@sema-agent/server 1.185.0

package/dist/orchestration/workflow-notify-journal.js

@@ -0,0 +1,297 @@
+import { mkdirSync, readFileSync, existsSync, openSync, writeSync, fsyncSync, closeSync } from "node:fs";
+import { join } from "node:path";
+import { redactSecrets } from "../trace/redact.js";
+const SUMMARY_MAX = 500;
+export function recoverySummary(status, error) {
+    if (status === "completed")
+        return "workflow completed";
+    const base = error ? `workflow failed: ${error}` : "workflow failed";
+    const redacted = base
+        .replace(/https?:\/\/[^\s"'`]+/gi, "[redacted-url]")
+        .replace(/\b(?:Bearer|Basic)\s+[A-Za-z0-9._~+/=-]+/gi, "[redacted-token]")
+        .replace(/\b(?:api[_-]?key|secret|token|password|authorization)\b\s*[:=]\s*"?[^\s"',}]+/gi, "[redacted-secret]")
+        .replace(/(?:\/[A-Za-z0-9_.-]+){2,}/g, "[redacted-path]")
+        .replace(/(?:[A-Za-z]:)?(?:\\{1,2}[A-Za-z0-9_.$-]+){2,}/g, "[redacted-path]");
+    return redacted.length > SUMMARY_MAX ? `${redacted.slice(0, SUMMARY_MAX)}…[+${redacted.length - SUMMARY_MAX} chars]` : redacted;
+}
+export class WorkflowNotifyGate {
+    journal;
+    runStore;
+    deliver;
+    opts;
+    constructor(journal, runStore, deliver, opts = {}) {
+        this.journal = journal;
+        this.runStore = runStore;
+        this.deliver = deliver;
+        this.opts = opts;
+    }
+    now() {
+        return this.opts.now ? this.opts.now() : Date.now();
+    }
+    async onWorkflowStart(input) {
+        try {
+            await this.journal.record({
+                runId: input.runId,
+                scope: input.scope,
+                ...(input.sourceTaskId ? { sourceTaskId: input.sourceTaskId } : {}),
+                ...(input.principal ? { principal: input.principal } : {}),
+                createdAt: this.now(),
+            });
+        }
+        catch (err) {
+            this.opts.onError?.("record", input.runId, err);
+        }
+    }
+    buildNotifier() {
+        return {
+            notify: async (input) => {
+                await this.deliverOnce({
+                    runId: input.runId,
+                    status: input.status,
+                    summary: input.summary,
+                    ...(input.sourceTaskId ? { sourceTaskId: input.sourceTaskId } : {}),
+                    ...(input.principal ? { principal: input.principal } : {}),
+                    ...(input.originatingSessionId ? { originatingSessionId: input.originatingSessionId } : {}),
+                }, input.scope ?? input.principal ?? "default");
+            },
+        };
+    }
+    async deliverOnce(p, scope) {
+        const existing = await this.journal.get(p.runId);
+        if (existing?.acked)
+            return;
+        if (!existing) {
+            await this.journal.record({
+                runId: p.runId,
+                scope,
+                ...(p.sourceTaskId ? { sourceTaskId: p.sourceTaskId } : {}),
+                ...(p.principal ? { principal: p.principal } : {}),
+                createdAt: this.now(),
+            });
+        }
+        try {
+            await this.deliver(p);
+        }
+        catch (err) {
+            this.opts.onError?.("deliver", p.runId, err);
+            return;
+        }
+        await this.journal.ack(p.runId, this.now());
+    }
+    async recover(opts = {}) {
+        const orphanGraceMs = opts.orphanGraceMs ?? 24 * 60 * 60 * 1000;
+        const pending = await this.journal.listPending();
+        let redelivered = 0;
+        let stillRunning = 0;
+        let abandoned = 0;
+        for (const entry of pending) {
+            try {
+                const run = await this.runStore.get(entry.runId);
