@pugi/sdk 0.1.0-alpha.10

package/dist/audit-trace.d.ts

@@ -0,0 +1,1161 @@
+import { z } from 'zod';
+export declare const auditEventBaseSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    timestamp: string;
+    sessionId: string;
+}, {
+    id: string;
+    timestamp: string;
+    sessionId: string;
+}>;
+export declare const toolCallEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"tool_call">;
+    tool: z.ZodString;
+    inputSummary: z.ZodString;
+    permissionDecision: z.ZodOptional<z.ZodDiscriminatedUnion<"decision", [z.ZodObject<{
+        decision: z.ZodLiteral<"allow">;
+        reason: z.ZodString;
+        source: z.ZodString;
+        expiresAt: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        decision: "allow";
+        reason: string;
+        source: string;
+        expiresAt?: string | undefined;
+    }, {
+        decision: "allow";
+        reason: string;
+        source: string;
+        expiresAt?: string | undefined;
+    }>, z.ZodObject<{
+        decision: z.ZodLiteral<"ask">;
+        reason: z.ZodString;
+        risk: z.ZodEnum<["low", "medium", "high"]>;
+    }, "strip", z.ZodTypeAny, {
+        decision: "ask";
+        reason: string;
+        risk: "low" | "medium" | "high";
+    }, {
+        decision: "ask";
+        reason: string;
+        risk: "low" | "medium" | "high";
+    }>, z.ZodObject<{
+        decision: z.ZodLiteral<"deny">;
+        reason: z.ZodString;
+        source: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        decision: "deny";
+        reason: string;
+        source: string;
+    }, {
+        decision: "deny";
+        reason: string;
+        source: string;
+    }>]>>;
+}, "strip", z.ZodTypeAny, {
+    type: "tool_call";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    tool: string;
+    inputSummary: string;
+    permissionDecision?: {
+        decision: "allow";
+        reason: string;
+        source: string;
+        expiresAt?: string | undefined;
+    } | {
+        decision: "ask";
+        reason: string;
+        risk: "low" | "medium" | "high";
+    } | {
+        decision: "deny";
+        reason: string;
+        source: string;
+    } | undefined;
+}, {
+    type: "tool_call";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    tool: string;
+    inputSummary: string;
+    permissionDecision?: {
+        decision: "allow";
+        reason: string;
+        source: string;
+        expiresAt?: string | undefined;
+    } | {
+        decision: "ask";
+        reason: string;
+        risk: "low" | "medium" | "high";
+    } | {
+        decision: "deny";
+        reason: string;
+        source: string;
+    } | undefined;
+}>;
+export declare const toolResultEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"tool_result">;
+    toolCallId: z.ZodString;
+    status: z.ZodEnum<["success", "error", "cancelled"]>;
+    outputSummary: z.ZodString;
+    outputRef: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "tool_result";
+    status: "cancelled" | "error" | "success";
+    id: string;
+    timestamp: string;
+    toolCallId: string;
+    sessionId: string;
+    outputSummary: string;
+    outputRef?: string | undefined;
+}, {
+    type: "tool_result";
+    status: "cancelled" | "error" | "success";
+    id: string;
+    timestamp: string;
+    toolCallId: string;
+    sessionId: string;
+    outputSummary: string;
+    outputRef?: string | undefined;
+}>;
+export declare const fileMutationEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"file_mutation">;
+    toolCallId: z.ZodString;
+    path: z.ZodString;
+    operation: z.ZodEnum<["create", "update", "delete", "move"]>;
+    beforeBlob: z.ZodOptional<z.ZodString>;
+    afterBlob: z.ZodOptional<z.ZodString>;
+    beforeHash: z.ZodOptional<z.ZodString>;
+    afterHash: z.ZodOptional<z.ZodString>;
+    diffRef: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    path: string;
+    type: "file_mutation";
+    id: string;
+    timestamp: string;
+    toolCallId: string;
+    sessionId: string;
+    operation: "create" | "update" | "delete" | "move";
+    beforeBlob?: string | undefined;
+    afterBlob?: string | undefined;
+    beforeHash?: string | undefined;
+    afterHash?: string | undefined;
+    diffRef?: string | undefined;
+}, {
