@robota-sdk/agent-session 3.0.7 → 3.1.2

package/dist/{node/index.d.ts → index.d.ts}

@@ -1,5 +1,6 @@
-import { ConversationAgent, ExecutionSuspendedError, IAIProvider, IAgentConfig, IContextWindowState, IEventService, IExecutionJournal, IHistoryEntry, IHookTypeExecutor, IPathProtectionPolicy, IProviderRegistrationOptions, IRecoverableExecutionJournal, IResponseFormatConfig, IResumeExecutionOptions, IRunTraceContext, ISpinner, ISubprocessTraceEnv, ITerminalOutput, IToolAppView, IToolExecutionContext, IToolExecutionResult, IToolResultSpillStore, IToolSchema, IToolWaitRequest, IToolWithEventService, IUserInteraction, TBackgroundPermissionPolicy, TModelEffort, TModelEffortSelection, TPermissionMode, TProviderOwnership, TSessionEndReason, TToolArgs, TToolChoice, TToolParameters, TUniversalMessage, TUniversalMessagePart, TUniversalValue } from "@robota-sdk/agent-core";
-import { ICompactEvent, IInteractiveSessionRecord, IInteractiveSessionRecord as IInteractiveSessionRecord$1, IInteractiveSessionRecord as ISessionRecord, IInteractiveSessionStore, IInteractiveSessionStore as IInteractiveSessionStore$1, IInteractiveSessionStore as ISessionStore, IPromptHistoryBlock, IPromptHistoryEntry, IPromptHistoryReadOptions, IPromptHistorySource, IPromptHistoryWriter, IRuntimeToolInvokeOptions, ISessionConversationSnapshot, ISessionListEntry, ISessionPendingExecution, ISessionRecordDecodeIssue, TCompactTrigger, TPermissionRequester, TPermissionResultValue, TSessionLoadOutcome } from "@robota-sdk/agent-interface-session";
+import { a as isSessionClaimedError, c as IExternalPayloadSink, d as IExternalPayloadReference, f as IFileSessionLoggerOptions, i as TSessionClaimRefusal, l as ISessionLogSink, m as TSessionLogValue, n as ISessionWriterHolder, o as IExternalPayloadSource, p as TSessionLogData, r as SessionClaimedError, s as ISessionLogSource, u as createSessionLogExternalPayloadReference } from "./session-claims-DELiAZkZ.js";
+import { ConversationAgent, ExecutionSuspendedError, IAIProvider, IAgentConfig, IContextWindowState, IEventService, IExecutionJournal, IHistoryEntry, IHookTypeExecutor, IPathProtectionPolicy, IProviderRegistrationOptions, IRecoverableExecutionJournal, IResponseFormatConfig, IResumeExecutionOptions, IRunTraceContext, ISpinner, ISubprocessTraceEnv, ITerminalOutput, IToolAppView, IToolExecutionContext, IToolExecutionResult, IToolSchema, IToolWaitRequest, IToolWithEventService, IUserInteraction, TBackgroundPermissionPolicy, TModelEffort, TModelEffortSelection, TPermissionMode, TProviderOwnership, TResolveInWorkspace, TSessionEndReason, TToolArgs, TToolChoice, TToolParameters, TUniversalMessage, TUniversalMessagePart, TUniversalValue } from "@robota-sdk/agent-core";
+import { ICompactEvent, IInteractiveSessionRecord, IInteractiveSessionRecord as IInteractiveSessionRecord$1, IInteractiveSessionRecord as ISessionRecord, IInteractiveSessionStore, IInteractiveSessionStore as IInteractiveSessionStore$1, IInteractiveSessionStore as ISessionStore, IRuntimeToolInvokeOptions, ISessionConversationSnapshot, ISessionPendingExecution, ISessionRecordDecodeIssue, TCompactTrigger, TPermissionRequester, TPermissionResultValue, TSessionLoadOutcome } from "@robota-sdk/agent-interface-session";
 //#region src/context-window-tracker.d.ts
 /** Auto-compact when context usage reaches this fraction */
 declare const AUTO_COMPACT_THRESHOLD = 0.835;
@@ -34,51 +35,6 @@ declare class ContextWindowTracker {
   reset(): void;
 }
 //#endregion
-//#region src/session-log-reference-types.d.ts
-/**
- * Leaf type module for {@link IExternalPayloadReference}.
- *
- * Split out of `session-logger.ts` so `session-log-sinks.ts` and `session-log-payload.ts` can
- * depend on this type without importing back from `session-logger.ts`, which previously created
- * import cycles among the three files.
- */
-interface IExternalPayloadReference {
-  kind: 'external-payload';
-  encoding: 'json';
-  sha256: string;
-  byteLength: number;
-  relativePath: string;
-}
-/** Session log event data — extensible record of event metadata. */
-type TSessionLogValue = string | number | boolean | object | null | undefined;
-type TSessionLogData = Record<string, TSessionLogValue>;
-interface IFileSessionLoggerOptions {
-  externalPayloadThresholdBytes?: number;
-  redactedValue?: string;
-}
-//#endregion
-//#region src/session-log-sinks.d.ts
-/** Canonical validation and construction for every session-log external-payload reference. */
-declare function createSessionLogExternalPayloadReference(sessionId: string, sha256: string, serialized: string): IExternalPayloadReference;
-/** Workspace-neutral sink for content-addressed external JSON payloads. */
-interface IExternalPayloadSink {
-  writeJson(sessionId: string, sha256: string, serialized: string): IExternalPayloadReference;
-}
-/** Workspace-neutral append sink for session-log bytes. */
-interface ISessionLogSink {
-  append(sessionId: string, text: string): void;
-  readonly externalPayloadSink?: IExternalPayloadSink;
-}
-/** Explicit host-filesystem sink for JSONL logs and their content-addressed sidecars. */
-declare class NodeSessionLogSink implements ISessionLogSink, IExternalPayloadSink {
-  private readonly logDirectory;
-  readonly externalPayloadSink: IExternalPayloadSink;
-  private readonly enabled;
-  constructor(logDirectory: string);
-  append(sessionId: string, text: string): void;
-  writeJson(sessionId: string, sha256: string, serialized: string): IExternalPayloadReference;
-}
-//#endregion
 //#region src/session-logger.d.ts
 /**
  * Session logger interface — injected into Session for pluggable logging.
