@scopebond/hook 0.8.1 → 0.10.0

package/dist/obs-emitter.d.ts

@@ -0,0 +1,132 @@
+import { type HookConnection } from "./cloud.js";
+import { type BindingKey, type CallRequest, type ExitCategory, type ObservationSigner, type PolicyAckInput, type SessionStopReason, type CapabilityProofInput } from "./observation.js";
+import { ObservationStore, type EnqueueResult } from "./obs-store.js";
+import type { GitProbe } from "./typed-ops.js";
+import { type UploadOutcome } from "./obs-upload.js";
+export declare const OBSERVATIONS_SCOPE = "observations:write";
+export declare const HEARTBEAT_INTERVAL_MS = 60000;
+/** A loop that finds the clock moved by more than this since its last tick treats the host as slept. */
+export declare const SLEEP_GAP_MS: number;
+/** Heartbeats continue this long after the last hook activity, then the lease is released. */
+export declare const IDLE_LIMIT_MS: number;
+export declare const HEARTBEAT_LEASE_MS: number;
+export declare const QUEUE_TELEMETRY_INTERVAL_MS: number;
+/** At most this many typed operations are recorded per tool call; the rest are counted. */
+export declare const MAX_INTENTS_PER_CALL = 10;
+export type ObservationStatus = {
+    state: "off";
+    reason: string;
+} | {
+    state: "unsupported";
+    reason: string;
+} | {
+    state: "on";
+};
+/** The installation id is the enrollment's `installation_id`, or its `gateway_id` (the same
+ *  identifier, which is what an enrollment answer carries today). The generation has no such
+ *  fallback: only the workspace can say what it is. */
+export declare function withInstallationId(connection: HookConnection): HookConnection;
+/** Decide from the connection alone whether emission is enabled. Pure; reads nothing. */
+export declare function observationStatus(input: HookConnection | null, keyKid?: string): ObservationStatus;
+export interface EmitterOptions {
+    fetch?: typeof fetch;
+    now?: () => number;
+    adapterVersion?: string;
+    /** Tests: do not start the heartbeat helper process. */
+    spawnHeartbeat?: boolean;
+    /** Bound on one upload attempt from a hook call. */
+    flushTimeoutMs?: number;
+}
+export interface OpenResult {
+    status: ObservationStatus;
+    emitter?: ObservationEmitter;
+}
+/** Open the emitter for a hook config dir, or explain why not. Never throws: an
+ *  unreadable key or store simply leaves observations off. */
+export declare function openObservations(dir: string, options?: EmitterOptions): OpenResult;
+export declare class ObservationEmitter {
+    readonly dir: string;
+    readonly connection: HookConnection;
+    readonly store: ObservationStore;
+    private readonly signer;
+    readonly binding: BindingKey;
+    private readonly options;
+    constructor(dir: string, connection: HookConnection, store: ObservationStore, signer: ObservationSigner, binding: BindingKey, options?: EmitterOptions);
+    private now;
+    private get context();
+    private get adapterVersion();
+    /** Queue one observation. Any failure is contained: emission never throws to the caller. */
+    emit(draft: Parameters<ObservationStore["enqueue"]>[0]): EnqueueResult | null;
+    /** Try to deliver the outbox, bounded. Never throws. */
+    flush(timeoutMs?: number): Promise<UploadOutcome | null>;
+    close(): void;
+    sessionIdOf(harnessSessionId: string): string;
+    /** A local key for a harness tool call, so the after-action hook finds what the
+     *  before-action hook recorded. Keyed, so the raw ids are not written to the local store. */
+    private callKey;
+    /** SessionStart: record one start per session and make sure the heartbeat helper runs. */
+    sessionStart(harnessSessionId: string, cwd: string): void;
+    /** SessionEnd: record one stop, with its reason, only for a session that was active. */
+    sessionStop(harnessSessionId: string, reason: SessionStopReason): void;
+    /** Hook activity in a session: keeps the lease alive, and resumes a session that was
+     *  stopped only because the host slept. A session that was ended, or never started
+     *  through the lifecycle hooks, is left alone. */
+    activity(harnessSessionId: string, cwd: string): void;
+    /** Start the single heartbeat helper for a session unless one already holds the lease. */
+    ensureHeartbeat(sessionId: string): void;
+    private policyDigest;
+    /** Queue oldest-pending-receipt time and count, at most every five minutes, and once more
+     *  when a backlog drains. */
+    queueTelemetry(): void;
+    /**
+     * One heartbeat-loop tick. Returns whether the loop should keep running.
+     *   - session no longer active: stop quietly
+     *   - the clock moved more than SLEEP_GAP_MS since the last tick: the host slept; record a
+     *     stop (reason sleep) at the last known time and emit no heartbeat for the gap
+     *   - no hook activity for IDLE_LIMIT_MS: send a final heartbeat that releases the lease
+     *   - otherwise: heartbeat with the lease active
+     */
+    heartbeatTick(sessionId: string, lastTickAt: number): "continue" | "stop";
+    /**
+     * Record the request binding of each dispatched action, linked to its receipt, and keep
+     * the operation so the after-action hook can echo it. `dispatched` is what was actually
+     * evaluated: the final intent (after root scoping and grouping) and its receipt.
+     */
+    toolIntents(input: {
+        harnessSessionId?: string;
+        callId?: string;
+        cwd: string;
+        dispatched: Array<{
+            action: {
+                action_type: string;
+                params: Record<string, unknown>;
+            };
+            receipt?: unknown;
+        }>;
+        /** The tool call as sent, so typed operations read the actual request: a shell tool's raw
+         *  command, or an MCP tool's server, name and input. */
+        request?: CallRequest;
+        probe?: GitProbe;
+    }): void;
+    /** After-action result for a call whose intents were recorded. `exit` comes from the
+     *  harness's own success/failure event, never from model text. */
+    toolOutcomes(harnessSessionId: string | undefined, callId: string, exit: ExitCategory): void;
+    policyAck(input: PolicyAckInput): EnqueueResult | null;
+    capabilityProofs(proofs: CapabilityProofInput[]): number;
+}
+/** HEAD of the workspace repository, or null when it cannot be read quickly. */
+export declare function gitHead(cwd: string): string | null;
+/** Count and oldest enqueue time of receipts not yet delivered to the workspace, from the
+ *  receipt outbox beside the local receipts. Null when there is no outbox. */
+export declare function receiptBacklog(dir: string): {
+    count: number;
+    oldestAt: number;
+} | null;
+/** Claude Code's SessionEnd `reason` mapped to the stop-reason vocabulary. An unlisted or
+ *  missing reason is `unknown`, never a guess. */
+export declare function stopReasonFromClaude(reason: unknown): SessionStopReason;
+/** Claude Code's failed-tool event to an exit category. */
+export declare const exitFromClaudeFailure: (interrupted: unknown) => ExitCategory;
+/** A one-line, human description for `status`. */
+export declare function describeObservations(dir: string): string[];
+//# sourceMappingURL=obs-emitter.d.ts.map