+    path: string;
+    type: "file_mutation";
+    id: string;
+    timestamp: string;
+    toolCallId: string;
+    sessionId: string;
+    operation: "create" | "update" | "delete" | "move";
+    beforeBlob?: string | undefined;
+    afterBlob?: string | undefined;
+    beforeHash?: string | undefined;
+    afterHash?: string | undefined;
+    diffRef?: string | undefined;
+}>;
+export declare const sessionEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"session">;
+    name: z.ZodEnum<["created", "command_started", "command_completed"]>;
+    command: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<["success", "error"]>>;
+}, "strip", z.ZodTypeAny, {
+    type: "session";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    name: "created" | "command_started" | "command_completed";
+    status?: "error" | "success" | undefined;
+    command?: string | undefined;
+}, {
+    type: "session";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    name: "created" | "command_started" | "command_completed";
+    status?: "error" | "success" | undefined;
+    command?: string | undefined;
+}>;
+export declare const hookInvokedEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"hook.invoked">;
+    event: z.ZodEnum<["SessionStart", "UserPromptSubmit", "PreToolUse", "PermissionRequest", "PostToolUse", "PostToolUseFailure", "Stop", "SessionEnd"]>;
+    matchSummary: z.ZodString;
+    runSummary: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "hook.invoked";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PostToolUseFailure" | "Stop" | "SessionEnd";
+    matchSummary: string;
+    runSummary: string;
+}, {
+    type: "hook.invoked";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PostToolUseFailure" | "Stop" | "SessionEnd";
+    matchSummary: string;
+    runSummary: string;
+}>;
+export declare const hookResultEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"hook.result">;
+    event: z.ZodEnum<["SessionStart", "UserPromptSubmit", "PreToolUse", "PermissionRequest", "PostToolUse", "PostToolUseFailure", "Stop", "SessionEnd"]>;
+    ok: z.ZodBoolean;
+    exitCode: z.ZodNumber;
+    elapsedMs: z.ZodNumber;
+    stdoutLen: z.ZodNumber;
+    stderrLen: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    type: "hook.result";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PostToolUseFailure" | "Stop" | "SessionEnd";
+    ok: boolean;
+    exitCode: number;
+    elapsedMs: number;
+    stdoutLen: number;
+    stderrLen: number;
+}, {
+    type: "hook.result";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PostToolUseFailure" | "Stop" | "SessionEnd";
+    ok: boolean;
+    exitCode: number;
+    elapsedMs: number;
+    stdoutLen: number;
+    stderrLen: number;
+}>;
+export declare const hookSkippedEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"hook.skipped">;
+    event: z.ZodEnum<["SessionStart", "UserPromptSubmit", "PreToolUse", "PermissionRequest", "PostToolUse", "PostToolUseFailure", "Stop", "SessionEnd"]>;
+    reason: z.ZodEnum<["dedup", "no-match", "untrusted-project"]>;
+}, "strip", z.ZodTypeAny, {
+    type: "hook.skipped";
+    id: string;
+    reason: "dedup" | "no-match" | "untrusted-project";
+    timestamp: string;
+    sessionId: string;
+    event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PostToolUseFailure" | "Stop" | "SessionEnd";
+}, {
+    type: "hook.skipped";
+    id: string;
+    reason: "dedup" | "no-match" | "untrusted-project";
+    timestamp: string;
+    sessionId: string;
+    event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PostToolUseFailure" | "Stop" | "SessionEnd";
+}>;
+export declare const compactionTierSchema: z.ZodEnum<["microcompact", "cached_microcompact", "reactive_summary", "session_memory", "full_compaction", "reset"]>;
+export declare const compactionStartedEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"compaction.started">;
+    tier: z.ZodEnum<["microcompact", "cached_microcompact", "reactive_summary", "session_memory", "full_compaction", "reset"]>;
+    trigger: z.ZodObject<{
+        budgetUsed: z.ZodNumber;
+        budgetMax: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        budgetUsed: number;
+        budgetMax: number;
+    }, {
+        budgetUsed: number;
