)
+            return;
+        switch (event.type) {
+            case 'item.delta':
+                this.bufferDelta(event);
+                return;
+            case 'item.started':
+                this.shapes.set(event.item.id, itemShape(event.item));
+                this.persist(event);
+                return;
+            case 'item.updated': {
+                // Chronology: the item's buffered deltas reach the live wire before
+                // the snapshot that supersedes them.
+                this.flushItem(event.item.id);
+                const shape = itemShape(event.item);
+                if (this.shapes.get(event.item.id) === shape) {
+                    // Streamed-content-only growth — live consumers still get the
+                    // snapshot, the disk stays at snapshot-change frequency.
+                    this.emitLive(event);
+                    return;
+                }
+                this.shapes.set(event.item.id, shape);
+                this.persist(event);
+                return;
+            }
+            case 'item.completed':
+                this.flushItem(event.item.id);
+                this.shapes.delete(event.item.id);
+                this.persist(event);
+                return;
+            case 'turn.completed':
+                this.flushAll();
+                this.persist(event);
+                return;
+            case 'usage.updated': {
+                if (this.lastUsage !== null &&
+                    this.lastUsage.total === event.usage.total &&
+                    this.lastUsage.costUsd === event.costUsd) {
+                    return;
+                }
+                this.lastUsage = { total: event.usage.total, costUsd: event.costUsd };
+                this.persist(event);
+                return;
+            }
+            case 'image':
+                // The v1 image pipeline already persists the screenshot as a file
+                // and re-emits a URL — persisting this raw-base64 twin would write
+                // the payload to the NDJSON file. Dropped until R3 links images to
+                // items by `itemId`.
+                return;
+            default:
+                // session.*, turn.started, plan.updated, permission.* — plain
+                // snapshot/lifecycle lines, persisted as they come. (`session.ended`
+                // and fatal `session.error` are normally minted by `sessionEnded()`;
+                // mapper-emitted ones — e.g. opencode's non-fatal session.error —
+                // pass through here.)
+                this.persist(event);
+                return;
+        }
+    }
+    /**
+     * Session close, called by the RunManager exactly once when the v1 session
+     * settles: flush everything, then persist v2 `session.error` (fatal) when
+     * the session failed, and `session.ended` — the v2 counterparts of v1's
+     * `done`/`error`, which the mappers deliberately left to the RunManager.
+     */
+    sessionEnded(reason, errorMessage) {
+        if (this.ended)
+            return;
+        this.flushAll();
+        if (errorMessage !== undefined) {
+            this.persist({ type: 'session.error', message: errorMessage, fatal: true });
+            this.persist({ type: 'session.ended', reason, message: errorMessage });
+        }
+        else {
+            this.persist({ type: 'session.ended', reason });
+        }
+        this.ended = true;
+    }
+    /** Flush every open coalescer now (turn end, session settle). */
+    flushAll() {
+        for (const itemId of [...this.buffers.keys()])
+            this.flushItem(itemId);
+    }
+    // ---- internals -----------------------------------------------------------
+    bufferDelta(event) {
+        let fields = this.buffers.get(event.itemId);
+        if (!fields) {
+            fields = new Map();
+            this.buffers.set(event.itemId, fields);
+        }
+        const pending = (fields.get(event.field) ?? '') + event.delta;
+        fields.set(event.field, pending);
+        if (pending.length >= MAX_DELTA_BUFFER) {
+            this.flushItem(event.itemId);
+            return;
+        }
+        if (!this.timers.has(event.itemId)) {
+            const timer = setTimeout(() => this.flushItem(event.itemId), this.flushMs);
+            timer.unref?.();
+            this.timers.set(event.itemId, timer);
+        }
+    }
+    /** Emit one merged `item.delta` per buffered field of the item, live only. */
+    flushItem(itemId) {
+        const timer = this.timers.get(itemId);
+        if (timer !== undefined) {
+            clearTimeout(timer);
+            this.timers.delete(itemId);
+        }
+        const fields = this.buffers.get(itemId);
+        if (!fields)
+            return;
+        this.buffers.delete(itemId);
+        for (const [field, delta] of fields) {
+            if (delta !== '')
+                this.emitLive({ type: 'item.delta', itemId, field, delta });
+        }
+    }
+    // UiEvent members carry no index signature; they are plain JSON objects at
+    // runtime, so widening them to the store's loose event shape is safe.
+    persist(event) {
+        try {
+            this.out.persist(event);
+        }
+        catch {
+            // best effort — v2 must never disturb the v1 stream
+        }
+    }
+    emitLive(event) {
+        try {
+            this.out.emitLive(event);
+        }
+        catch {
+            // best effort
+        }
+    }
+}
+/** The item minus its delta-streamed content field — what "meaningful
+ *  snapshot change" compares. Mappers build items with stable key order, so
+ *  JSON equality is a faithful (and cheap) identity; a false negative merely
+ *  persists one extra snapshot. */
+function itemShape(item) {
+    if (item.kind === 'tool') {
+        const { output: _output, ...rest } = item;
+        return JSON.stringify(rest);
+    }
+    const { text: _text, ...rest } = item;
+    return JSON.stringify(rest);
+}
+//# sourceMappingURL=ui-event-sink.js.map