package/dist/obs-emitter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"obs-emitter.d.ts","sourceRoot":"","sources":["../src/obs-emitter.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAGL,KAAK,UAAU,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,iBAAiB,EAAE,KAAK,cAAc,EAAE,KAAK,iBAAiB,EAAE,KAAK,oBAAoB,EACrJ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAkB,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACtF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEpE,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAC5C,wGAAwG;AACxG,eAAO,MAAM,YAAY,QAA4B,CAAC;AACtD,8FAA8F;AAC9F,eAAO,MAAM,aAAa,QAAc,CAAC;AACzC,eAAO,MAAM,kBAAkB,QAA8B,CAAC;AAC9D,eAAO,MAAM,2BAA2B,QAAa,CAAC;AACtD,2FAA2F;AAC3F,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,MAAM,MAAM,iBAAiB,GACzB;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,CAAC;AAEpB;;uDAEuD;AACvD,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,cAAc,GAAG,cAAc,CAG7E;AAED,yFAAyF;AACzF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAmBlG;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oDAAoD;IACpD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,CAAC,EAAE,kBAAkB,CAAC;CAC9B;AAED;8DAC8D;AAC9D,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,UAAU,CAkBtF;AAED,qBAAa,kBAAkB;IAE3B,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,QAAQ,CAAC,UAAU,EAAE,cAAc;IACnC,QAAQ,CAAC,KAAK,EAAE,gBAAgB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,QAAQ,CAAC,OAAO,EAAE,UAAU;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO;gBALf,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,cAAc,EAC1B,KAAK,EAAE,gBAAgB,EACf,MAAM,EAAE,iBAAiB,EACjC,OAAO,EAAE,UAAU,EACX,OAAO,GAAE,cAAmB;IAG/C,OAAO,CAAC,GAAG;IACX,OAAO,KAAK,OAAO,GAElB;IACD,OAAO,KAAK,cAAc,GAA+D;IAEzF,4FAA4F;IAC5F,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,GAAG,IAAI;IAI7E,wDAAwD;IAClD,KAAK,CAAC,SAAS,SAAqC,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAS1F,KAAK,IAAI,IAAI;IAIb,WAAW,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM;IAE7C;iGAC6F;IAC7F,OAAO,CAAC,OAAO;IAIf,0FAA0F;IAC1F,YAAY,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IASzD,wFAAwF;IACxF,WAAW,CAAC,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,IAAI;IAQtE;;sDAEkD;IAClD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAUrD,0FAA0F;IAC1F,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAiBxC,OAAO,CAAC,YAAY;IAIpB;iCAC6B;IAC7B,cAAc,IAAI,IAAI;IAatB;;;;;;;OAOG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM;IAsBzE;;;;OAIG;IACH,WAAW,CAAC,KAAK,EAAE;QACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QACxD,UAAU,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE;gBAAE,WAAW,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;aAAE,CAAC;YAAC,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;QAC3G;gEACwD;QACxD,OAAO,CAAC,EAAE,WAAW,CAAC;QACtB,KAAK,CAAC,EAAE,QAAQ,CAAC;KAClB,GAAG,IAAI;IA+BR;sEACkE;IAClE,YAAY,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI;IAe5F,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,aAAa,GAAG,IAAI;IAItD,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM;CAKzD;AAID,gFAAgF;AAChF,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKlD;AAED;8EAC8E;AAC9E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAYtF;AAED;kDACkD;AAClD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,iBAAiB,CAMvE;AAED,2DAA2D;AAC3D,eAAO,MAAM,qBAAqB,GAAI,aAAa,OAAO,KAAG,YAA8D,CAAC;AAE5H,kDAAkD;AAClD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAyB1D"}

package/dist/obs-emitter.js

@@ -0,0 +1,415 @@
+// Observation emitters: when the hook may emit, and what it emits.
+//
+// Emission is opt-in through the workspace enrollment. It is on only when the connection
+// (`cloud.json`) carries the `observations:write` scope AND the enrollment handoff gave an
+// installation id and generation AND the agent key's id matches the one the workspace
+// enrolled. Otherwise it is silently off (with a status line) or reported unsupported;
+// nothing is guessed. None of it can change a policy decision: every failure here is
+// swallowed by the caller and the local receipt path is untouched.
+//
+// Kinds emitted (an agent-adapter key may emit these and no others):
+//   session      start / stop, from Claude Code's SessionStart and SessionEnd hooks
+//   health       heartbeat (60 s while a session is explicitly active), queue telemetry
+//   capability   proof, from the `capabilities --prove` runner
+//   policy_ack   loaded / rejected, from `policy load` once an exported policy is verified or refused
+//   tool_intent  the request binding of each dispatched action, linked to its receipt
+//   tool_outcome the after-action result, echoing the stored binding (Claude Code)
+//
+// There is no always-on process. Heartbeats come from one short helper per active session,
+// claimed under a lease so hook calls cannot multiply it; it ends when the session ends,
+// after ten minutes without hook activity (it then releases the lease with a final
+// `lease_active: false` heartbeat), or when the host clock jumps (the host slept: it records
+// a stop with reason `sleep` and emits nothing for the gap).
+import { existsSync, readFileSync } from "node:fs";
+import { createRequire } from "node:module";
+import { spawn, execFileSync } from "node:child_process";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { loadConnection } from "./cloud.js";
+import { operationsForCall, capabilityProofData, digestPolicy, heartbeatData, intentData, loadOrCreateBindingKey, observationSigner, outcomeData, policyAckData, queueData, sessionStartData, sessionStopData, sourceReceiptHash, } from "./observation.js";
+import { openApprovalBinder } from "@scopebond/gateway/node";
+import { OBSERVATION_DB, ObservationStore } from "./obs-store.js";
+import { isProtectedBranch, loadRules } from "./rules.js";
+import { uploadPending } from "./obs-upload.js";
+export const OBSERVATIONS_SCOPE = "observations:write";
+export const HEARTBEAT_INTERVAL_MS = 60_000;
+/** A loop that finds the clock moved by more than this since its last tick treats the host as slept. */
+export const SLEEP_GAP_MS = 3 * HEARTBEAT_INTERVAL_MS;
+/** Heartbeats continue this long after the last hook activity, then the lease is released. */
+export const IDLE_LIMIT_MS = 10 * 60_000;
+export const HEARTBEAT_LEASE_MS = 2.5 * HEARTBEAT_INTERVAL_MS;
+export const QUEUE_TELEMETRY_INTERVAL_MS = 5 * 60_000;
+/** At most this many typed operations are recorded per tool call; the rest are counted. */
+export const MAX_INTENTS_PER_CALL = 10;
+/** The installation id is the enrollment's `installation_id`, or its `gateway_id` (the same
+ *  identifier, which is what an enrollment answer carries today). The generation has no such
+ *  fallback: only the workspace can say what it is. */
+export function withInstallationId(connection) {
+    return connection.installation_id === undefined && typeof connection.gateway_id === "string"
+        ? { ...connection, installation_id: connection.gateway_id } : connection;
+}
+/** Decide from the connection alone whether emission is enabled. Pure; reads nothing. */
+export function observationStatus(input, keyKid) {
+    if (!input)
+        return { state: "off", reason: "not connected to a workspace" };
+    const connection = withInstallationId(input);
+    if (!Array.isArray(connection.scopes) || !connection.scopes.includes(OBSERVATIONS_SCOPE)) {
+        return { state: "off", reason: `this enrollment does not grant ${OBSERVATIONS_SCOPE}` };
+    }
+    if (typeof connection.installation_id !== "string" || !/^[\x21-\x7e]{1,200}$/.test(connection.installation_id)) {
+        return { state: "unsupported", reason: "the enrollment did not include an installation id; reconnect after the workspace supports observations" };
+    }
+    if (!Number.isInteger(connection.installation_generation) || connection.installation_generation < 1 || connection.installation_generation > 2_147_483_647) {
+        return { state: "unsupported", reason: "the enrollment did not include an installation generation; reconnect after the workspace supports observations" };
+    }
+    if (typeof connection.agent_kid !== "string" || !/^[A-Za-z0-9:._-]{1,200}$/.test(connection.agent_kid)) {
+        return { state: "unsupported", reason: "the enrollment did not register the agent signing key" };
+    }
+    if (keyKid !== undefined && keyKid !== connection.agent_kid) {
+        return { state: "unsupported", reason: "the local agent key is not the key the workspace enrolled" };
+    }
+    return { state: "on" };
+}
+/** Open the emitter for a hook config dir, or explain why not. Never throws: an
+ *  unreadable key or store simply leaves observations off. */
+export function openObservations(dir, options = {}) {
+    const loaded = loadConnection(dir);
+    const early = observationStatus(loaded);
+    if (early.state !== "on" || !loaded)
+        return { status: early };
+    const connection = withInstallationId(loaded);
+    let store;
+    try {
+        const keyPem = readFileSync(join(dir, "agent.key"), "utf8");
+        const signer = observationSigner(keyPem, connection.agent_kid);
+        store = new ObservationStore(join(dir, OBSERVATION_DB), options.now);
+        const bound = store.bindGeneration(connection.installation_generation);
+        if (!bound.ok) {
+            store.close();
+            return { status: { state: "unsupported", reason: bound.reason } };