+                if (!run) {
+                    await this.journal.ack(entry.runId, this.now());
+                    abandoned++;
+                    continue;
+                }
+                const principal = entry.principal ?? entry.scope;
+                const sourceTaskId = entry.sourceTaskId ?? run.sourceTaskId;
+                const originatingSessionId = run.originatingSessionId;
+                if (run.status === "running") {
+                    const startedAt = run.startedAt || entry.createdAt;
+                    if (this.now() - startedAt <= orphanGraceMs) {
+                        stillRunning++;
+                        continue;
+                    }
+                    await this.deliverOnce({
+                        runId: entry.runId,
+                        status: "failed",
+                        summary: "workflow abandoned — still `running` past the orphan grace window (replica likely crashed mid-run)",
+                        ...(sourceTaskId ? { sourceTaskId } : {}),
+                        ...(principal ? { principal } : {}),
+                        ...(originatingSessionId ? { originatingSessionId } : {}),
+                    }, entry.scope);
+                    if ((await this.journal.get(entry.runId))?.acked)
+                        abandoned++;
+                    continue;
+                }
+                await this.deliverOnce({
+                    runId: entry.runId,
+                    status: run.status,
+                    summary: recoverySummary(run.status, run.error),
+                    ...(sourceTaskId ? { sourceTaskId } : {}),
+                    ...(principal ? { principal } : {}),
+                    ...(originatingSessionId ? { originatingSessionId } : {}),
+                }, entry.scope);
+                const after = await this.journal.get(entry.runId);
+                if (after?.acked)
+                    redelivered++;
+            }
+            catch (err) {
+                this.opts.onError?.("recover", entry.runId, err);
+            }
+        }
+        return { scanned: pending.length, redelivered, stillRunning, abandoned };
+    }
+}
+export class FileWorkflowNotifyJournalStore {
+    fsyncEnabled;
+    ledgerPath;
+    entries = new Map();
+    fd;
+    constructor(root, fsyncEnabled = true) {
+        this.fsyncEnabled = fsyncEnabled;
+        const dir = join(root, "workflow-notify");
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+        this.ledgerPath = join(dir, "journal.jsonl");
+        this.replay();
+    }
+    replay() {
+        if (!existsSync(this.ledgerPath))
+            return;
+        const text = readFileSync(this.ledgerPath, "utf8");
+        for (const line of text.split("\n")) {
+            if (!line.trim())
+                continue;
+            let ev;
+            try {
+                ev = JSON.parse(line);
+            }
+            catch {
+                continue;
+            }
+            if (ev && typeof ev.runId === "string")
+                this.entries.set(ev.runId, ev);
+        }
+    }
+    commit(entry) {
+        if (this.fd === undefined)
+            this.fd = openSync(this.ledgerPath, "a", 0o600);
+        writeSync(this.fd, `${JSON.stringify(entry)}\n`);
+        if (this.fsyncEnabled)
+            fsyncSync(this.fd);
+        this.entries.set(entry.runId, entry);
+    }
+    async record(input) {
+        const existing = this.entries.get(input.runId);
+        if (existing)
+            return;
+        this.commit({
+            runId: input.runId,
+            scope: input.scope,
+            acked: false,
+            ...(input.sourceTaskId ? { sourceTaskId: input.sourceTaskId } : {}),