+        budgetMax: number;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    type: "compaction.started";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    tier: "microcompact" | "cached_microcompact" | "reactive_summary" | "session_memory" | "full_compaction" | "reset";
+    trigger: {
+        budgetUsed: number;
+        budgetMax: number;
+    };
+}, {
+    type: "compaction.started";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    tier: "microcompact" | "cached_microcompact" | "reactive_summary" | "session_memory" | "full_compaction" | "reset";
+    trigger: {
+        budgetUsed: number;
+        budgetMax: number;
+    };
+}>;
+export declare const compactionCompletedEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"compaction.completed">;
+    tier: z.ZodEnum<["microcompact", "cached_microcompact", "reactive_summary", "session_memory", "full_compaction", "reset"]>;
+    bytesReclaimed: z.ZodNumber;
+    newContextSize: z.ZodNumber;
+    artifactsCreated: z.ZodArray<z.ZodObject<{
+        sha256: z.ZodString;
+        size: z.ZodNumber;
+        producedBy: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        sha256: string;
+        size: number;
+        producedBy: string;
+    }, {
+        sha256: string;
+        size: number;
+        producedBy: string;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    type: "compaction.completed";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    tier: "microcompact" | "cached_microcompact" | "reactive_summary" | "session_memory" | "full_compaction" | "reset";
+    bytesReclaimed: number;
+    newContextSize: number;
+    artifactsCreated: {
+        sha256: string;
+        size: number;
+        producedBy: string;
+    }[];
+}, {
+    type: "compaction.completed";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    tier: "microcompact" | "cached_microcompact" | "reactive_summary" | "session_memory" | "full_compaction" | "reset";
+    bytesReclaimed: number;
+    newContextSize: number;
+    artifactsCreated: {
+        sha256: string;
+        size: number;
+        producedBy: string;
+    }[];
+}>;
+export declare const compactionSkippedEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"compaction.skipped">;
+    tier: z.ZodEnum<["microcompact", "cached_microcompact", "reactive_summary", "session_memory", "full_compaction", "reset"]>;
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "compaction.skipped";
+    id: string;
+    reason: string;
+    timestamp: string;
+    sessionId: string;
+    tier: "microcompact" | "cached_microcompact" | "reactive_summary" | "session_memory" | "full_compaction" | "reset";
+}, {
+    type: "compaction.skipped";
+    id: string;
+    reason: string;
+    timestamp: string;
+    sessionId: string;
+    tier: "microcompact" | "cached_microcompact" | "reactive_summary" | "session_memory" | "full_compaction" | "reset";
+}>;
+export declare const compactionInvariantViolatedEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"compaction.invariant_violated">;
+    invariant: z.ZodEnum<["secrets-never-summarize", "open-decisions-preserved", "artifact-refs-resolvable", "static-hash-unchanged"]>;
+    evidence: z.ZodString;
+    artifactRef: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "compaction.invariant_violated";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    invariant: "secrets-never-summarize" | "open-decisions-preserved" | "artifact-refs-resolvable" | "static-hash-unchanged";
+    evidence: string;
+    artifactRef?: string | undefined;
+}, {
+    type: "compaction.invariant_violated";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    invariant: "secrets-never-summarize" | "open-decisions-preserved" | "artifact-refs-resolvable" | "static-hash-unchanged";
+    evidence: string;
+    artifactRef?: string | undefined;
+}>;
+/**
+ * Subagent lifecycle events. Extended in Sprint a5.4 (M1 gap remediation D)
+ * so dispatcher activity surfaces in the same `.pugi/events.jsonl` audit
+ * stream as tool calls, hooks, and compactions. The dispatcher
+ * implementation lives in `apps/pugi-cli/src/core/subagents/dispatcher.ts`;
+ * the wire-level shape and role/isolation enums are defined in
+ * `subagent-contracts.ts` and re-used here so a single source of truth
+ * governs validation on both sides of the boundary.