+        }
+        const emitter = new ObservationEmitter(dir, connection, store, signer, loadOrCreateBindingKey(dir), options);
+        return { status: { state: "on" }, emitter };
+    }
+    catch (error) {
+        try {
+            store?.close();
+        }
+        catch { /* nothing to release */ }
+        return { status: { state: "unsupported", reason: `observation setup failed: ${error.message.slice(0, 120)}` } };
+    }
+}
+export class ObservationEmitter {
+    dir;
+    connection;
+    store;
+    signer;
+    binding;
+    options;
+    constructor(dir, connection, store, signer, binding, options = {}) {
+        this.dir = dir;
+        this.connection = connection;
+        this.store = store;
+        this.signer = signer;
+        this.binding = binding;
+        this.options = options;
+    }
+    now() { return (this.options.now ?? Date.now)(); }
+    get context() {
+        return { installationId: this.connection.installation_id, generation: this.connection.installation_generation };
+    }
+    get adapterVersion() { return this.options.adapterVersion ?? "unknown"; }
+    /** Queue one observation. Any failure is contained: emission never throws to the caller. */
+    emit(draft) {
+        try {
+            return this.store.enqueue(draft, this.context, this.signer);
+        }
+        catch {
+            return null;
+        }
+    }
+    /** Try to deliver the outbox, bounded. Never throws. */
+    async flush(timeoutMs = this.options.flushTimeoutMs ?? 800) {
+        try {
+            return await uploadPending(this.store, {
+                url: this.connection.url, credential: this.connection.credential,
+                fetch: this.options.fetch, now: this.options.now, timeoutMs,
+            });
+        }
+        catch {
+            return null;
+        }
+    }
+    close() { this.store.close(); }
+    // ---- session lifecycle ---------------------------------------------------------------------
+    sessionIdOf(harnessSessionId) { return this.binding.sessionId(harnessSessionId); }
+    /** A local key for a harness tool call, so the after-action hook finds what the
+     *  before-action hook recorded. Keyed, so the raw ids are not written to the local store. */
+    callKey(harnessSessionId, callId) {
+        return this.binding.resourceId("call", `${harnessSessionId ?? ""}\u0000${callId}`);
+    }
+    /** SessionStart: record one start per session and make sure the heartbeat helper runs. */
+    sessionStart(harnessSessionId, cwd) {
+        const sessionId = this.sessionIdOf(harnessSessionId);
+        const repositoryId = this.binding.resourceId("repo", cwd);
+        if (this.store.activateSession(sessionId, repositoryId)) {
+            this.emit({ kind: "session", occurredAt: this.now(), sessionId, data: sessionStartData(repositoryId) });
+        }
+        this.ensureHeartbeat(sessionId);
+    }
+    /** SessionEnd: record one stop, with its reason, only for a session that was active. */
+    sessionStop(harnessSessionId, reason) {
+        const sessionId = this.sessionIdOf(harnessSessionId);
+        const row = this.store.session(sessionId);
+        if (this.store.deactivateSession(sessionId, reason)) {
+            this.emit({ kind: "session", occurredAt: this.now(), sessionId, data: sessionStopData(reason, row?.repository_id ?? undefined) });
+        }
+    }
+    /** Hook activity in a session: keeps the lease alive, and resumes a session that was
+     *  stopped only because the host slept. A session that was ended, or never started
+     *  through the lifecycle hooks, is left alone. */
+    activity(harnessSessionId, cwd) {
+        const sessionId = this.sessionIdOf(harnessSessionId);
+        const row = this.store.session(sessionId);
+        if (!row)
+            return;
+        if (row.state === "stopped" && row.stopped_reason === "sleep") {
+            this.sessionStart(harnessSessionId, cwd);
+            return;
+        }
+        if (row.state !== "active")
+            return;
+        this.store.touchSession(sessionId);
+        this.ensureHeartbeat(sessionId);
+    }
+    /** Start the single heartbeat helper for a session unless one already holds the lease. */
+    ensureHeartbeat(sessionId) {
+        // SCOPEBOND_OBSERVATIONS_HEARTBEAT=off keeps session start/stop and tool observations but
+        // runs no helper process (tests, or a host where a background process is unwelcome).
+        if (this.options.spawnHeartbeat === false || process.env.SCOPEBOND_OBSERVATIONS_HEARTBEAT === "off")
+            return;
+        try {
+            if (!this.store.claimHeartbeat(sessionId, HEARTBEAT_LEASE_MS))
+                return;
+            const cli = fileURLToPath(new URL("./cli.js", import.meta.url));
+            const child = spawn(process.execPath, [cli, "observations", "heartbeat", sessionId], {
+                detached: true, stdio: "ignore", windowsHide: true, env: { ...process.env, SCOPEBOND_HOOK_DIR: this.dir },
+            });
+            child.on("error", () => { });
+            child.unref();
+        }
+        catch { /* best effort */ }
+    }
+    // ---- health --------------------------------------------------------------------------------
+    policyDigest() {
+        try {
+            return digestPolicy(JSON.parse(readFileSync(join(this.dir, "policy.json"), "utf8")));
+        }
+        catch {
+            return undefined;
+        }
+    }
+    /** Queue oldest-pending-receipt time and count, at most every five minutes, and once more
+     *  when a backlog drains. */
+    queueTelemetry() {
+        const at = this.now();
+        const last = this.store.getMark("queue_at");
+        const backlog = receiptBacklog(this.dir);
+        if (!backlog)
+            return;
+        const previous = this.store.getMark("queue_pending") ?? 0;
+        if (backlog.count === 0 && previous === 0)
+            return;
+        if (backlog.count > 0 && last !== null && at - last < QUEUE_TELEMETRY_INTERVAL_MS)
+            return;
+        this.emit({ kind: "health", occurredAt: at, data: queueData(backlog.count > 0 ? backlog.oldestAt : at, backlog.count, this.policyDigest()) });
+        this.store.mark("queue_at", at);
+        this.store.mark("queue_pending", backlog.count);
+    }
+    /**
+     * One heartbeat-loop tick. Returns whether the loop should keep running.
+     *   - session no longer active: stop quietly
+     *   - the clock moved more than SLEEP_GAP_MS since the last tick: the host slept; record a
+     *     stop (reason sleep) at the last known time and emit no heartbeat for the gap
+     *   - no hook activity for IDLE_LIMIT_MS: send a final heartbeat that releases the lease
+     *   - otherwise: heartbeat with the lease active
+     */
+    heartbeatTick(sessionId, lastTickAt) {
+        const at = this.now();
+        const row = this.store.session(sessionId);
+        if (!row || row.state !== "active") {
+            this.store.releaseHeartbeat(sessionId);
+            return "stop";
+        }
+        if (at - lastTickAt > SLEEP_GAP_MS) {
+            if (this.store.deactivateSession(sessionId, "sleep")) {
+                this.emit({ kind: "session", occurredAt: lastTickAt, sessionId, data: sessionStopData("sleep", row.repository_id ?? undefined) });
+            }
+            return "stop";
+        }
+        if (at - row.last_activity_at > IDLE_LIMIT_MS) {
+            this.emit({ kind: "health", occurredAt: at, sessionId, data: heartbeatData(false, { policyDigest: this.policyDigest() }) });
+            this.store.releaseHeartbeat(sessionId);
+            return "stop";
+        }
+        this.emit({ kind: "health", occurredAt: at, sessionId, data: heartbeatData(true, { policyDigest: this.policyDigest() }) });
+        this.queueTelemetry();
+        return this.store.renewHeartbeat(sessionId, HEARTBEAT_LEASE_MS, true) ? "continue" : "stop";
+    }
+    // ---- actions -------------------------------------------------------------------------------
+    /**
+     * Record the request binding of each dispatched action, linked to its receipt, and keep
+     * the operation so the after-action hook can echo it. `dispatched` is what was actually
+     * evaluated: the final intent (after root scoping and grouping) and its receipt.