@@ -106,6 +62,7 @@ interface ISessionLogger {
 declare class FileSessionLogger implements ISessionLogger {
   private readonly sink;
   private readonly options;
+  private readonly registerExitFlush;
   /** Buffered hot-path lines, per session file. Keyed by session id (CORE-029). */
   private readonly pending;
   private pendingBytes;
@@ -238,8 +195,19 @@ interface IPermissionEnforcerOptions {
    * lets it run without a prompt.
    */
   commandSandbox?: ICommandSandboxApproval;
-  /** Where `~` and `$HOME` point for critical-path removal checks. Defaults to the OS home directory. */
+  /**
+   * Where `~` and `$HOME` point for the gate's path checks. Absent, the home directory is unknown:
+   * a bare `~` is still refused as a critical target, but a path written under it is not expanded,
+   * so it cannot match a protected path.
+   */
   homeDirectory?: string;
+  /**
+   * Where a path a shell command names really is, symlinks followed (a host with a filesystem
+   * supplies it). Absent, a command with a path operand is not read-only.
+   */
+  resolveInWorkspace?: TResolveInWorkspace;
+  /** The host's canonical spelling of a directory; absent, a path is compared as written. */
+  canonicalizePath?: (path: string) => string;
   /**
    * ARCH-040 Group C (issue #1934): the rules BEFORE any preset contributed.
    *
@@ -269,8 +237,8 @@ interface IPermissionEnforcerOptions {
     /** The source's view of the result, for a surface that can host one; never model context. */
     view?: IToolAppView;
   }) => void;
-  /** Additional hook type executors (e.g. prompt, agent) beyond the core defaults. */
-  hookTypeExecutors?: IHookTypeExecutor[];
+  /** The executors that run hook handlers; required, there is no host default. */
+  hookTypeExecutors: readonly IHookTypeExecutor[];
   /** Absolute path to session transcript file — passed to PreToolUse hook inputs as transcript_path */
   transcriptPath?: string;
   /** Called when the user selects "allow for project" — persists the tool pattern to project settings. */
@@ -452,8 +420,31 @@ interface ISessionOptions {
   sessionLogger?: ISessionLogger;
   /** Host-projected transcript path for hook compatibility; never inferred from a record store. */
   transcriptPath?: string;
-  /** Additional hook type executors (e.g. prompt, agent) beyond the core defaults. */
-  hookTypeExecutors?: IHookTypeExecutor[];
+  /**
+   * The executors that run hook handlers. REQUIRED: the shell and HTTP executors drive a Node host,
+   * so a platform-neutral session has no default for them. A Node composition root passes
+   * `[new CommandExecutor(), new HttpExecutor()]` from `@robota-sdk/agent-core/node`, `[]` runs no
+   * handler — a configured hook is then reported as having no executor, not silently skipped.
+   */
+  hookTypeExecutors: readonly IHookTypeExecutor[];
+  /**
+   * Where `~` and `$HOME` point for the permission gate's path checks. Absent, the home directory is
+   * unknown: a bare `~` is still refused as a critical target, but a path written under it is not
+   * expanded, so it cannot match a protected path.
+   */
+  homeDirectory?: string;
+  /**
+   * Where a path a shell command names really is, symlinks followed, or `undefined` when outside the
+   * workspace (agent-core `TResolveInWorkspace`). Needs a filesystem, so a host supplies it; absent,
+   * a command with a path operand is not judged read-only.
+   */
+  resolveInWorkspace?: TResolveInWorkspace;
+  /**
+   * The host's canonical spelling of a directory (symlinks followed), used to compare the session's
+   * `cwd` with the one a saved snapshot, journal or approval names. Absent, the path is compared as
+   * written.
+   */
+  canonicalizePath?: (path: string) => string;
   /** Name reported to the ConversationAgent agent config. Defaults to 'agent' if not provided. */
   agentName?: string;
   /**
@@ -647,8 +638,8 @@ interface ICompactionOptions {
    * formatted conversation are appended after it.
    */
   basePrompt?: string;
-  /** Additional hook type executors (e.g. prompt, agent) beyond the core defaults. */
-  hookTypeExecutors?: IHookTypeExecutor[];
+  /** The executors that run hook handlers; required, there is no host default. */
+  hookTypeExecutors: readonly IHookTypeExecutor[];
 }
 declare class CompactionOrchestrator {
   private readonly sessionId;
@@ -657,7 +648,7 @@ declare class CompactionOrchestrator {
   private readonly hooks?;
   private readonly compactInstructions?;
   private readonly basePrompt?;
-  private readonly hookTypeExecutors?;
+  private readonly hookTypeExecutors;
   constructor(options: ICompactionOptions);
   setModel(model: string): void;
   /**
@@ -711,7 +702,7 @@ declare class PermissionEnforcer {
   private readonly promptForApprovalFn?;
   private readonly sessionLogger?;
   private readonly onToolExecution?;
-  private readonly hookTypeExecutors?;
+  private readonly hookTypeExecutors;
   private readonly transcriptPath?;
   /**
    * Issue #2351: consent is remembered as PATTERNS (`consentScopeFor`), not tool names, and read
@@ -726,6 +717,7 @@ declare class PermissionEnforcer {
   private readonly pathProtection;
   private readonly homeDirectory;
   private readonly resolveInWorkspace;
+  private readonly canonicalizePath;
   private readonly commandSandbox?;
   private readonly denials;
   /** A turn a peer's message started is in progress: the one place the reply to that peer exists. */
@@ -1037,7 +1029,8 @@ declare class Session extends SessionBase {
   private readonly sessionStore?;
   private readonly checkpointHistoryCallback?;
   private readonly hooks?;
-  private readonly hookTypeExecutors?;
+  private readonly hookTypeExecutors;
+  private readonly canonicalizePath;
   private readonly onTextDeltaCallback?;
   private readonly onThinkingDeltaCallback?;
   private readonly onContextUpdateCallback?;
@@ -1332,98 +1325,6 @@ declare function decodeSessionLogEntries(entries: unknown, options?: {
   lineNumbers?: readonly number[];
 }): TDecodedSessionLogEntry[];
 //#endregion
-//#region src/external-payload-source-types.d.ts
-/**
- * Leaf type module for {@link IExternalPayloadSource} and {@link ISessionLogSource}.