+ */
+export declare const subagentSpawnedAuditEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"subagent.spawned">;
+    taskId: z.ZodString;
+    role: z.ZodEnum<["orchestrator", "architect", "coder", "verifier", "reviewer", "researcher", "release", "devops", "design_qa"]>;
+    personaSlug: z.ZodString;
+    parentSessionId: z.ZodString;
+    isolation: z.ZodEnum<["prompt_only", "shared_fs_readonly", "shared_fs_serialized", "worktree", "remote_vm"]>;
+}, "strip", z.ZodTypeAny, {
+    type: "subagent.spawned";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    parentSessionId: string;
+    isolation: "prompt_only" | "shared_fs_readonly" | "shared_fs_serialized" | "worktree" | "remote_vm";
+    timestamp: string;
+    sessionId: string;
+}, {
+    type: "subagent.spawned";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    parentSessionId: string;
+    isolation: "prompt_only" | "shared_fs_readonly" | "shared_fs_serialized" | "worktree" | "remote_vm";
+    timestamp: string;
+    sessionId: string;
+}>;
+export declare const subagentToolCallAuditEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"subagent.tool_call">;
+    taskId: z.ZodString;
+    role: z.ZodEnum<["orchestrator", "architect", "coder", "verifier", "reviewer", "researcher", "release", "devops", "design_qa"]>;
+    personaSlug: z.ZodString;
+    toolName: z.ZodString;
+    toolCallId: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "subagent.tool_call";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    timestamp: string;
+    toolName: string;
+    toolCallId: string;
+    sessionId: string;
+}, {
+    type: "subagent.tool_call";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    timestamp: string;
+    toolName: string;
+    toolCallId: string;
+    sessionId: string;
+}>;
+export declare const subagentCompletedAuditEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"subagent.completed">;
+    taskId: z.ZodString;
+    role: z.ZodEnum<["orchestrator", "architect", "coder", "verifier", "reviewer", "researcher", "release", "devops", "design_qa"]>;
+    personaSlug: z.ZodString;
+    toolCallCount: z.ZodNumber;
+    tokensIn: z.ZodNumber;
+    tokensOut: z.ZodNumber;
+    durationMs: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    type: "subagent.completed";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    toolCallCount: number;
+    tokensIn: number;
+    tokensOut: number;
+    durationMs: number;
+    timestamp: string;
+    sessionId: string;
+}, {
+    type: "subagent.completed";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    toolCallCount: number;
+    tokensIn: number;
+    tokensOut: number;
+    durationMs: number;
+    timestamp: string;
+    sessionId: string;
+}>;
+export declare const subagentBlockedAuditEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"subagent.blocked">;
+    taskId: z.ZodString;
+    role: z.ZodEnum<["orchestrator", "architect", "coder", "verifier", "reviewer", "researcher", "release", "devops", "design_qa"]>;
+    personaSlug: z.ZodString;
+    reason: z.ZodEnum<["budget_exhausted", "plan_mode_refused", "permission_denied", "tool_unavailable"]>;
+    detail: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "subagent.blocked";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    reason: "budget_exhausted" | "plan_mode_refused" | "permission_denied" | "tool_unavailable";
+    timestamp: string;
+    detail: string;
+    sessionId: string;
+}, {
+    type: "subagent.blocked";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    reason: "budget_exhausted" | "plan_mode_refused" | "permission_denied" | "tool_unavailable";
+    timestamp: string;
+    detail: string;
+    sessionId: string;
+}>;
+export declare const subagentFailedAuditEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"subagent.failed">;
+    taskId: z.ZodString;
+    role: z.ZodEnum<["orchestrator", "architect", "coder", "verifier", "reviewer", "researcher", "release", "devops", "design_qa"]>;
+    personaSlug: z.ZodString;
+    error: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "subagent.failed";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    timestamp: string;
+    error: string;
+    sessionId: string;
+}, {