+     */
+    toolIntents(input) {
+        const sessionId = input.harnessSessionId ? this.sessionIdOf(input.harnessSessionId) : undefined;
+        const repositoryId = this.binding.resourceId("repo", input.cwd);
+        const rules = loadRules(this.dir);
+        const operations = operationsForCall({ dispatched: input.dispatched, request: input.request }, {
+            key: this.binding, cwd: input.cwd, repositoryId,
+            ...(input.probe ? { probe: input.probe } : {}), ...(rules ? { isProtectedRef: (ref) => isProtectedBranch(rules, ref) } : {}),
+            ...(process.env.SCOPEBOND_REQUIRED_CHECK_POLICY_VERSION ? { requiredCheckPolicyVersion: process.env.SCOPEBOND_REQUIRED_CHECK_POLICY_VERSION.slice(0, 200) } : {}),
+        });
+        // With approvals held in the workspace, an operation carries the hash the dispatch guard asks it to consume, so a consumed approval can be correlated.
+        const binder = openApprovalBinder(this.dir);
+        let recorded = 0;
+        input.dispatched.forEach((item, index) => {
+            const receipt = item.receipt;
+            const actionId = receipt?.payload?.action_ref?.action_id;
+            if (typeof actionId !== "string" || actionId === "" || actionId.length > 200)
+                return;
+            if (recorded >= MAX_INTENTS_PER_CALL) {
+                this.store.mark("omitted_intents", (this.store.getMark("omitted_intents") ?? 0) + 1);
+                return;
+            }
+            const plain = operations[index];
+            if (!plain)
+                return;
+            const operation = binder ? binder.bind(plain, item.action) : plain;
+            const linked = sourceReceiptHash(item.receipt);
+            const result = this.emit({ kind: "tool_intent", occurredAt: this.now(), sessionId, parentActionId: actionId, sourceReceiptHash: linked, data: intentData(operation) });
+            recorded += 1;
+            if (result?.queued && input.callId) {
+                try {
+                    this.store.recordCall({ call_key: `${this.callKey(input.harnessSessionId, input.callId)}:${String(index).padStart(3, "0")}`, parent_action_id: actionId, source_receipt_hash: linked, session_id: sessionId ?? null, operation });
+                }
+                catch { /* the outcome is then simply not recorded */ }
+            }
+        });
+    }
+    /** After-action result for a call whose intents were recorded. `exit` comes from the
+     *  harness's own success/failure event, never from model text. */
+    toolOutcomes(harnessSessionId, callId, exit) {
+        let calls;
+        try {
+            calls = this.store.takeCalls(`${this.callKey(harnessSessionId, callId)}:`);
+        }
+        catch {
+            return;
+        }
+        const at = this.now();
+        for (const call of calls) {
+            this.emit({
+                kind: "tool_outcome", occurredAt: at, sessionId: call.session_id ?? undefined, parentActionId: call.parent_action_id,
+                sourceReceiptHash: call.source_receipt_hash,
+                data: outcomeData(call.operation, exit, this.adapterVersion, at - call.at),
+            });
+        }
+    }
+    // ---- policy acknowledgement and capability proof ------------------------------------------------
+    policyAck(input) {
+        return this.emit({ kind: "policy_ack", occurredAt: this.now(), data: policyAckData(input) });
+    }
+    capabilityProofs(proofs) {
+        let queued = 0;
+        for (const proof of proofs)
+            if (this.emit({ kind: "capability", occurredAt: this.now(), data: capabilityProofData(proof) })?.queued)
+                queued += 1;
+        return queued;
+    }
+}
+// ---- helpers ---------------------------------------------------------------------------------
+/** HEAD of the workspace repository, or null when it cannot be read quickly. */
+export function gitHead(cwd) {
+    try {
+        const sha = execFileSync("git", ["-C", cwd, "rev-parse", "HEAD"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 2000 }).trim();
+        return /^([0-9a-f]{40}|[0-9a-f]{64})$/.test(sha) ? sha : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Count and oldest enqueue time of receipts not yet delivered to the workspace, from the
+ *  receipt outbox beside the local receipts. Null when there is no outbox. */
+export function receiptBacklog(dir) {
+    const file = join(dir, "receipts.db.cloud-outbox.db");
+    if (!existsSync(file))
+        return null;
+    try {
+        const require = createRequire(import.meta.url);
+        const { DatabaseSync } = require("node:sqlite");
+        const db = new DatabaseSync(file);
+        try {
+            const row = db.prepare("SELECT COUNT(*) AS n, MIN(enqueued_at) AS o FROM cloud_outbox").get();
+            return { count: row.n, oldestAt: row.o ?? Date.now() };
+        }
+        finally {
+            db.close();
+        }
+    }
+    catch {
+        return null;
+    }
+}
+/** Claude Code's SessionEnd `reason` mapped to the stop-reason vocabulary. An unlisted or
+ *  missing reason is `unknown`, never a guess. */
+export function stopReasonFromClaude(reason) {
+    switch (reason) {
+        case "clear":
+        case "prompt_input_exit": return "completed";
+        case "logout": return "cancelled";
+        default: return "unknown";
+    }
+}
+/** Claude Code's failed-tool event to an exit category. */
+export const exitFromClaudeFailure = (interrupted) => (interrupted === true ? "cancelled" : "error");
+/** A one-line, human description for `status`. */
+export function describeObservations(dir) {
+    const connection = loadConnection(dir);
+    const status = observationStatus(connection);
+    if (status.state === "off")
+        return [`off (${status.reason})`];
+    if (status.state === "unsupported")
+        return [`unsupported (${status.reason})`];
+    const file = join(dir, OBSERVATION_DB);
+    if (!existsSync(file))
+        return ["on (nothing recorded yet)"];
+    let store;
+    try {
+        store = new ObservationStore(file);
+        const state = store.state();
+        if (!state)
+            return ["on (nothing recorded yet)"];
+        const pending = store.pendingSummary();
+        const terminal = store.terminalCounts();
+        const terminalTotal = Object.values(terminal).reduce((a, b) => a + b, 0);
+        const lines = [];
+        const head = state.capability === "active" ? "on" : state.capability === "unsupported" ? "unsupported by this workspace" : "paused";
+        lines.push(`${head}${state.reason ? ` (${state.reason})` : ""}; generation ${state.generation}; ${pending.count} pending${pending.oldest_at ? ` since ${new Date(pending.oldest_at).toISOString()}` : ""}`);
+        if (terminalTotal > 0)
+            lines.push(`${terminalTotal} refused or unsendable, kept locally: ${Object.entries(terminal).map(([code, n]) => `${code} ${n}`).join(", ")}`);
+        if (state.dropped > 0)
+            lines.push(`${state.dropped} not queued (local queue full)`);
+        if (state.last_error)
+            lines.push(`last upload problem: ${state.last_error}`);
+        return lines;
+    }
+    catch (error) {
+        return [`on (status unavailable: ${error.message.slice(0, 80)})`];
+    }
+    finally {
+        store?.close();
+    }
+}
+//# sourceMappingURL=obs-emitter.js.map