+            ...(input.principal ? { principal: input.principal } : {}),
+            createdAt: input.createdAt,
+        });
+    }
+    async ack(runId, ackedAt) {
+        const existing = this.entries.get(runId);
+        if (!existing || existing.acked)
+            return;
+        this.commit({ ...existing, acked: true, ackedAt });
+    }
+    async listPending() {
+        return [...this.entries.values()].filter((e) => !e.acked);
+    }
+    async get(runId) {
+        return this.entries.get(runId) ?? null;
+    }
+    close() {
+        if (this.fd !== undefined) {
+            try {
+                closeSync(this.fd);
+            }
+            catch {
+            }
+            this.fd = undefined;
+        }
+    }
+    get size() {
+        return this.entries.size;
+    }
+}
+export class InMemoryWorkflowNotifyJournalStore {
+    entries = new Map();
+    async record(input) {
+        if (this.entries.has(input.runId))
+            return;
+        this.entries.set(input.runId, {
+            runId: input.runId,
+            scope: input.scope,
+            acked: false,
+            ...(input.sourceTaskId ? { sourceTaskId: input.sourceTaskId } : {}),
+            ...(input.principal ? { principal: input.principal } : {}),
+            createdAt: input.createdAt,
+        });
+    }
+    async ack(runId, ackedAt) {
+        const e = this.entries.get(runId);
+        if (!e || e.acked)
+            return;
+        this.entries.set(runId, { ...e, acked: true, ackedAt });
+    }
+    async listPending() {
+        return [...this.entries.values()].filter((e) => !e.acked);
+    }
+    async get(runId) {
+        return this.entries.get(runId) ?? null;
+    }
+    get size() {
+        return this.entries.size;
+    }
+}
+export class JournalingWorkflowRunStore {
+    inner;
+    gate;
+    fleetBus;
+    constructor(inner, gate, fleetBus) {
+        this.inner = inner;
+        this.gate = gate;
+        this.fleetBus = fleetBus;
+    }
+    publishFleet(id, run) {
+        if (!this.fleetBus)
+            return;
+        const agents = run.agents ?? [];
+        const done = agents.filter((a) => a.status === "completed" || a.status === "failed").length;
+        const failed = agents.filter((a) => a.status === "failed").length;
+        const terminal = run.status === "completed" || run.status === "failed";
+        this.fleetBus.publishWorkflow({
+            id,
+            name: redactSecrets(run.name ?? "Dynamic workflow"),
+            ...(run.description ? { description: redactSecrets(run.description) } : {}),
+            scope: run.scope,
+            status: run.status,
+            doneCount: done,
+            totalCount: agents.length,
+            failedCount: failed,
+            tokens: (run.stats?.tokens ?? 0) + (run.stats?.nested?.tokens ?? 0),
+            ...(run.endedAt ? { elapsedMs: run.endedAt - run.startedAt } : {}),
+        });
+        if (terminal)
+            this.fleetBus.removeWorkflow(id);
+    }
+    async put(id, run) {
+        await this.gate.onWorkflowStart({
+            runId: id,
+            scope: run.scope,
+        });
+        await this.inner.put(id, run);
+        this.publishFleet(id, run);
+    }
+    async update(id, scope, run, expect) {
+        const ok = await this.inner.update(id, scope, run, expect);
+        if (ok)
+            this.publishFleet(id, run);
+        return ok;
+    }
+    get(id) {
+        return this.inner.get(id);
+    }
+    listByScope(scope, opts) {
+        return this.inner.listByScope(scope, opts);
+    }
+    reap(scope, now, opts) {
+        return this.inner.reap(scope, now, opts);
+    }
+}
+//# sourceMappingURL=workflow-notify-journal.js.map