+    type: "subagent.failed";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    timestamp: string;
+    error: string;
+    sessionId: string;
+}>;
+export declare const auditEventSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"session">;
+    name: z.ZodEnum<["created", "command_started", "command_completed"]>;
+    command: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<["success", "error"]>>;
+}, "strip", z.ZodTypeAny, {
+    type: "session";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    name: "created" | "command_started" | "command_completed";
+    status?: "error" | "success" | undefined;
+    command?: string | undefined;
+}, {
+    type: "session";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    name: "created" | "command_started" | "command_completed";
+    status?: "error" | "success" | undefined;
+    command?: string | undefined;
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"tool_call">;
+    tool: z.ZodString;
+    inputSummary: z.ZodString;
+    permissionDecision: z.ZodOptional<z.ZodDiscriminatedUnion<"decision", [z.ZodObject<{
+        decision: z.ZodLiteral<"allow">;
+        reason: z.ZodString;
+        source: z.ZodString;
+        expiresAt: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        decision: "allow";
+        reason: string;
+        source: string;
+        expiresAt?: string | undefined;
+    }, {
+        decision: "allow";
+        reason: string;
+        source: string;
+        expiresAt?: string | undefined;
+    }>, z.ZodObject<{
+        decision: z.ZodLiteral<"ask">;
+        reason: z.ZodString;
+        risk: z.ZodEnum<["low", "medium", "high"]>;
+    }, "strip", z.ZodTypeAny, {
+        decision: "ask";
+        reason: string;
+        risk: "low" | "medium" | "high";
+    }, {
+        decision: "ask";
+        reason: string;
+        risk: "low" | "medium" | "high";
+    }>, z.ZodObject<{
+        decision: z.ZodLiteral<"deny">;
+        reason: z.ZodString;
+        source: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        decision: "deny";
+        reason: string;
+        source: string;
+    }, {
+        decision: "deny";
+        reason: string;
+        source: string;
+    }>]>>;
+}, "strip", z.ZodTypeAny, {
+    type: "tool_call";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    tool: string;
+    inputSummary: string;
+    permissionDecision?: {
+        decision: "allow";
+        reason: string;
+        source: string;
+        expiresAt?: string | undefined;
+    } | {
+        decision: "ask";
+        reason: string;
+        risk: "low" | "medium" | "high";
+    } | {
+        decision: "deny";
+        reason: string;
+        source: string;
+    } | undefined;
+}, {
+    type: "tool_call";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    tool: string;
+    inputSummary: string;
+    permissionDecision?: {
+        decision: "allow";
+        reason: string;
+        source: string;
+        expiresAt?: string | undefined;
+    } | {
+        decision: "ask";
+        reason: string;
+        risk: "low" | "medium" | "high";
+    } | {
+        decision: "deny";
+        reason: string;
+        source: string;
+    } | undefined;
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"tool_result">;
+    toolCallId: z.ZodString;
+    status: z.ZodEnum<["success", "error", "cancelled"]>;
+    outputSummary: z.ZodString;
+    outputRef: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "tool_result";
+    status: "cancelled" | "error" | "success";
+    id: string;
+    timestamp: string;
+    toolCallId: string;
+    sessionId: string;
+    outputSummary: string;
+    outputRef?: string | undefined;
+}, {
+    type: "tool_result";
+    status: "cancelled" | "error" | "success";
+    id: string;
+    timestamp: string;
+    toolCallId: string;
+    sessionId: string;
+    outputSummary: string;
+    outputRef?: string | undefined;
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"file_mutation">;
+    toolCallId: z.ZodString;
+    path: z.ZodString;
+    operation: z.ZodEnum<["create", "update", "delete", "move"]>;
+    beforeBlob: z.ZodOptional<z.ZodString>;
+    afterBlob: z.ZodOptional<z.ZodString>;
+    beforeHash: z.ZodOptional<z.ZodString>;