- *
- * Split out of `session-log-sources.ts` so `external-payload-resolution-contracts.ts` can depend
- * on {@link IExternalPayloadSource} without importing back from `session-log-sources.ts`, which
- * previously created an import cycle between the two.
- */
-/** Workspace-neutral byte source for relative external-payload references. */
-interface IExternalPayloadSource {
-  readBytes(relativePath: string, maxBytes: number): Uint8Array | undefined;
-}
-/** Workspace-neutral source for one session-log document and its optional payload source. */
-interface ISessionLogSource {
-  readText(): string | undefined;
-  readonly externalPayloadSource?: IExternalPayloadSource;
-}
-//#endregion
-//#region src/session-log-sources.d.ts
-/** Explicit host-filesystem adapter. A file path is never accepted by the neutral parser itself. */
-declare class NodeExternalPayloadSource implements IExternalPayloadSource {
-  private readonly baseDirectory;
-  constructor(baseDirectory: string);
-  readBytes(relativePath: string, maxBytes: number): Uint8Array | undefined;
-}
-/** Explicit host-filesystem adapter for a JSONL session log. */
-declare class NodeSessionLogSource implements ISessionLogSource {
-  private readonly logFile;
-  readonly externalPayloadSource: IExternalPayloadSource;
-  constructor(logFile: string);
-  readText(): string | undefined;
-}
-//#endregion
-//#region src/tool-result-spill-store.d.ts
-type TToolResultSpillErrorCode = 'invalid-options' | 'unsafe-root' | 'write-failed' | 'missing' | 'expired' | 'invalid-reference' | 'read-failed' | 'cleanup-failed' | 'closed';
-declare class ToolResultSpillError extends Error {
-  readonly code: TToolResultSpillErrorCode;
-  constructor(code: TToolResultSpillErrorCode);
-}
-interface INodeToolResultSpillStoreOptions {
-  /** Host-owned parent; defaults to the operating-system temporary directory. */
-  readonly parentDirectory?: string;
-  readonly retentionMs?: number;
-  readonly now?: () => number;
-  /** Receives a fixed, payload-free reason if an idle expiry timer cannot delete a file. */
-  readonly onCleanupFailure?: (reason: 'cleanup-failed') => void;
-}
-/** Node host implementation of core's opaque, session-lifetime spill port. */
-declare class NodeToolResultSpillStore implements IToolResultSpillStore {
-  private readonly directory;
-  private readonly retentionMs;
-  private readonly now;
-  private readonly onCleanupFailure?;
-  private readonly entries;
-  private expiryTimer?;
-  private closed;
-  constructor(options?: INodeToolResultSpillStoreOptions);
-  private assertRoot;
-  private scheduleExpiry;
-  write(content: string): Promise<{
-    readonly reference: string;
-  }>;
-  read(reference: string): Promise<string>;
-  private removeEntry;
-  cleanupExpired(): Promise<void>;
-  shutdown(): Promise<void>;
-}
-//#endregion
-//#region src/prompt-history-file.d.ts
-/** 64 KiB: a few hundred prompts per block — enough for the first frame, small enough to yield often. */
-declare const DEFAULT_PROMPT_HISTORY_BLOCK_BYTES: number;
-interface INodePromptHistoryFileOptions {
-  /** An ancestor of the file the host also owns, tightened along with the directory (SEC-020). */
-  readonly ownedRoot?: string;
-  /** Test seam: the read block size in bytes. */
-  readonly blockBytes?: number;
-}
-/** One line → an entry, or `undefined` when the line is not a well-formed entry. */
-declare function parsePromptHistoryLine(line: string): IPromptHistoryEntry | undefined;
-declare class NodePromptHistoryFile implements IPromptHistoryWriter, IPromptHistorySource {
-  private readonly path;
-  private readonly blockBytes;
-  private readonly ownedRoot;
-  constructor(path: string, options?: INodePromptHistoryFileOptions);
-  append(entry: IPromptHistoryEntry): void;
-  /**
-   * Newest-first blocks. Only a missing file is the empty state (a fresh install, or history off);
-   * any other open or read failure is thrown so the surface renders it instead of an empty list.
-   */
-  read(options: IPromptHistoryReadOptions): AsyncIterable<IPromptHistoryBlock>;
-}
-//#endregion
 //#region src/external-payload-resolution-contracts.d.ts
 type TSessionLogPayloadResolutionErrorCode = 'INVALID_LIMIT' | 'INVALID_REFERENCE' | 'UNRESOLVED_REFERENCE' | 'OUTSIDE_ROOT' | 'PAYLOAD_NOT_FOUND' | 'STABLE_PAYLOAD_READ_UNAVAILABLE' | 'PAYLOAD_UNREADABLE' | 'BYTE_LENGTH_MISMATCH' | 'SHA256_MISMATCH' | 'INVALID_JSON' | 'MAX_DEPTH_EXCEEDED' | 'MAX_TOTAL_BYTES_EXCEEDED' | 'CIRCULAR_REFERENCE';
 interface ISessionLogPayloadResolutionOptions {
@@ -1496,101 +1397,57 @@ declare function isSafeSessionId(id: string): boolean;
 /** Throw unless `id` is safe to use as a path component. */
 declare function assertSafeSessionId(id: string): void;
 //#endregion
-//#region src/session-store.d.ts
+//#region src/load-session-for-update.d.ts
 /**
- * Persistent session store backed by individual JSON files.
+ * What a writer should read before it saves, to keep the members of a record it does not own.
  *
- * Construct with a host-owned `baseDir`; framework project composition uses a separate
- * authority-backed adapter over the same neutral port.
+ * `load` is the answer, asked to `hold` the session, since the caller is about to save it: a store
+ * that seals then remembers the record it opened, so the process can keep saving after the keys lock.
+ * Sealing needs only the public key, so a process running a session keeps saving it after the lock —
+ * but `load` then says `locked`, and a writer that stops on that would stop saving the whole
+ * conversation. The store that wrote or holds the record still has that copy, and hands it back for
+ * as long as the file on disk is exactly what it remembers. Anything else stays `locked`, and the
+ * writer refuses.