package/dist/orchestration/workflow-notify-journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-notify-journal.js","sourceRoot":"","sources":["../../src/orchestration/workflow-notify-journal.ts"],"names":[],"mappings":"AAyCA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACzG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAgEnD,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,UAAU,eAAe,CAAC,MAAyB,EAAE,KAAc;IACvE,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,oBAAoB,CAAC;IACxD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,oBAAoB,KAAK,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI;SAClB,OAAO,CAAC,wBAAwB,EAAE,gBAAgB,CAAC;SACnD,OAAO,CAAC,4CAA4C,EAAE,kBAAkB,CAAC;SACzE,OAAO,CAAC,iFAAiF,EAAE,mBAAmB,CAAC;SAC/G,OAAO,CAAC,4BAA4B,EAAE,iBAAiB,CAAC;SAGxD,OAAO,CAAC,gDAAgD,EAAE,iBAAiB,CAAC,CAAC;IAChF,OAAO,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,QAAQ,CAAC,MAAM,GAAG,WAAW,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AAClI,CAAC;AAeD,MAAM,OAAO,kBAAkB;IAEV;IACA;IACA;IACA;IAJnB,YACmB,OAAmC,EACnC,QAA0B,EAC1B,OAAmC,EACnC,OAOb,EAAE;QAVW,YAAO,GAAP,OAAO,CAA4B;QACnC,aAAQ,GAAR,QAAQ,CAAkB;QAC1B,YAAO,GAAP,OAAO,CAA4B;QACnC,SAAI,GAAJ,IAAI,CAOf;IACL,CAAC;IAEI,GAAG;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACtD,CAAC;IAQD,KAAK,CAAC,eAAe,CAAC,KAAkF;QACtG,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAQD,aAAa;QACX,OAAO;YACL,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACtB,MAAM,IAAI,CAAC,WAAW,CAAC;oBACrB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1D,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5F,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC;YAClD,CAAC;SACF,CAAC;IACJ,CAAC;IAQO,KAAK,CAAC,WAAW,CAAC,CAA4B,EAAE,KAAa;QACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,QAAQ,EAAE,KAAK;YAAE,OAAO;QAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YAGd,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBACxB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,KAAK;gBACL,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAEb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;IAmBD,KAAK,CAAC,OAAO,CAAC,OAAmC,EAAE;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjD,IAAI,CAAC,GAAG,EAAE,CAAC;oBAET,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBAChD,SAAS,EAAE,CAAC;oBACZ,SAAS;gBACX,CAAC;gBAID,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC;gBAKjD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,CAAC;gBAI5D,MAAM,oBAAoB,GAAG,GAAG,CAAC,oBAAoB,CAAC;gBACtD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC;oBACnD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,aAAa,EAAE,CAAC;wBAC5C,YAAY,EAAE,CAAC;wBACf,SAAS;oBACX,CAAC;oBAED,MAAM,IAAI,CAAC,WAAW,CACpB;wBACE,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,MAAM,EAAE,QAAQ;wBAChB,OAAO,EAAE,oGAAoG;wBAC7G,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC1D,EACD,KAAK,CAAC,KAAK,CACZ,CAAC;oBACF,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK;wBAAE,SAAS,EAAE,CAAC;oBAC9D,SAAS;gBACX,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CACpB;oBACE,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC;oBAC/C,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1D,EACD,KAAK,CAAC,KAAK,CACZ,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAClD,IAAI,KAAK,EAAE,KAAK;oBAAE,WAAW,EAAE,CAAC;YAClC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IAC3E,CAAC;CACF;AAYD,MAAM,OAAO,8BAA8B;IAOtB;IANF,UAAU,CAAS;IACnB,OAAO,GAAG,IAAI,GAAG,EAAsC,CAAC;IACjE,EAAE,CAAqB;IAE/B,YACE,IAAY,EACK,eAAe,IAAI;QAAnB,iBAAY,GAAZ,YAAY,CAAO;QAEpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAG1C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAKO,MAAM;QACZ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO;QACzC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC3B,IAAI,EAA8B,CAAC;YACnC,IAAI,CAAC;gBACH,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA+B,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,KAAK,KAAK,QAAQ;gBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAIO,MAAM,CAAC,KAAiC;QAC9C,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS;YAAE,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3E,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,YAAY;YAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAqG;QAChH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE/C,IAAI,QAAQ;YAAE,OAAO;QACrB,IAAI,CAAC,MAAM,CAAC;YACV,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK;YACZ,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,OAAe;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK;YAAE,OAAO;QACxC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IACzC,CAAC;IAGD,KAAK;QACH,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;YACD,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC;QACtB,CAAC;IACH,CAAC;IAGD,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF;AAMD,MAAM,OAAO,kCAAkC;IAC5B,OAAO,GAAG,IAAI,GAAG,EAAsC,CAAC;IAEzE,KAAK,CAAC,MAAM,CAAC,KAAqG;QAChH,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE;YAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK;YACZ,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,OAAe;QACtC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK;YAAE,OAAO;QAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IACzC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF;AAcD,MAAM,OAAO,0BAA0B;IAElB;IACA;IAGA;IALnB,YACmB,KAAuB,EACvB,IAAiD,EAGjD,QAAwB;QAJxB,UAAK,GAAL,KAAK,CAAkB;QACvB,SAAI,GAAJ,IAAI,CAA6C;QAGjD,aAAQ,GAAR,QAAQ,CAAgB;IACxC,CAAC;IAII,YAAY,CAAC,EAAU,EAAE,GAAgB;QAC/C,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC5F,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QAClE,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC;QACvE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC5B,EAAE;YAGF,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI,kBAAkB,CAAC;YACnD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,MAAM,CAAC,MAAM;YACzB,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC;YACnE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,GAAgB;QAIpC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;YAC9B,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,GAAG,CAAC,KAAK;SAGjB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAAa,EAAE,GAAgB,EAAE,MAAwB;QAChF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,EAAE;YAAE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACnC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,WAAW,CAAC,KAAa,EAAE,IAAqD;QAC9E,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,GAAW,EAAE,IAA2C;QAC1E,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/per-task-image.d.ts