+    afterHash: z.ZodOptional<z.ZodString>;
+    diffRef: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    path: string;
+    type: "file_mutation";
+    id: string;
+    timestamp: string;
+    toolCallId: string;
+    sessionId: string;
+    operation: "create" | "update" | "delete" | "move";
+    beforeBlob?: string | undefined;
+    afterBlob?: string | undefined;
+    beforeHash?: string | undefined;
+    afterHash?: string | undefined;
+    diffRef?: string | undefined;
+}, {
+    path: string;
+    type: "file_mutation";
+    id: string;
+    timestamp: string;
+    toolCallId: string;
+    sessionId: string;
+    operation: "create" | "update" | "delete" | "move";
+    beforeBlob?: string | undefined;
+    afterBlob?: string | undefined;
+    beforeHash?: string | undefined;
+    afterHash?: string | undefined;
+    diffRef?: string | undefined;
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"hook.invoked">;
+    event: z.ZodEnum<["SessionStart", "UserPromptSubmit", "PreToolUse", "PermissionRequest", "PostToolUse", "PostToolUseFailure", "Stop", "SessionEnd"]>;
+    matchSummary: z.ZodString;
+    runSummary: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "hook.invoked";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PostToolUseFailure" | "Stop" | "SessionEnd";
+    matchSummary: string;
+    runSummary: string;
+}, {
+    type: "hook.invoked";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PostToolUseFailure" | "Stop" | "SessionEnd";
+    matchSummary: string;
+    runSummary: string;
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"hook.result">;
+    event: z.ZodEnum<["SessionStart", "UserPromptSubmit", "PreToolUse", "PermissionRequest", "PostToolUse", "PostToolUseFailure", "Stop", "SessionEnd"]>;
+    ok: z.ZodBoolean;
+    exitCode: z.ZodNumber;
+    elapsedMs: z.ZodNumber;
+    stdoutLen: z.ZodNumber;
+    stderrLen: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    type: "hook.result";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PostToolUseFailure" | "Stop" | "SessionEnd";
+    ok: boolean;
+    exitCode: number;
+    elapsedMs: number;
+    stdoutLen: number;
+    stderrLen: number;
+}, {
+    type: "hook.result";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PostToolUseFailure" | "Stop" | "SessionEnd";
+    ok: boolean;
+    exitCode: number;
+    elapsedMs: number;
+    stdoutLen: number;
+    stderrLen: number;
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"hook.skipped">;
+    event: z.ZodEnum<["SessionStart", "UserPromptSubmit", "PreToolUse", "PermissionRequest", "PostToolUse", "PostToolUseFailure", "Stop", "SessionEnd"]>;
+    reason: z.ZodEnum<["dedup", "no-match", "untrusted-project"]>;
+}, "strip", z.ZodTypeAny, {
+    type: "hook.skipped";
+    id: string;
+    reason: "dedup" | "no-match" | "untrusted-project";
+    timestamp: string;
+    sessionId: string;
+    event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PostToolUseFailure" | "Stop" | "SessionEnd";
+}, {
+    type: "hook.skipped";
+    id: string;
+    reason: "dedup" | "no-match" | "untrusted-project";
+    timestamp: string;
+    sessionId: string;
+    event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PostToolUseFailure" | "Stop" | "SessionEnd";
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"compaction.started">;
+    tier: z.ZodEnum<["microcompact", "cached_microcompact", "reactive_summary", "session_memory", "full_compaction", "reset"]>;
+    trigger: z.ZodObject<{
+        budgetUsed: z.ZodNumber;
+        budgetMax: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        budgetUsed: number;
+        budgetMax: number;
+    }, {
+        budgetUsed: number;
+        budgetMax: number;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    type: "compaction.started";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    tier: "microcompact" | "cached_microcompact" | "reactive_summary" | "session_memory" | "full_compaction" | "reset";
+    trigger: {
+        budgetUsed: number;
+        budgetMax: number;
+    };
+}, {
+    type: "compaction.started";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    tier: "microcompact" | "cached_microcompact" | "reactive_summary" | "session_memory" | "full_compaction" | "reset";