package/dist/obs-emitter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"obs-emitter.js","sourceRoot":"","sources":["../src/obs-emitter.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,yFAAyF;AACzF,2FAA2F;AAC3F,sFAAsF;AACtF,uFAAuF;AACvF,qFAAqF;AACrF,mEAAmE;AACnE,EAAE;AACF,qEAAqE;AACrE,oFAAoF;AACpF,wFAAwF;AACxF,+DAA+D;AAC/D,sGAAsG;AACtG,sFAAsF;AACtF,mFAAmF;AACnF,EAAE;AACF,2FAA2F;AAC3F,yFAAyF;AACzF,mFAAmF;AACnF,6FAA6F;AAC7F,6DAA6D;AAE7D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAuB,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,iBAAiB,EAAE,mBAAmB,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,sBAAsB,EAAE,iBAAiB,EAC1H,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,GAE5F,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAsB,MAAM,gBAAgB,CAAC;AAEtF,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAsB,MAAM,iBAAiB,CAAC;AAEpE,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,wGAAwG;AACxG,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAG,qBAAqB,CAAC;AACtD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,GAAG,MAAM,CAAC;AACzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,GAAG,qBAAqB,CAAC;AAC9D,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,MAAM,CAAC;AACtD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAOvC;;uDAEuD;AACvD,MAAM,UAAU,kBAAkB,CAAC,UAA0B;IAC3D,OAAO,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,UAAU,CAAC,UAAU,KAAK,QAAQ;QAC1F,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,eAAe,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;AAC7E,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAAC,KAA4B,EAAE,MAAe;IAC7E,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAC5E,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACzF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,kBAAkB,EAAE,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,OAAO,UAAU,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/G,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,wGAAwG,EAAE,CAAC;IACpJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,uBAAuB,CAAC,IAAK,UAAU,CAAC,uBAAkC,GAAG,CAAC,IAAK,UAAU,CAAC,uBAAkC,GAAG,aAAa,EAAE,CAAC;QAClL,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,gHAAgH,EAAE,CAAC;IAC5J,CAAC;IACD,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvG,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,uDAAuD,EAAE,CAAC;IACnG,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,UAAU,CAAC,SAAS,EAAE,CAAC;QAC5D,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,2DAA2D,EAAE,CAAC;IACvG,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAiBD;8DAC8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,UAA0B,EAAE;IACxE,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9D,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAmC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,SAAmB,CAAC,CAAC;QACzE,KAAK,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,uBAAiC,CAAC,CAAC;QACjF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAAC,CAAC;QACpG,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7G,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,KAAK,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;QAC1D,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,6BAA8B,KAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;IAC7H,CAAC;AACH,CAAC;AAED,MAAM,OAAO,kBAAkB;IAElB;IACA;IACA;IACQ;IACR;IACQ;IANnB,YACW,GAAW,EACX,UAA0B,EAC1B,KAAuB,EACf,MAAyB,EACjC,OAAmB,EACX,UAA0B,EAAE;QALpC,QAAG,GAAH,GAAG,CAAQ;QACX,eAAU,GAAV,UAAU,CAAgB;QAC1B,UAAK,GAAL,KAAK,CAAkB;QACf,WAAM,GAAN,MAAM,CAAmB;QACjC,YAAO,GAAP,OAAO,CAAY;QACX,YAAO,GAAP,OAAO,CAAqB;IAC5C,CAAC;IAEI,GAAG,KAAa,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,IAAY,OAAO;QACjB,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,eAAyB,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,uBAAiC,EAAE,CAAC;IACtI,CAAC;IACD,IAAY,cAAc,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,SAAS,CAAC,CAAC,CAAC;IAEzF,4FAA4F;IAC5F,IAAI,CAAC,KAAiD;QACpD,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC7F,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,GAAG;QACxD,IAAI,CAAC;YACH,OAAO,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE;gBACrC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU;gBAChE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC;IAED,KAAK,KAAW,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAErC,+FAA+F;IAE/F,WAAW,CAAC,gBAAwB,IAAY,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAElG;iGAC6F;IACrF,OAAO,CAAC,gBAAoC,EAAE,MAAc;QAClE,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,gBAAgB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,0FAA0F;IAC1F,YAAY,CAAC,gBAAwB,EAAE,GAAW;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAED,wFAAwF;IACxF,WAAW,CAAC,gBAAwB,EAAE,MAAyB;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC;QACpI,CAAC;IACH,CAAC;IAED;;sDAEkD;IAClD,QAAQ,CAAC,gBAAwB,EAAE,GAAW;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACpH,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QACnC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAED,0FAA0F;IAC1F,eAAe,CAAC,SAAiB;QAC/B,0FAA0F;QAC1F,qFAAqF;QACrF,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,KAAK,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,gCAAgC,KAAK,KAAK;YAAE,OAAO;QAC5G,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,EAAE,kBAAkB,CAAC;gBAAE,OAAO;YACtE,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE;gBACnF,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,CAAC,GAAG,EAAE;aAC1G,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAA6D,CAAC,CAAC,CAAC;YACvF,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC/B,CAAC;IAED,+FAA+F;IAEvF,YAAY;QAClB,IAAI,CAAC;YAAC,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC3H,CAAC;IAED;iCAC6B;IAC7B,cAAc;QACZ,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC;YAAE,OAAO;QAClD,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,EAAE,GAAG,IAAI,GAAG,2BAA2B;YAAE,OAAO;QAC1F,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9I,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CAAC,SAAiB,EAAE,UAAkB;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QAC9F,IAAI,EAAE,GAAG,UAAU,GAAG,YAAY,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;gBACrD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC;YACpI,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,EAAE,GAAG,GAAG,CAAC,gBAAgB,GAAG,aAAa,EAAE,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5H,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3H,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9F,CAAC;IAED,+FAA+F;IAE/F;;;;OAIG;IACH,WAAW,CAAC,KAOX;QACC,MAAM,SAAS,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,iBAAiB,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE;YAC7F,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,YAAY;YAC/C,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClK,CAAC,CAAC;QACH,uJAAuJ;QACvJ,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAA6E,CAAC;YACnG,MAAM,QAAQ,GAAG,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC;YACzD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;gBAAE,OAAO;YACrF,IAAI,QAAQ,IAAI,oBAAoB,EAAE,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACvI,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACnE,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACvK,QAAQ,IAAI,CAAC,CAAC;YACd,IAAI,MAAM,EAAE,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBACpO,CAAC;gBAAC,MAAM,CAAC,CAAC,6CAA6C,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;sEACkE;IAClE,YAAY,CAAC,gBAAoC,EAAE,MAAc,EAAE,IAAkB;QACnF,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QACrG,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,SAAS,EAAE,cAAc,EAAE,IAAI,CAAC,gBAAgB;gBACpH,iBAAiB,EAAE,IAAI,CAAC,mBAAmB;gBAC3C,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;aAC3E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,oGAAoG;IAEpG,SAAS,CAAC,KAAqB;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,gBAAgB,CAAC,MAA8B;QAC7C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM;gBAAE,MAAM,IAAI,CAAC,CAAC;QACjJ,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,iGAAiG;AAEjG,gFAAgF;AAChF,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnJ,OAAO,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,aAAa,CAAmG,CAAC;QAClJ,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,+DAA+D,CAAC,CAAC,GAAG,EAAqC,CAAC;YACjI,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACzD,CAAC;gBAAS,CAAC;YAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED;kDACkD;AAClD,