package/dist/runs/ui-event-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-event-sink.js","sourceRoot":"","sources":["../../src/runs/ui-event-sink.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,qEAAqE;AACrE,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AACjC,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAaD,MAAM,OAAO,WAAW;IAYH;IACA;IAZnB;uEACmE;IAClD,OAAO,GAAG,IAAI,GAAG,EAAkD,CAAC;IACpE,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC5D;oCACgC;IACf,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,SAAS,GAA0D,IAAI,CAAC;IACxE,KAAK,GAAG,KAAK,CAAC;IAEtB,YACmB,GAAsB,EACtB,UAAkB,cAAc;QADhC,QAAG,GAAH,GAAG,CAAmB;QACtB,YAAO,GAAP,OAAO,CAAyB;IAChD,CAAC;IAEJ,sEAAsE;IACtE,MAAM,CAAC,KAAc;QACnB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,YAAY;gBACf,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBACxB,OAAO;YACT,KAAK,cAAc;gBACjB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,oEAAoE;gBACpE,qCAAqC;gBACrC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC7C,8DAA8D;oBAC9D,yDAAyD;oBACzD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;oBACrB,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBACtC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,KAAK,gBAAgB;gBACnB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAClC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,KAAK,gBAAgB;gBACnB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,IACE,IAAI,CAAC,SAAS,KAAK,IAAI;oBACvB,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,KAAK;oBAC1C,IAAI,CAAC,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EACxC,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,SAAS,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBACtE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,KAAK,OAAO;gBACV,kEAAkE;gBAClE,mEAAmE;gBACnE,mEAAmE;gBACnE,qBAAqB;gBACrB,OAAO;YACT;gBACE,8DAA8D;gBAC9D,qEAAqE;gBACrE,qEAAqE;gBACrE,kEAAkE;gBAClE,sBAAsB;gBACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;QACX,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,MAAkB,EAAE,YAAqB;QACpD,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,iEAAiE;IACjE,QAAQ;QACN,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxE,CAAC;IAED,6EAA6E;IAErE,WAAW,CAAC,KAAuB;QACzC,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QAC9D,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3E,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,8EAA8E;IACtE,SAAS,CAAC,MAAc;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACpC,IAAI,KAAK,KAAK,EAAE;gBAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,sEAAsE;IAC9D,OAAO,CAAC,KAA0B;QACxC,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAkB,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,KAA0B;QACzC,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAkB,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;CACF;AAED;;;mCAGmC;AACnC,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IACtC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC"}

package/dist/server/capabilities.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Deployment-mode capabilities (cockpit-ui redesign spec §"Deployment modes —
+ * local vs hosted"). The default deployment is `npx cezar-cli` on localhost,
+ * where handing a session off to a local terminal/editor makes sense. On a
+ * VPS/remote box it doesn't: `CEZ_REMOTE=1` (or binding a non-loopback host)
+ * switches to hosted mode — `/api/health` reports `localHandoff:false`, the UI
+ * hides every local-machine affordance, and the open-in-* endpoints 409 as
+ * defense in depth.
+ */
+export interface Capabilities {
+    localHandoff: boolean;
+}
+/** True for hosts that only the local machine can reach. Undefined = the
+ *  default bind (127.0.0.1). */
+export declare function isLoopbackHost(host: string | undefined): boolean;
+/** `CEZ_REMOTE=1` or a non-loopback bind host ⇒ hosted mode (no local handoff).
+ *  Read per request — cheap, and tests/ops can flip the env live. */
+export declare function resolveCapabilities(env?: NodeJS.ProcessEnv, bindHost?: string): Capabilities;