+    trigger: {
+        budgetUsed: number;
+        budgetMax: number;
+    };
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"compaction.completed">;
+    tier: z.ZodEnum<["microcompact", "cached_microcompact", "reactive_summary", "session_memory", "full_compaction", "reset"]>;
+    bytesReclaimed: z.ZodNumber;
+    newContextSize: z.ZodNumber;
+    artifactsCreated: z.ZodArray<z.ZodObject<{
+        sha256: z.ZodString;
+        size: z.ZodNumber;
+        producedBy: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        sha256: string;
+        size: number;
+        producedBy: string;
+    }, {
+        sha256: string;
+        size: number;
+        producedBy: string;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    type: "compaction.completed";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    tier: "microcompact" | "cached_microcompact" | "reactive_summary" | "session_memory" | "full_compaction" | "reset";
+    bytesReclaimed: number;
+    newContextSize: number;
+    artifactsCreated: {
+        sha256: string;
+        size: number;
+        producedBy: string;
+    }[];
+}, {
+    type: "compaction.completed";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    tier: "microcompact" | "cached_microcompact" | "reactive_summary" | "session_memory" | "full_compaction" | "reset";
+    bytesReclaimed: number;
+    newContextSize: number;
+    artifactsCreated: {
+        sha256: string;
+        size: number;
+        producedBy: string;
+    }[];
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"compaction.skipped">;
+    tier: z.ZodEnum<["microcompact", "cached_microcompact", "reactive_summary", "session_memory", "full_compaction", "reset"]>;
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "compaction.skipped";
+    id: string;
+    reason: string;
+    timestamp: string;
+    sessionId: string;
+    tier: "microcompact" | "cached_microcompact" | "reactive_summary" | "session_memory" | "full_compaction" | "reset";
+}, {
+    type: "compaction.skipped";
+    id: string;
+    reason: string;
+    timestamp: string;
+    sessionId: string;
+    tier: "microcompact" | "cached_microcompact" | "reactive_summary" | "session_memory" | "full_compaction" | "reset";
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"compaction.invariant_violated">;
+    invariant: z.ZodEnum<["secrets-never-summarize", "open-decisions-preserved", "artifact-refs-resolvable", "static-hash-unchanged"]>;
+    evidence: z.ZodString;
+    artifactRef: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "compaction.invariant_violated";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    invariant: "secrets-never-summarize" | "open-decisions-preserved" | "artifact-refs-resolvable" | "static-hash-unchanged";
+    evidence: string;
+    artifactRef?: string | undefined;
+}, {
+    type: "compaction.invariant_violated";
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    invariant: "secrets-never-summarize" | "open-decisions-preserved" | "artifact-refs-resolvable" | "static-hash-unchanged";
+    evidence: string;
+    artifactRef?: string | undefined;
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"subagent.spawned">;
+    taskId: z.ZodString;
+    role: z.ZodEnum<["orchestrator", "architect", "coder", "verifier", "reviewer", "researcher", "release", "devops", "design_qa"]>;
+    personaSlug: z.ZodString;
+    parentSessionId: z.ZodString;
+    isolation: z.ZodEnum<["prompt_only", "shared_fs_readonly", "shared_fs_serialized", "worktree", "remote_vm"]>;
+}, "strip", z.ZodTypeAny, {
+    type: "subagent.spawned";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    parentSessionId: string;
+    isolation: "prompt_only" | "shared_fs_readonly" | "shared_fs_serialized" | "worktree" | "remote_vm";
+    timestamp: string;
+    sessionId: string;
+}, {
+    type: "subagent.spawned";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    parentSessionId: string;
+    isolation: "prompt_only" | "shared_fs_readonly" | "shared_fs_serialized" | "worktree" | "remote_vm";
+    timestamp: string;
+    sessionId: string;
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"subagent.tool_call">;
+    taskId: z.ZodString;