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAClD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO,CAAC;QAAC,KAAK,mBAAmB,CAAC,CAAC,OAAO,WAAW,CAAC;QAC3D,KAAK,QAAQ,CAAC,CAAC,OAAO,WAAW,CAAC;QAClC,OAAO,CAAC,CAAC,OAAO,SAAS,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,WAAoB,EAAgB,EAAE,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAE5H,kDAAkD;AAClD,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,CAAC,QAAQ,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa;QAAE,OAAO,CAAC,gBAAgB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC5D,IAAI,KAAmC,CAAC;IACxC,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,aAAa,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpI,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,gBAAgB,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,KAAK,WAAW,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5M,IAAI,aAAa,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,yCAAyC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrK,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;QACpF,IAAI,KAAK,CAAC,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,wBAAwB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,2BAA4B,KAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;YAAS,CAAC;QAAC,KAAK,EAAE,KAAK,EAAE,CAAC;IAAC,CAAC;AAC/B,CAAC","sourcesContent":["// Observation emitters: when the hook may emit, and what it emits.\n//\n// Emission is opt-in through the workspace enrollment. It is on only when the connection\n// (`cloud.json`) carries the `observations:write` scope AND the enrollment handoff gave an\n// installation id and generation AND the agent key's id matches the one the workspace\n// enrolled. Otherwise it is silently off (with a status line) or reported unsupported;\n// nothing is guessed. None of it can change a policy decision: every failure here is\n// swallowed by the caller and the local receipt path is untouched.\n//\n// Kinds emitted (an agent-adapter key may emit these and no others):\n//   session      start / stop, from Claude Code's SessionStart and SessionEnd hooks\n//   health       heartbeat (60 s while a session is explicitly active), queue telemetry\n//   capability   proof, from the `capabilities --prove` runner\n//   policy_ack   loaded / rejected, from `policy load` once an exported policy is verified or refused\n//   tool_intent  the request binding of each dispatched action, linked to its receipt\n//   tool_outcome the after-action result, echoing the stored binding (Claude Code)\n//\n// There is no always-on process. Heartbeats come from one short helper per active session,\n// claimed under a lease so hook calls cannot multiply it; it ends when the session ends,\n// after ten minutes without hook activity (it then releases the lease with a final\n// `lease_active: false` heartbeat), or when the host clock jumps (the host slept: it records\n// a stop with reason `sleep` and emits nothing for the gap).\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { createRequire } from \"node:module\";\nimport { spawn, execFileSync } from \"node:child_process\";\nimport { join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { loadConnection, type HookConnection } from \"./cloud.js\";\nimport {\n  operationsForCall, capabilityProofData, digestPolicy, heartbeatData, intentData, loadOrCreateBindingKey, observationSigner,\n  outcomeData, policyAckData, queueData, sessionStartData, sessionStopData, sourceReceiptHash,\n  type BindingKey, type CallRequest, type ExitCategory, type ObservationSigner, type PolicyAckInput, type SessionStopReason, type CapabilityProofInput,\n} from \"./observation.js\";\nimport { openApprovalBinder } from \"@scopebond/gateway/node\";\nimport { OBSERVATION_DB, ObservationStore, type EnqueueResult } from \"./obs-store.js\";\nimport type { GitProbe } from \"./typed-ops.js\";\nimport { isProtectedBranch, loadRules } from \"./rules.js\";\nimport { uploadPending, type UploadOutcome } from \"./obs-upload.js\";\n\nexport const OBSERVATIONS_SCOPE = \"observations:write\";\nexport const HEARTBEAT_INTERVAL_MS = 60_000;\n/** A loop that finds the clock moved by more than this since its last tick treats the host as slept. */\nexport const SLEEP_GAP_MS = 3 * HEARTBEAT_INTERVAL_MS;\n/** Heartbeats continue this long after the last hook activity, then the lease is released. */\nexport const IDLE_LIMIT_MS = 10 * 60_000;\nexport const HEARTBEAT_LEASE_MS = 2.5 * HEARTBEAT_INTERVAL_MS;\nexport const QUEUE_TELEMETRY_INTERVAL_MS = 5 * 60_000;\n/** At most this many typed operations are recorded per tool call; the rest are counted. */\nexport const MAX_INTENTS_PER_CALL = 10;\n\nexport type ObservationStatus =\n  | { state: \"off\"; reason: string }\n  | { state: \"unsupported\"; reason: string }\n  | { state: \"on\" };\n\n/** The installation id is the enrollment's `installation_id`, or its `gateway_id` (the same\n *  identifier, which is what an enrollment answer carries today). The generation has no such\n *  fallback: only the workspace can say what it is. */\nexport function withInstallationId(connection: HookConnection): HookConnection {\n  return connection.installation_id === undefined && typeof connection.gateway_id === \"string\"\n    ? { ...connection, installation_id: connection.gateway_id } : connection;\n}\n\n/** Decide from the connection alone whether emission is enabled. Pure; reads nothing. */\nexport function observationStatus(input: HookConnection | null, keyKid?: string): ObservationStatus {\n  if (!input) return { state: \"off\", reason: \"not connected to a workspace\" };\n  const connection = withInstallationId(input);\n  if (!Array.isArray(connection.scopes) || !connection.scopes.includes(OBSERVATIONS_SCOPE)) {\n    return { state: \"off\", reason: `this enrollment does not grant ${OBSERVATIONS_SCOPE}` };\n  }\n  if (typeof connection.installation_id !== \"string\" || !/^[\\x21-\\x7e]{1,200}$/.test(connection.installation_id)) {\n    return { state: \"unsupported\", reason: \"the enrollment did not include an installation id; reconnect after the workspace supports observations\" };\n  }\n  if (!Number.isInteger(connection.installation_generation) || (connection.installation_generation as number) < 1 || (connection.installation_generation as number) > 2_147_483_647) {\n    return { state: \"unsupported\", reason: \"the enrollment did not include an installation generation; reconnect after the workspace supports observations\" };\n  }\n  if (typeof connection.agent_kid !== \"string\" || !/^[A-Za-z0-9:._-]{1,200}$/.test(connection.agent_kid)) {\n    return { state: \"unsupported\", reason: \"the enrollment did not register the agent signing key\" };\n  }\n  if (keyKid !== undefined && keyKid !== connection.agent_kid) {\n    return { state: \"unsupported\", reason: \"the local agent key is not the key the workspace enrolled\" };\n  }\n  return { state: \"on\" };\n}\n\nexport interface EmitterOptions {\n  fetch?: typeof fetch;\n  now?: () => number;\n  adapterVersion?: string;\n  /** Tests: do not start the heartbeat helper process. */\n  spawnHeartbeat?: boolean;\n  /** Bound on one upload attempt from a hook call. */\n  flushTimeoutMs?: number;\n}\n\nexport interface OpenResult {\n  status: ObservationStatus;\n  emitter?: ObservationEmitter;\n}\n\n/** Open the emitter for a hook config dir, or explain why not. Never throws: an\n *  unreadable key or store simply leaves observations off. */\nexport function openObservations(dir: string, options: EmitterOptions = {}): OpenResult {\n  const loaded = loadConnection(dir);\n  const early = observationStatus(loaded);\n  if (early.state !