package/dist/server/capabilities.js

@@ -0,0 +1,23 @@
+/**
+ * Deployment-mode capabilities (cockpit-ui redesign spec §"Deployment modes —
+ * local vs hosted"). The default deployment is `npx cezar-cli` on localhost,
+ * where handing a session off to a local terminal/editor makes sense. On a
+ * VPS/remote box it doesn't: `CEZ_REMOTE=1` (or binding a non-loopback host)
+ * switches to hosted mode — `/api/health` reports `localHandoff:false`, the UI
+ * hides every local-machine affordance, and the open-in-* endpoints 409 as
+ * defense in depth.
+ */
+/** True for hosts that only the local machine can reach. Undefined = the
+ *  default bind (127.0.0.1). */
+export function isLoopbackHost(host) {
+    if (!host)
+        return true;
+    const h = host.toLowerCase().replace(/^\[|\]$/g, '');
+    return h === 'localhost' || h === '::1' || h.startsWith('127.');
+}
+/** `CEZ_REMOTE=1` or a non-loopback bind host ⇒ hosted mode (no local handoff).
+ *  Read per request — cheap, and tests/ops can flip the env live. */
+export function resolveCapabilities(env = process.env, bindHost) {
+    return { localHandoff: env.CEZ_REMOTE !== '1' && isLoopbackHost(bindHost) };
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/server/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/server/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH;gCACgC;AAChC,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAClE,CAAC;AAED;qEACqE;AACrE,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAE,QAAiB;IACzF,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC9E,CAAC"}

package/dist/server/forge/github.d.ts

@@ -0,0 +1,39 @@
+import type { DraftPrInput, DraftPrOutcome, ForgeAvailability, ForgeDriver, ForgeItem } from './types.js';
+/** One GitHub issue or pull request, flattened for the cockpit's GitHub tab. */
+export type GithubItem = ForgeItem;
+export interface GithubData {
+    available: boolean;
+    /** Human-readable hint when unavailable (`gh` missing, no remote, offline…). */
+    reason?: string;
+    /** owner/name, when known. */
+    repo?: string;
+    syncedAt?: string;
+    issues: GithubItem[];
+    prs: GithubItem[];
+    /** Repo-wide map of label name → 6-hex color (no `#`), so the UI can tint chips like GitHub
+     *  does. Additive (BACKWARD_COMPATIBILITY): absent on old payloads, chips fall back to neutral. */
+    labelColors?: Record<string, string>;
+}
+export declare const GH_MAX_LIMIT = 1000;
+export declare function fetchGithub(repoRoot: string, refresh?: boolean, limit?: number): Promise<GithubData>;
+export declare function createDraftPr(input: DraftPrInput): Promise<DraftPrOutcome>;
+/**
+ * PR body from the handoff journal: the "## Goal" section (task text as
+ * fallback) + the first ~10 lines of "## Progress log" (newest first) +
+ * the cezar footer.
+ */
+export declare function buildPrBody(handoffText: string, task: string): string;
+/**
+ * Non-blocking availability for `GET /api/health` (#major-health-latency): returns the cached
+ * probe immediately, or `null` while kicking off a background probe to warm it. It NEVER shells
+ * out to `gh` on the request that reads it, so health stays under the bookmarklet's 800 ms port
+ * budget (a `gh repo view` round-trip is ~500–650 ms on its own). `null` is contract-safe — the
+ * whole `forge` field is additive, so "unknown until warm" is a valid answer.
+ */
+export declare function detectGithubCached(repoRoot: string): ForgeAvailability | null;
+/** owner/repo parsed out of the origin remote — feeds `viewUrl`. */
+export interface GithubRepoRef {
+    owner: string;
+    repo: string;
+}
+export declare function createGithubDriver(repoRoot: string, repoRef: GithubRepoRef | null): ForgeDriver;