  */
-declare class NodeSessionStore implements IInteractiveSessionStore$1 {
-  private readonly baseDir;
-  private readonly ownedRoot;
-  /**
-   * @param baseDir the directory holding the records.
-   * @param ownedRoot an ancestor of `baseDir` the HOST also owns, tightened along with it (SEC-020).
-   *   Optional because this adapter does not interpret its base directory as a trusted root and must
-   *   not guess that a parent belongs to the product — which of them do is composition's knowledge.
-   *   Omitting it leaves a store root an older version created at whatever mode it was given, which
-   *   is what review of PR #2224 found: the leaf was 0700 and the directory above it was not.
-   */
-  constructor(baseDir: string, ownedRoot?: string);
-  /**
-   * Ensure the storage directory exists AND that only its owner can enter it (SEC-020).
-   *
-   * The `existsSync` guard this replaces is the whole defect. It skipped the case that matters: a
-   * directory some earlier version, a shared CI checkout, or another local user left at a wider
-   * mode was adopted as ours with no signal. Measured under umask 022 before this change, a fresh
-   * sessions directory came out 0755 and its records 0644 — and a directory pre-created at 0777
-   * stayed 0777.
-   */
-  private ensureDir;
-  /**
-   * Absolute path to a session's JSON file.
-   *
-   * SEC-006: every public method routes through here, so validating the id at this one point covers
-   * `save` (write), `load` (read), and `delete` (unlink) at once.
-   *
-   * Issue #2240: `assertSafeSessionId` is the guard, and it is sound — no separator, no `.`/`..`
-   * can pass it. But it is a regex reject behind a helper, which static analysis does not model as
-   * a path sanitizer, so `js/path-injection` re-opened on `load` every time this function changed
-   * length. The containment check below is the shape such tools DO recognise: the resolved path
-   * must stay inside the resolved base directory. It is unreachable after the assertion and costs
-   * one `resolve`; it exists so the guard is visible where the sink is, not to replace the guard.
-   */
-  private filePath;
-  /**
-   * Persist a session record to disk atomically (CORE-019).
-   * Creates the storage directory if needed.
-   *
-   * Bytes go to a same-directory temp file first, then move into place with rename —
-   * a crash mid-write can therefore never leave a truncated JSON where the previous
-   * record used to be. Same-directory is load-bearing: cross-device rename is a copy.
-   *
-   * SEC-020: the atomic write now comes from `writeOwnerOnlyFile`, which carries the mode from the
-   * moment the temp file is created. The hand-rolled version here wrote it at the umask's default
-   * and let `rename` carry that mode to the final path, so every record was 0644 — and even setting
-   * the mode after the write would leave a window in which the full transcript was world-readable
-   * on disk.
-   */
-  save(session: IInteractiveSessionRecord$1): void;
-  /**
-   * Load a session by its ID, saying WHICH of the four things happened.
-   *
-   * `undefined` used to answer all four — never saved, damaged, written by a build this one cannot
-   * read, and the read failed — and a caller that meant to preserve fields it does not own then
-   * treated "damaged" as "no prior record" and overwrote the file. The outcome type is what removes
-   * that, by making the caller answer the question it was not asking.
-   */
-  load(id: string): TSessionLoadOutcome;
-  /**
-   * Every session this directory holds, each with what the store concluded about it.
-   *
-   * Unreadable entries are REPORTED rather than skipped. A store that distinguishes four outcomes on
-   * `load` and then hides two of them from the surface a person browses has moved the defect rather
-   * than removed it: the difference a user experiences is between "my session vanished" and "my
-   * session needs a different build".
-   */
-  list(): readonly ISessionListEntry[];
-  /**
-   * The outcome for one directory entry, without letting a bad NAME throw out of `list`.
-   *
-   * `load` validates the id, because an id reaching it is a caller's value and a malformed one is a
-   * bug or an attack (SEC-006). A name read out of the directory is neither: the store did not
-   * choose it, and one file it cannot use as an id must not take the whole listing down with it.
-   * Routing `list` through `load` made exactly that happen — a single `my session.json` in the
-   * sessions directory threw, and the resume picker went with it.
-   *
-   * Reporting it is the same answer `list` gives for every other file it cannot read, which is the
-   * property this work exists to establish.
-   */
-  private outcomeForListedId;
-  /**
-   * Delete a session by its ID.
-   * No-ops silently if the session does not exist.
-   */
-  delete(id: string): void;
+declare function loadSessionForUpdate(store: IInteractiveSessionStore$1, id: string): TSessionLoadOutcome;
+//#endregion
+//#region src/sealed-session-refusal.d.ts
+/**
+ * Why a store refused to replace the file at a session's path: each reason is something the store
+ * saw, not a guess about who wrote what. Fixed text and the session id only.
+ */
+/** Why a save was refused. */
+type TSealedSessionRefusal =
+/** A sealed file it cannot open while the keys are locked, and has no proof it wrote or holds. */
+'locked' |
+/** A sealed file that does not open here: damaged, or sealed with other keys that may still open it. */
+'does-not-open' |
+/** A sealed file it cannot open, and different from the bytes it last wrote or held. */
+'changed' |
+/** A file it could not read, or one too large for it to read back. */
+'unreadable' |
+/** A file sealed in a framing version this build does not open, so written by a newer one. */
+'newer-format' |
+/** A sealed file, and this store seals nothing, so this process has no keys for it at all. */
+'no-keys';
+/**
+ * Thrown by a store's `save` when the file already at that id may be a session nobody here can
+ * read: sealed and not openable by this store, not provably what this store wrote or holds, not
+ * readable at all, or sealed by a newer build. Overwriting would destroy what may be the only copy
+ * of a session — `locked` is intact and a later unlock reads it, and a sealed file that does not open
+ * here may open under other keys — so the save is refused and the file is left exactly as it was.