== \"on\" || !loaded) return { status: early };\n  const connection = withInstallationId(loaded);\n  let store: ObservationStore | undefined;\n  try {\n    const keyPem = readFileSync(join(dir, \"agent.key\"), \"utf8\");\n    const signer = observationSigner(keyPem, connection.agent_kid as string);\n    store = new ObservationStore(join(dir, OBSERVATION_DB), options.now);\n    const bound = store.bindGeneration(connection.installation_generation as number);\n    if (!bound.ok) { store.close(); return { status: { state: \"unsupported\", reason: bound.reason } }; }\n    const emitter = new ObservationEmitter(dir, connection, store, signer, loadOrCreateBindingKey(dir), options);\n    return { status: { state: \"on\" }, emitter };\n  } catch (error) {\n    try { store?.close(); } catch { /* nothing to release */ }\n    return { status: { state: \"unsupported\", reason: `observation setup failed: ${(error as Error).message.slice(0, 120)}` } };\n  }\n}\n\nexport class ObservationEmitter {\n  constructor(\n    readonly dir: string,\n    readonly connection: HookConnection,\n    readonly store: ObservationStore,\n    private readonly signer: ObservationSigner,\n    readonly binding: BindingKey,\n    private readonly options: EmitterOptions = {},\n  ) {}\n\n  private now(): number { return (this.options.now ?? Date.now)(); }\n  private get context() {\n    return { installationId: this.connection.installation_id as string, generation: this.connection.installation_generation as number };\n  }\n  private get adapterVersion(): string { return this.options.adapterVersion ?? \"unknown\"; }\n\n  /** Queue one observation. Any failure is contained: emission never throws to the caller. */\n  emit(draft: Parameters<ObservationStore[\"enqueue\"]>[0]): EnqueueResult | null {\n    try { return this.store.enqueue(draft, this.context, this.signer); } catch { return null; }\n  }\n\n  /** Try to deliver the outbox, bounded. Never throws. */\n  async flush(timeoutMs = this.options.flushTimeoutMs ?? 800): Promise<UploadOutcome | null> {\n    try {\n      return await uploadPending(this.store, {\n        url: this.connection.url, credential: this.connection.credential,\n        fetch: this.options.fetch, now: this.options.now, timeoutMs,\n      });\n    } catch { return null; }\n  }\n\n  close(): void { this.store.close(); }\n\n  // ---- session lifecycle ---------------------------------------------------------------------\n\n  sessionIdOf(harnessSessionId: string): string { return this.binding.sessionId(harnessSessionId); }\n\n  /** A local key for a harness tool call, so the after-action hook finds what the\n   *  before-action hook recorded. Keyed, so the raw ids are not written to the local store. */\n  private callKey(harnessSessionId: string | undefined, callId: string): string {\n    return this.binding.resourceId(\"call\", `${harnessSessionId ?? \"\"}\\u0000${callId}`);\n  }\n\n  /** SessionStart: record one start per session and make sure the heartbeat helper runs. */\n  sessionStart(harnessSessionId: string, cwd: string): void {\n    const sessionId = this.sessionIdOf(harnessSessionId);\n    const repositoryId = this.binding.resourceId(\"repo\", cwd);\n    if (this.store.activateSession(sessionId, repositoryId)) {\n      this.emit({ kind: \"session\", occurredAt: this.now(), sessionId, data: sessionStartData(repositoryId) });\n    }\n    this.ensureHeartbeat(sessionId);\n  }\n\n  /** SessionEnd: record one stop, with its reason, only for a session that was active. */\n  sessionStop(harnessSessionId: string, reason: SessionStopReason): void {\n    const sessionId = this.sessionIdOf(harnessSessionId);\n    const row = this.store.session(sessionId);\n    if (this.store.deactivateSession(sessionId, reason)) {\n      this.emit({ kind: \"session\", occurredAt: this.now(), sessionId, data: sessionStopData(reason, row?.repository_id ?? undefined) });\n    }\n  }\n\n  /** Hook activity in a session: keeps the lease alive, and resumes a session that was\n   *  stopped only because the host slept. A session that was ended, or never started\n   *  through the lifecycle hooks, is left alone. */\n  activity(harnessSessionId: string, cwd: string): void {\n    const sessionId = this.sessionIdOf(harnessSessionId);\n    const row = this.store.session(sessionId);\n    if (!row) return;\n    if (row.state === \"stopped\" && row.stopped_reason === \"sleep\") { this.sessionStart(harnessSessionId, cwd); return; }\n    if (row.state !== \"active\") return;\n    this.store.touchSession(sessionId);\n    this.ensureHeartbeat(sessionId);\n  }\n\n  /** Start the single heartbeat helper for a session unless one already holds the lease. */\n  ensureHeartbeat(sessionId: string): void {\n    // SCOPEBOND_OBSERVATIONS_HEARTBEAT=off keeps session start/stop and tool observations but\n    // runs no helper process (tests, or a host where a background process is unwelcome).\n    if (this.options.spawnHeartbeat === false || process.env.SCOPEBOND_OBSERVATIONS_HEARTBEAT === \"off\") return;\n    try {\n      if (!this.store.claimHeartbeat(sessionId, HEARTBEAT_LEASE_MS)) return;\n      const cli = fileURLToPath(new URL(\"./cli.js\", import.meta.url));\n      const child = spawn(process.execPath, [cli, \"observations\", \"heartbeat\", sessionId], {\n        detached: true, stdio: \"ignore\", windowsHide: true, env: { ...process.env, SCOPEBOND_HOOK_DIR: this.dir },\n      });\n      child.on(\"error\", () => { /* the lease lapses and the next hook call tries again */ });\n      child.unref();\n    } catch { /* best effort */ }\n  }\n\n  // ---- health --------------------------------------------------------------------------------\n\n  private policyDigest(): string | undefined {\n    try { return digestPolicy(JSON.parse(readFileSync(join(this.dir, \"policy.json\"), \"utf8\"))); } catch { return undefined; }\n  }\n\n  /** Queue oldest-pending-receipt time and count, at most every five minutes, and once more\n   *  when a backlog drains. */\n  queueTelemetry(): void {\n    const at = this.now();\n    const last = this.store.getMark(\"queue_at\");\n    const backlog = receiptBacklog(this.dir);\n    if (!backlog) return;\n    const previous = this.store.getMark(\"queue_pending\") ?? 0;\n    if (backlog.count === 0 && previous === 0) return;\n    if (backlog.count > 0 && last !== null && at - last < QUEUE_TELEMETRY_INTERVAL_MS) return;\n    this.emit({ kind: \"health\", occurredAt: at, data: queueData(backlog.count > 0 ? backlog.oldestAt : at, backlog.count, this.policyDigest()) });\n    this.store.mark(\"queue_at\", at);\n    this.store.mark(\"queue_pending\", backlog.count);\n  }\n\n  /**\n   * One heartbeat-loop tick. Returns whether the loop should keep running.\n   *   - session no longer active: stop quietly\n   *   - the clock moved more than SLEEP_GAP_MS since the last tick: the host slept; record a\n   *     stop (reason sleep) at the last known time and emit no heartbeat for the gap\n   *   - no hook activity for IDLE_LIMIT_MS: send a final heartbeat that releases the lease\n   *   - otherwise: heartbeat with the lease active\n   */\n  heartbeatTick(sessionId: string, lastTickAt: number): \"continue\" | \"stop\" {\n    const at = this.now();\n    const row = this.store.session(sessionId);\n    if (!row || row.state !== \"active\") { this.store.releaseHeartbeat(sessionId); return \"stop\"; }\n    if (at - lastTickAt > SLEEP_GAP_MS) {\n      if (this.store.deactivateSession(sessionId, \"sleep\")) {\n        this.emit({ kind: \"session\", occurredAt: lastTickAt, sessionId, data: sessionStopData(\"sleep\", row.repository_id ?? undefined) });\n      }\n      return \"stop\";\n    }\n    if (at - row.last_activity_at > IDLE_LIMIT_MS) {\n      this.emit({ kind: \"health\", occurredAt: at, sessionId, data: heartbeatData(false, { policyDigest: this.policyDigest() }) });\n      this.store.releaseHeartbeat(sessionId);\n      return \"stop\";\n    }\n    this.emit({ kind: \"health\", occurredAt: at, sessionId, data: heartbeatData(true, { policyDigest: this.policyDigest() }) });\n    this.queueTelemetry();\n    return this.store.renewHeartbeat(sessionId, HEARTBEAT_LEASE_MS, true) ? \"continue\" : \"stop\";\n  }\n\n  // ---- actions -------------------------------------------------------------------------------\n\n  /**\n   * Record the request binding of each dispatched action, linked to its receipt, and keep\n   * the operation so the after-action hook can echo it. `dispatched` is what was actually\n   * evaluated: the final intent (after root scoping and grouping) and its receipt.