+    role: z.ZodEnum<["orchestrator", "architect", "coder", "verifier", "reviewer", "researcher", "release", "devops", "design_qa"]>;
+    personaSlug: z.ZodString;
+    toolName: z.ZodString;
+    toolCallId: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "subagent.tool_call";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    timestamp: string;
+    toolName: string;
+    toolCallId: string;
+    sessionId: string;
+}, {
+    type: "subagent.tool_call";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    timestamp: string;
+    toolName: string;
+    toolCallId: string;
+    sessionId: string;
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"subagent.completed">;
+    taskId: z.ZodString;
+    role: z.ZodEnum<["orchestrator", "architect", "coder", "verifier", "reviewer", "researcher", "release", "devops", "design_qa"]>;
+    personaSlug: z.ZodString;
+    toolCallCount: z.ZodNumber;
+    tokensIn: z.ZodNumber;
+    tokensOut: z.ZodNumber;
+    durationMs: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    type: "subagent.completed";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    toolCallCount: number;
+    tokensIn: number;
+    tokensOut: number;
+    durationMs: number;
+    timestamp: string;
+    sessionId: string;
+}, {
+    type: "subagent.completed";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    toolCallCount: number;
+    tokensIn: number;
+    tokensOut: number;
+    durationMs: number;
+    timestamp: string;
+    sessionId: string;
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"subagent.blocked">;
+    taskId: z.ZodString;
+    role: z.ZodEnum<["orchestrator", "architect", "coder", "verifier", "reviewer", "researcher", "release", "devops", "design_qa"]>;
+    personaSlug: z.ZodString;
+    reason: z.ZodEnum<["budget_exhausted", "plan_mode_refused", "permission_denied", "tool_unavailable"]>;
+    detail: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "subagent.blocked";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    reason: "budget_exhausted" | "plan_mode_refused" | "permission_denied" | "tool_unavailable";
+    timestamp: string;
+    detail: string;
+    sessionId: string;
+}, {
+    type: "subagent.blocked";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    reason: "budget_exhausted" | "plan_mode_refused" | "permission_denied" | "tool_unavailable";
+    timestamp: string;
+    detail: string;
+    sessionId: string;
+}>, z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodString;
+    timestamp: z.ZodString;
+} & {
+    type: z.ZodLiteral<"subagent.failed">;
+    taskId: z.ZodString;
+    role: z.ZodEnum<["orchestrator", "architect", "coder", "verifier", "reviewer", "researcher", "release", "devops", "design_qa"]>;
+    personaSlug: z.ZodString;
+    error: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "subagent.failed";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    timestamp: string;
+    error: string;
+    sessionId: string;
+}, {
+    type: "subagent.failed";
+    id: string;
+    role: "orchestrator" | "architect" | "coder" | "verifier" | "reviewer" | "researcher" | "release" | "devops" | "design_qa";
+    taskId: string;
+    personaSlug: string;
+    timestamp: string;
+    error: string;
+    sessionId: string;
+}>]>;
+export type AuditEvent = z.infer<typeof auditEventSchema>;
+export type CompactionTier = z.infer<typeof compactionTierSchema>;
+export type CompactionStartedEvent = z.infer<typeof compactionStartedEventSchema>;
+export type CompactionCompletedEvent = z.infer<typeof compactionCompletedEventSchema>;
+export type CompactionSkippedEvent = z.infer<typeof compactionSkippedEventSchema>;
+export type CompactionInvariantViolatedEvent = z.infer<typeof compactionInvariantViolatedEventSchema>;
+export type SubagentSpawnedAuditEvent = z.infer<typeof subagentSpawnedAuditEventSchema>;
+export type SubagentToolCallAuditEvent = z.infer<typeof subagentToolCallAuditEventSchema>;
+export type SubagentCompletedAuditEvent = z.infer<typeof subagentCompletedAuditEventSchema>;
+export type SubagentBlockedAuditEvent = z.infer<typeof subagentBlockedAuditEventSchema>;
+export type SubagentFailedAuditEvent = z.infer<typeof subagentFailedAuditEventSchema>;
+//# sourceMappingURL=audit-trace.d.ts.map