+ */
+declare class SealedSessionUnreadableError extends Error {
+  readonly code: "SESSION_SEALED_UNREADABLE";
+  readonly sessionId: string;
+  readonly reason: TSealedSessionRefusal;
+  constructor(sessionId: string, reason: TSealedSessionRefusal);
 }
+/**
+ * Whether `error` is a {@link SealedSessionUnreadableError}, by `code`: this package ships an ES and
+ * a CommonJS build, and a process that loads both has two classes an `instanceof` cannot match across.
+ */
+declare function isSealedSessionUnreadableError(error: unknown): error is SealedSessionUnreadableError;
 //#endregion
 //#region src/checkpoint-tree.d.ts
 /**
@@ -1643,7 +1500,8 @@ declare class CheckpointTree {
   /**
    * The chain from `id` up to (and including) the root — nearest first. Empty if `id` is unknown. Only
    * REGISTERED nodes are included: a dangling `parentId` (edge to a node not in the tree — possible on
-   * manifest drift/corruption) terminates the walk rather than emitting a phantom id.
+   * manifest drift/corruption) terminates the walk rather than emitting a phantom id, and so does an
+   * edge back to a node already in the chain, which only damaged edges can form.
    */
   ancestors(id: string): string[];
   /** Whether a checkpoint id exists in the tree. */
@@ -1726,5 +1584,5 @@ declare function decodeInteractiveSessionRecord(value: unknown): TSessionRecordD
  */
 declare function decodeVersionedInteractiveSessionRecord(value: unknown): TSessionRecordDecodeOutcome;
 //#endregion
-export { AUTO_COMPACT_THRESHOLD, AutoModeGate, CONSECUTIVE_BLOCK_LIMIT, CheckpointTree, CompactionError, CompactionOrchestrator, ContextWindowTracker, DEFAULT_COMPACTION_PROMPT, DEFAULT_PROMPT_HISTORY_BLOCK_BYTES, FileSessionLogger, type ICheckpointNode, type IClassifiedCall, type IClassifierVerdict, type ICommandSandboxApproval, type IExternalPayloadReference, type IExternalPayloadSink, type IExternalPayloadSource, type IFileSessionLoggerOptions, type IInteractiveSessionRecord, type IInteractiveSessionStore, INTERACTIVE_SESSION_RECORD_KEYS, type INodePromptHistoryFileOptions, type INodeToolResultSpillStoreOptions, type IPermissionAskContext, type IPermissionClassifier, type IPermissionDenial, type IProviderCallTraceObservation, type IProviderEventKey, type ISerializeSessionArtifactOptions, type ISessionLogEntry, type ISessionLogLine, type ISessionLogLoadOptions, type ISessionLogPayloadResolutionErrorMetadata, type ISessionLogPayloadResolutionOptions, type ISessionLogSink, type ISessionLogSource, type ISessionLogger, type ISessionOptions, type ISessionPendingExecution, type ISessionRecord, type ISessionRecoverableRunOptions, type ISessionReplayRecord, type ISessionReplayValidationIssue, type ISessionReplayValidationResult, type ISessionRunOptions, type ISessionShutdownOptions, type ISessionStore, type ISpinner, type ITerminalOutput, type IToolEventKey, type IVersionedInteractiveSessionRecord, NodeExternalPayloadSource, NodePromptHistoryFile, NodeSessionLogSink, NodeSessionLogSource, NodeSessionStore, NodeToolResultSpillStore, PermissionEnforcer, SENSITIVE_KEY_PATTERN, SESSION_LOG_EVENT, SESSION_LOG_SCHEMA_VERSION, SESSION_RECORD_ENVELOPE_VERSION, Session, SessionBusyError, SessionLogDecodeError, SessionLogPayloadResolutionError, SilentSessionLogger, type TAutoCompactThreshold, type TAutoModeJudgement, type TDecodedSessionLogEntry, TOTAL_BLOCK_LIMIT, type TPermissionDenialReason, type TPermissionHandler, type TPermissionRequester, type TPermissionResult, type TScrubbableValue, type TSessionExecutionResult, type TSessionLogData, type TSessionLogDecodeErrorCode, type TSessionLogEventName, type TSessionLogPayloadResolutionErrorCode, type TSessionLogValue, type TSessionRecordDecodeOutcome, type