\n   */\n  toolIntents(input: {\n    harnessSessionId?: string; callId?: string; cwd: string;\n    dispatched: Array<{ action: { action_type: string; params: Record<string, unknown> }; receipt?: unknown }>;\n    /** The tool call as sent, so typed operations read the actual request: a shell tool's raw\n     *  command, or an MCP tool's server, name and input. */\n    request?: CallRequest;\n    probe?: GitProbe;\n  }): void {\n    const sessionId = input.harnessSessionId ? this.sessionIdOf(input.harnessSessionId) : undefined;\n    const repositoryId = this.binding.resourceId(\"repo\", input.cwd);\n    const rules = loadRules(this.dir);\n    const operations = operationsForCall({ dispatched: input.dispatched, request: input.request }, {\n      key: this.binding, cwd: input.cwd, repositoryId,\n      ...(input.probe ? { probe: input.probe } : {}), ...(rules ? { isProtectedRef: (ref: string) => isProtectedBranch(rules, ref) } : {}),\n      ...(process.env.SCOPEBOND_REQUIRED_CHECK_POLICY_VERSION ? { requiredCheckPolicyVersion: process.env.SCOPEBOND_REQUIRED_CHECK_POLICY_VERSION.slice(0, 200) } : {}),\n    });\n    // With approvals held in the workspace, an operation carries the hash the dispatch guard asks it to consume, so a consumed approval can be correlated.\n    const binder = openApprovalBinder(this.dir);\n    let recorded = 0;\n    input.dispatched.forEach((item, index) => {\n      const receipt = item.receipt as { payload?: { action_ref?: { action_id?: unknown } } } | undefined;\n      const actionId = receipt?.payload?.action_ref?.action_id;\n      if (typeof actionId !== \"string\" || actionId === \"\" || actionId.length > 200) return;\n      if (recorded >= MAX_INTENTS_PER_CALL) { this.store.mark(\"omitted_intents\", (this.store.getMark(\"omitted_intents\") ?? 0) + 1); return; }\n      const plain = operations[index];\n      if (!plain) return;\n      const operation = binder ? binder.bind(plain, item.action) : plain;\n      const linked = sourceReceiptHash(item.receipt);\n      const result = this.emit({ kind: \"tool_intent\", occurredAt: this.now(), sessionId, parentActionId: actionId, sourceReceiptHash: linked, data: intentData(operation) });\n      recorded += 1;\n      if (result?.queued && input.callId) {\n        try {\n          this.store.recordCall({ call_key: `${this.callKey(input.harnessSessionId, input.callId)}:${String(index).padStart(3, \"0\")}`, parent_action_id: actionId, source_receipt_hash: linked, session_id: sessionId ?? null, operation });\n        } catch { /* the outcome is then simply not recorded */ }\n      }\n    });\n  }\n\n  /** After-action result for a call whose intents were recorded. `exit` comes from the\n   *  harness's own success/failure event, never from model text. */\n  toolOutcomes(harnessSessionId: string | undefined, callId: string, exit: ExitCategory): void {\n    let calls;\n    try { calls = this.store.takeCalls(`${this.callKey(harnessSessionId, callId)}:`); } catch { return; }\n    const at = this.now();\n    for (const call of calls) {\n      this.emit({\n        kind: \"tool_outcome\", occurredAt: at, sessionId: call.session_id ?? undefined, parentActionId: call.parent_action_id,\n        sourceReceiptHash: call.source_receipt_hash,\n        data: outcomeData(call.operation, exit, this.adapterVersion, at - call.at),\n      });\n    }\n  }\n\n  // ---- policy acknowledgement and capability proof ------------------------------------------------\n\n  policyAck(input: PolicyAckInput): EnqueueResult | null {\n    return this.emit({ kind: \"policy_ack\", occurredAt: this.now(), data: policyAckData(input) });\n  }\n\n  capabilityProofs(proofs: CapabilityProofInput[]): number {\n    let queued = 0;\n    for (const proof of proofs) if (this.emit({ kind: \"capability\", occurredAt: this.now(), data: capabilityProofData(proof) })?.queued) queued += 1;\n    return queued;\n  }\n}\n\n// ---- helpers ---------------------------------------------------------------------------------\n\n/** HEAD of the workspace repository, or null when it cannot be read quickly. */\nexport function gitHead(cwd: string): string | null {\n  try {\n    const sha = execFileSync(\"git\", [\"-C\", cwd, \"rev-parse\", \"HEAD\"], { encoding: \"utf8\", stdio: [\"ignore\", \"pipe\", \"ignore\"], timeout: 2000 }).trim();\n    return /^([0-9a-f]{40}|[0-9a-f]{64})$/.test(sha) ? sha : null;\n  } catch { return null; }\n}\n\n/** Count and oldest enqueue time of receipts not yet delivered to the workspace, from the\n *  receipt outbox beside the local receipts. Null when there is no outbox. */\nexport function receiptBacklog(dir: string): { count: number; oldestAt: number } | null {\n  const file = join(dir, \"receipts.db.cloud-outbox.db\");\n  if (!existsSync(file)) return null;\n  try {\n    const require = createRequire(import.meta.url);\n    const { DatabaseSync } = require(\"node:sqlite\") as { DatabaseSync: new (p: string) => { prepare(s: string): { get(): unknown }; close(): void } };\n    const db = new DatabaseSync(file);\n    try {\n      const row = db.prepare(\"SELECT COUNT(*) AS n, MIN(enqueued_at) AS o FROM cloud_outbox\").get() as { n: number; o: number | null };\n      return { count: row.n, oldestAt: row.o ?? Date.now() };\n    } finally { db.close(); }\n  } catch { return null; }\n}\n\n/** Claude Code's SessionEnd `reason` mapped to the stop-reason vocabulary. An unlisted or\n *  missing reason is `unknown`, never a guess. */\nexport function stopReasonFromClaude(reason: unknown): SessionStopReason {\n  switch (reason) {\n    case \"clear\": case \"prompt_input_exit\": return \"completed\";\n    case \"logout\": return \"cancelled\";\n    default: return \"unknown\";\n  }\n}\n\n/** Claude Code's failed-tool event to an exit category. */\nexport const exitFromClaudeFailure = (interrupted: unknown): ExitCategory => (interrupted === true ? \"cancelled\" : \"error\");\n\n/** A one-line, human description for `status`. */\nexport function describeObservations(dir: string): string[] {\n  const connection = loadConnection(dir);\n  const status = observationStatus(connection);\n  if (status.state === \"off\") return [`off (${status.reason})`];\n  if (status.state === \"unsupported\") return [`unsupported (${status.reason})`];\n  const file = join(dir, OBSERVATION_DB);\n  if (!existsSync(file)) return [\"on (nothing recorded yet)\"];\n  let store: ObservationStore | undefined;\n  try {\n    store = new ObservationStore(file);\n    const state = store.state();\n    if (!state) return [\"on (nothing recorded yet)\"];\n    const pending = store.pendingSummary();\n    const terminal = store.terminalCounts();\n    const terminalTotal = Object.values(terminal).reduce((a, b) => a + b, 0);\n    const lines: string[] = [];\n    const head = state.capability === \"active\" ? \"on\" : state.capability === \"unsupported\" ? \"unsupported by this workspace\" : \"paused\";\n    lines.push(`${head}${state.reason ? ` (${state.reason})` : \"\"}; generation ${state.generation}; ${pending.count} pending${pending.oldest_at ? ` since ${new Date(pending.oldest_at).toISOString()}` : \"\"}`);\n    if (terminalTotal > 0) lines.push(`${terminalTotal} refused or unsendable, kept locally: ${Object.entries(terminal).map(([code, n]) => `${code} ${n}`).join(\", \")}`);\n    if (state.dropped > 0) lines.push(`${state.dropped} not queued (local queue full)`);\n    if (state.last_error) lines.push(`last upload problem: ${state.last_error}`);\n    return lines;\n  } catch (error) {\n    return [`on (status unavailable: ${(error as Error).message.slice(0, 80)})`];\n  } finally { store?.close(); }\n}\n"]}