TSessionRecoverableResumeOptions, type TSessionResumeOptions, type TToolResultSpillErrorCode, ToolResultSpillError, TurnClaim, assertSafeSessionId, consentScopeFor, createSessionLogExternalPayloadReference, decodeInteractiveSessionRecord, decodeSessionLogEntries, decodeVersionedInteractiveSessionRecord, deserializeSessionArtifact, formatConversationEntries, isSafeSessionId, isSensitiveKey, isSessionLogEvent, loadSessionLogEntries, parsePromptHistoryLine, replaySessionLogEntries, resolveSessionLogExternalPayloads, scrubSensitiveKeys, serializeSessionArtifact, validateSessionReplayLogEntries };
+export { AUTO_COMPACT_THRESHOLD, AutoModeGate, CONSECUTIVE_BLOCK_LIMIT, CheckpointTree, CompactionError, CompactionOrchestrator, ContextWindowTracker, DEFAULT_COMPACTION_PROMPT, FileSessionLogger, type ICheckpointNode, type IClassifiedCall, type IClassifierVerdict, type ICommandSandboxApproval, type IExternalPayloadReference, type IExternalPayloadSink, type IExternalPayloadSource, type IFileSessionLoggerOptions, type IInteractiveSessionRecord, type IInteractiveSessionStore, INTERACTIVE_SESSION_RECORD_KEYS, type IPermissionAskContext, type IPermissionClassifier, type IPermissionDenial, type IProviderCallTraceObservation, type IProviderEventKey, type ISerializeSessionArtifactOptions, type ISessionLogEntry, type ISessionLogLine, type ISessionLogLoadOptions, type ISessionLogPayloadResolutionErrorMetadata, type ISessionLogPayloadResolutionOptions, type ISessionLogSink, type ISessionLogSource, type ISessionLogger, type ISessionOptions, type ISessionPendingExecution, type ISessionRecord, type ISessionRecoverableRunOptions, type ISessionReplayRecord, type ISessionReplayValidationIssue, type ISessionReplayValidationResult, type ISessionRunOptions, type ISessionShutdownOptions, type ISessionStore, type ISessionWriterHolder, type ISpinner, type ITerminalOutput, type IToolEventKey, type IVersionedInteractiveSessionRecord, PermissionEnforcer, SENSITIVE_KEY_PATTERN, SESSION_LOG_EVENT, SESSION_LOG_SCHEMA_VERSION, SESSION_RECORD_ENVELOPE_VERSION, SealedSessionUnreadableError, Session, SessionBusyError, SessionClaimedError, SessionLogDecodeError, SessionLogPayloadResolutionError, SilentSessionLogger, type TAutoCompactThreshold, type TAutoModeJudgement, type TDecodedSessionLogEntry, TOTAL_BLOCK_LIMIT, type TPermissionDenialReason, type TPermissionHandler, type TPermissionRequester, type TPermissionResult, type TScrubbableValue, type TSealedSessionRefusal, type TSessionClaimRefusal, type TSessionExecutionResult, type TSessionLogData, type TSessionLogDecodeErrorCode, type TSessionLogEventName, type TSessionLogPayloadResolutionErrorCode, type TSessionLogValue, type TSessionRecordDecodeOutcome, type TSessionRecoverableResumeOptions, type TSessionResumeOptions, TurnClaim, assertSafeSessionId, consentScopeFor, createSessionLogExternalPayloadReference, decodeInteractiveSessionRecord, decodeSessionLogEntries, decodeVersionedInteractiveSessionRecord, deserializeSessionArtifact, formatConversationEntries, isSafeSessionId, isSealedSessionUnreadableError, isSensitiveKey, isSessionClaimedError, isSessionLogEvent, loadSessionForUpdate, loadSessionLogEntries, replaySessionLogEntries, resolveSessionLogExternalPayloads, scrubSensitiveKeys, serializeSessionArtifact, validateSessionReplayLogEntries };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/context-window-tracker.ts","../src/session-logger.ts","../src/auto-mode-gate.ts","../src/permission-types.ts","../src/session-types.ts","../src/session-resume.ts","../src/session-recoverable.ts","../src/turn-claim.ts","../src/compaction-orchestrator.ts","../src/permission-denial-log.ts","../src/permission-enforcer.ts","../src/session-base.ts","../src/session.ts","../src/consent-scope.ts","../src/conversation-transcript.ts","../src/session-artifact.ts","../src/scrub-sensitive.ts","../src/session-log-events.ts","../src/session-log-entry-types.ts","../src/session-log-codec/index.ts","../src/external-payload-resolution-contracts.ts","../src/external-payload-resolver.ts","../src/session-log-validation.ts","../src/session-log-replay.ts","../src/session-id.ts","../src/load-session-for-update.ts","../src/sealed-session-refusal.ts","../src/checkpoint-tree.ts","../src/session-record-codec/decode-outcome.ts","../src/session-record-codec/record-decoder.ts"],"mappings":";;;;;cAca;KAED;cAEC;UACH;UACA;mBACS;UACT;EAGN,YAAA,eACA,2BACA,uBAAuB;;EAQzB,mBAAmB;;EAcnB,kBAAkB,kBAAkB;;EAWpC,SAAS;;EAKT,2BAA2B;;EAK3B,wBAAwB,sBAAsB;;;;;;;;;;EAa9C,kBAAkB,SAAS;;EAK3B;;;;;;;;;;UCAe;;EAEf,IAAI,mBAAmB,eAAe,MAAM;;;;;;;EAO5C;;;;;;;;cASW,6BAA6B;mBAQrB;mBAPF;mBACA;;mBAEA;UACT;EAGW,YAAA,MAAM,iBACvB,UAAS;EAUX,IAAI,mBAAmB,eAAe,MAAM;;EAuC5C;UAkBQ;UAaA;UAIA;;cASG,+BAA+B;EAC1C;;;;;UClMe;WACN;WACA,UAAU;WACV;;UAGM;WACN;;WAEA;;;;;;;UAQM;EACf,SAAS,MAAM,iBAAiB,SAAS,cAAc,QAAQ;;;cAIpD;cACA;;KAGD;WACG;;WACA;WAAwB;WAAyB;;WACjD;WAA2B;WAAyB;;cAMtD;mBAOkB;UANrB;UACA;UACA;;mBAES;EAEY,YAAA,YAAY;;EAGzC;;EAKA;;EAMA,WAAW,kBAAkB,UAAU;;EAKvC,UAAU,kBAAkB,UAAU;EAIhC,MAAM,MAAM,iBAAiB,SAAS,cAAc,QAAQ;;;;;UCvDnD;;;;;EAKf,aAAa,kBAAkB;;;;;;;;;;;;;KAcrB,oBAAoB;;;;;;;;;;;;;;UAef;WACN,YAAY;WACZ,SAAS;WACT;;;;;;KAOC,sBACV,kBACA,UAAU,WACV,UAAU,0BACP,QAAQ;UAEI;WACN,iBAAiB;EAC1B;EACA;EACA,yBAAyB;EACzB;;IAEE;MAAe;MAAiB;MAAgB;;IAChD,QAAQ;;;;;;EAMV,iBAAiB;;;;;;EAMjB;;;;;EAKA,qBAAqB;;EAErB,oBAAoB;;;;;;;;;;EAUpB;IAA0B;IAA0B;;EACpD,UAAU;EACV,oBAAoB;EACpB,uBACE,UAAU,iBACV,kBACA,UAAU,cACP,QAAQ;EACb,gBAAgB;EAChB,mBAAmB;IACjB;IACA;IACA,WAAW;IACX;IACA;IACA;IACA,kBAAkB;IAClB;;IAEA,OAAO;;;EAGT,4BAA4B;;EAE5B;;EAEA,sBAAsB;;;;;;EAMtB,mBAAmB;;;;;EAKnB;IAAoB;IAA2B;;;;;;EAK/C,uBAAuB;;;;;UC5GR;EACf,SAAS;;;UAIM;WACN,iBAAiB;;EAE1B,OAAO;;EAEP,sBAAsB;;;;;;EAMtB,kBAAkB,OAAO,4BAA4B;;EAErD,UAAU;;EAEV,oBAAoB;;EAEpB;;EAEA,UAAU;;;;;;;;;;;;;;EAcV;;EAEA;IAAgB;IAAiB;IAAgB;;;;;;;;;;;EAUjD;IAA0B;IAA0B;;EACpD,QAAQ;;EAER,iBAAiB;;;;;;EAMjB,mBAAmB;;EAEnB;IAAoB;IAA2B;;;;;;EAK/C,MAAM;;EAEN;;EAEA;;;;;EAKA;;EAEA;;EAEA;;EAEA;;EAEA,eAAe;;EAEf;;EAEA;;EAEA,oBAAoB;;EAEpB,iBAAiB;;EAEjB,uBAAuB;;EAEvB,sBAAsB;;EAEtB,eAAe;;EAEf,mBAAmB;;EAEnB,mBAAmB,OAAO;;EAE1B,qBACE,UAAU,iBACV,kBACA,UAAU,cACP,QAAQ;;EAEb,mBAAmB;IACjB;IACA;IACA,WAAW;IACX;IACA;IACA;IACA,kBAAkB;IAClB;;IAEA,OAAO;;;EAGT,aAAa;;EAEb,kBAAkB,OAAO;;EAEzB;;;;;;EAMA;;;;;;;;EAQA;;EAEA;;EAEA,uBAAuB;;EAEvB,gBAAgB;;EAEhB;;;;;;;EAOA,4BAA4B;;;;;;EAM5B;;;;;;EAMA,qBAAqB;;;;;;EAMrB,oBAAoB;;EAEpB;;;;;EAKA,iBAAiB;;;;;EAKjB,SAAS;;;;;;;;;EAST;EACA;;;;;;;;UASe;;EAEf,mBAAmB;;EAEnB,SAAS;;;;;EAKT;;;;;EAKA;;EAEA;;EAEA,aAAa;;;;;;EAMb;;EAEA,eAAe;;UAGA;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;;WAEA;;;;KCjSC,wBAAwB,KAClC;;;UCSe,sCAAsC;EACrD,kBAAkB;;KAER,mCAAmC,wBAC7C,KAAK;KACK;EACN;EAAqB;;EACrB;EAAmB,mBAAmB;;;;;;;;;;;;cCb/B,yBAAyB;;WAE3B;EAEG,YAAA;;;;;;;;;;;;;;;;;;;;;cAyBD;UACH;UACA;UACA;;MAGJ,WAAW;;;;;;;;;;EAaf,SAAS;;;;;;;;EAqBT,QAAQ,YAAY;;;;;;;;;;;;;;;EAsBpB;EAIA;;;;;;;;;cCtEW,wBAAwB;EACvB,YAAA;;;;;;;;cAYD;UASI;EACf;EACA;EACA;EACA,QAAQ;EACR;;;;;;EAMA;;EAEA,4BAA4B;;cAGjB;mBACM;mBACA;UACT;mBACS;mBACA;mBACA;mBACA;EAEL,YAAA,SAAS;EAarB,SAAS;;;;;;;;;;;;;;;;EAmBH,QACJ,UAAU,aACV,SAAS,qBACT,uBACA,SAAS,aACT,UAAS,iBACT,eAAe,qBACf,mBAAmB,oBAClB;;UA+FK;;;;;;;;;;;KCpME;UAEK;WACN;;WAEA;WACA,QAAQ;;WAER;;WAEA;;;;cC2DE;mBACM;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;;;;;mBAKA;;mBAEA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;;UAET;UACA;mBACS;EAEL,YAAA,SAAS;;;;;EA0CrB,UAAU,mBAAmB;;EAM7B;;EAMA;;;;;EAQA,mBAAmB,gBAAgB;;UAW3B;;;;;;EAqBR,cAAc;;;;;UAeN;;EAgBR,UAAU,OAAO,0BAA0B;;EAqC3C;;EAKA,6BAA6B;;EAK7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+BA;IACE;IACA;IACA;;EASF,qBAAqB;IACnB;IACA;;;;EAeI,gBACJ,kBACA,UAAU,WACV,SAAS,aACT,cAAa,gDACb,eAAe,wCACd;;;;;;;EAYG,uBACJ,kBACA,gBAAgB,iBAChB,SAAS,cACR;;UA0BW;UAkCA;UAkFA;;;;;;UA6CA;;;;;;UAkEN;;UA8BA;;UASA;;;;uBCvoBY;WACX;8BACmB,OAAO;8BACP,oBAAoB;8BACpB,gBAAgB;8BAChB,wBAAwB;qBACjC,gBAAgB;qBAChB;qBACA;8BACS;8BACA,YAAY;8BACZ,aAAa;qBACtB;qBACA;qBACA;;qBAEA;YAEV,YAAa;;;;;;qBAQH,WAAS;mBACX;EAEjB,qBAAqB;;EAKrB,kBAAkB,MAAM;;EAMxB,uBAAuB,QAAQ,MAAM;;EAMrC;;;;;;EASA,kBAAkB;;EAKlB;;EAKA,4BAA4B;EAI5B;;;;;;;;EAWA;EAIA;;;;;;;;;EAYA,oBAAoB;;;;;;;;EAad,kBAAkB;IACtB;IACA,SAAS;IACT;IACA;MACE;YAkBM,eAAe;;EAOzB,kBAAkB;;EAiBZ,sBAAsB,GAAG,QAAQ,cAAc,iBAAiB,QAAQ,KAAK,QAAQ;;;;;;;;;;;EAoBrF,eAAe,eAAe;EAIpC,kBAAkB;EAIlB;;;;;;;;;;EAaA,qBAAqB;IACnB;IACA;;;;;;;EAUF;IAAwB;IAAiB;IAAgB;;EAKzD;;;;;;;EAUA,oBACE,kBACA,gBAAgB,iBAChB,SAAS,cACR;;YAKO,qBAAqB,MAAM;;;;;;EAWrC,sBAAsB,gBAAgB;;EAKtC,uCAAuC;EAIvC;;EAKA;EAIA;EAIA,mBAAmB;;EAKnB;EAIA,2BAA2B;EAI3B,wBAAwB;EAIxB,cAAc;EAId,kBAAkB;EAIlB;IAA0B;IAAqB;;EAc/C;;;;;;;;EAWA,yBAAyB;;EAKzB,eAAe;EAIf;;EAKA,gBAAgB,OAAO;;EAMvB,cACE,gDACA,iBACA;IAAY;IAAqB;;;;;;EAUnC,iBAAiB,KAAK;EAKtB;;;;;cCrRW,gBAAgB;qBACR,OAAO;;;;;;qBAMP,cAAc;qBACd,oBAAoB;qBACpB,gBAAgB;YACzB,gBAAgB;YAChB;YACA;qBACS;YACT,YAAY;qBACH,aAAa;YACtB;YACA;YACA;mBACO;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;qBACE,wBAAwB;mBAC1B;mBACA;;mBAEA;;UAET;UACA;;UAEA;UASA;cAEI;UAGJ;UAIA;;UAEA;;mBAES;EAEL,YAAA,SAAS;;;;;;EA0Ff,IAAI,iBAAiB,mBAAmB,UAAU,qBAAqB;;EAK7E,eACE,iBACA,SAAS,+BACT,oBACC,QAAQ;UAOG;;EA0DR,OAAO,SAAS,wBAAwB;;EAK9C,kBAAkB,SAAS,mCAAmC,QAAQ;UAIxD;;EAuDd,uBAAuB;;;;;;EASvB,wBAAwB;;EA+BxB;UASQ;EAOR,2BAA2B;;EAS3B,oBAAoB,UAAU;;EAqC9B;UASQ;UAuBA;;;;;;;;;;;;EA6BR,SAAS,gBAAgB,0BAA0B;;UAwB3C;;UAUM;EASR,oBAAoB,QAAQ;EAK5B,kBACJ,cACA,YAAY,iBACZ,UAAU,4BACT,QAAQ;;;;;EAUX,mBAAmB;UAIX;UAIA;;;;;;;EAsBR,SAAS,UAAS,0BAA+B;EAyCjD,aACE,aAAa,aACb,eACA,UAAU;EAcN,QACJ,uBACA,UAAS,iBACT,SAAS,aACT,mBAAmB,oBAClB;;UAaW;UAmBN;;;;;iBCtqBM,gBAAgB,kBAAkB,UAAU;;;;;;;;iBCW5C,0BAA0B,kBAAkB;;;;;;;;;;UCrC3C;;;;;;EAMf,UAAU,QAAQ,gCAA8B;;;;;;iBAwBlC,yBACd,QAAQ,6BACR,UAAS;;;;;iBAcK,2BAA2B,gBAAgB;;;;;;;;;;;;;;KCvE/C;;;;;;;cAUC,uBAAqB;;iBAIlB,eAAe;;;;;iBA+Bf,mBAAmB,GAAG,OAAO,GAAG,yBAAiD;;;;;;;;;;;;;;;;;cC1CpF;;cAGA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAuDD,+BAA+B,gCAAgC;;UAG1D;WACN;WACA;WACA;YACC;;;UAIK;WACN;WACA;;;UAIM;WACN;WACA;;;iBAIK,kBAAkB,cAAc,sBAC9C,MAAM,iBACN,MAAM,QACL,QAAQ;EAAoB,OAAO;;;;UC1FrB,yBAAyB,eAAe;EACvD;EACA;EACA;EACA;;;;KCEU;KAEP,cAAc,cAAc,wBAAwB;EAAqB,OAAO;;KACzE,2BACP;EAAkD,UAAU;MAC5D;EAAsC;EAA4B,SAAS;MAC3E;EAAiD,SAAS;MAC1D;EAA4C,SAAS;MACrD;EAA2C;EAA0B;MACrE;EACC;EACA;MAED;EAAkC;EAAsB;KACzD,cACE,QACE;cAWK,8BAA8B;WAChC,MAAM;WACN,iBAAiB;WACjB;EAGP,YAAA,MAAM,4BACN,iBAAiB,6BACjB;IAAW;IAAwB;;;;iBA2BvB,wBACd,kBACA;EAAW;IACV;;;KC9ES;UAeK;WACN,SAAS;WACT;WACA;;UAGM;WACN;WACA;WACA;WACA;WACA;;cAGE,yCAAyC;WAC3C,MAAM;WACN,UAAU,SAAS;EAG1B,YAAA,MAAM,uCACN,iBACA,WAAU,2CACV;;;;;;;;iBCDY,kCACd,gBACA,SAAS;;;UClCM;EACf;EAOA;EACA;EACA;EACA;EACA;;UAGe;EACf;EACA,QAAQ;;iBAGM,gCACd,kBAAkB,qBACjB;;;UCbc;EACf;EACA;EACA;EACA;EACA,UAAU;EACV,SAAS;EACT;EACA;EACA;;KAGU,yBAAyB,KAAK;WAC/B,wBAAwB;;iBASnB,sBACd,QAAQ,mBACR,UAAS,yBACR;iBA6Ba,wBACd,kBAAkB,qBACjB;;;;;;;;;;iBCvCa,gBAAgB;;iBAKhB,oBAAoB;;;;;;;;;;;;;;iBCrBpB,qBACd,OAAO,4BACP,aACC;;;;;;;;KCbS;;;;;;;;;;;;;;;;;;;;cAsCC,qCAAqC;WACvC;WACA;WACA,QAAQ;EAEL,YAAA,mBAAmB,QAAQ;;;;;;iBAYzB,+BACd,iBACC,SAAS;;;;;;;;;;;;;;;;;UChDK;EACf;;EAEA;;cAGW;mBACM;;mBAEA;UACT;;;;;;;SAQD,UAAU,OAAO,mBAAmB,oBAAoB;;;;;EAuB/D,cAAc;;;;;EAgBd,KAAK;;EAOL,OAAO;;EAMP;;EAKA;;;;;;;EAcA,UAAU;;EAaV,IAAI;;MAKA;;;;;;;;;;;;KC7FM;WACG;WAA0B,QAAQ;;WAElC;WACA,iBAAiB;WACjB;;WAEA;WAAgC;WAA4C;;;;;;;;;;;;;;;;;;;;;;;;;cCY9E;;UAGI;EACf;EACA,QAAQ;;;;;;;;;cAUG;;;;;;;iBAgCG,+BAA+B,iBAAiB;;;;;;;;iBAuChD,wCACd,iBACC"}