@@ -0,0 +1,27 @@
+import type { ImageViewer, ImageIndexEntry } from "./plugins/tidb-image-index.js";
+export interface SandboxImageResolver {
+    latestPublished(profile: string, viewer: ImageViewer): Promise<Pick<ImageIndexEntry, "repo" | "digest" | "capabilities"> | null>;
+}
+export type SandboxImageResolution = {
+    ok: true;
+    ref: string;
+    capabilities?: import("./plugins/tidb-image-index.js").ImageCapabilities;
+} | {
+    ok: false;
+    status: number;
+    message: string;
+};
+export declare function resolveSandboxImageRef(opts: {
+    profile: string;
+    capabilitiesNeeded?: readonly string[];
+    viewer: ImageViewer;
+    index: SandboxImageResolver;
+}): Promise<SandboxImageResolution>;
+export declare class PerTaskImageRegistry {
+    private readonly maxEntries;
+    private readonly map;
+    constructor(maxEntries?: number);
+    set(sessionId: string, ref: string): void;
+    get(sessionId: string | undefined): string | undefined;
+}
+//# sourceMappingURL=per-task-image.d.ts.map

package/dist/per-task-image.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"per-task-image.d.ts","sourceRoot":"","sources":["../src/per-task-image.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAIlF,MAAM,WAAW,oBAAoB;IACnC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,QAAQ,GAAG,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC;CAClI;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,+BAA+B,EAAE,iBAAiB,CAAA;CAAE,GACnG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAmBnD,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,oBAAoB,CAAC;CAC7B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAgBlC;AAsBD,qBAAa,oBAAoB;IAEnB,OAAO,CAAC,QAAQ,CAAC,UAAU;IADvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA6B;gBACpB,UAAU,SAAO;IAK9C,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAWzC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS;CAGvD"}

package/dist/per-task-image.js

@@ -0,0 +1,37 @@
+const REQUESTABLE_CAPS = new Set(["browser", "db", "nestedBuild"]);
+export async function resolveSandboxImageRef(opts) {
+    const entry = await opts.index.latestPublished(opts.profile, opts.viewer);
+    if (!entry) {
+        return { ok: false, status: 404, message: `no published sandbox image for profile "${opts.profile}" visible to this principal` };
+    }
+    const caps = entry.capabilities;
+    for (const cap of opts.capabilitiesNeeded ?? []) {
+        if (!REQUESTABLE_CAPS.has(cap)) {
+            return { ok: false, status: 400, message: `unknown sandbox capability "${cap}" (allowed: ${[...REQUESTABLE_CAPS].join(", ")})` };
+        }
+        if (caps[cap] !== true) {
+            return { ok: false, status: 404, message: `sandbox image for profile "${opts.profile}" does not provide capability "${cap}"` };
+        }
+    }
+    return { ok: true, ref: `${entry.repo}@${entry.digest}`, capabilities: entry.capabilities };
+}
+export class PerTaskImageRegistry {
+    maxEntries;
+    map = new Map();
+    constructor(maxEntries = 4096) {
+        this.maxEntries = maxEntries;
+    }
+    set(sessionId, ref) {
+        this.map.delete(sessionId);
+        this.map.set(sessionId, ref);
+        if (this.map.size > this.maxEntries) {
+            const oldest = this.map.keys().next().value;
+            if (oldest !== undefined)
+                this.map.delete(oldest);
+        }
+    }
+    get(sessionId) {
+        return sessionId === undefined ? undefined : this.map.get(sessionId);
+    }
+}
+//# sourceMappingURL=per-task-image.js.map

package/dist/per-task-image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"per-task-image.js","sourceRoot":"","sources":["../src/per-task-image.ts"],"names":[],"mappings":"AA4BA,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;AAexF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAK5C;IACC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,2CAA2C,IAAI,CAAC,OAAO,6BAA6B,EAAE,CAAC;IACnI,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,YAA4D,CAAC;IAChF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,+BAA+B,GAAG,eAAe,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACnI,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,8BAA8B,IAAI,CAAC,OAAO,kCAAkC,GAAG,GAAG,EAAE,CAAC;QACjI,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;AAC9F,CAAC;AAsBD,MAAM,OAAO,oBAAoB;IAEF;IADZ,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,YAA6B,aAAa,IAAI;QAAjB,eAAU,GAAV,UAAU,CAAO;IAAG,CAAC;IAKlD,GAAG,CAAC,SAAiB,EAAE,GAAW;QAChC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC5C,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAID,GAAG,CAAC,SAA6B;QAC/B,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvE,CAAC;CACF"}

package/dist/plan-cache-probe.d.ts

@@ -0,0 +1,21 @@
+import type { Metrics } from "./observability/metrics.js";
+import type { Logger } from "./observability/logger.js";
+export declare function tokens(s: string): string[];
+export declare function significant(s: string): string[];
+export interface ScopeRecurrence {
+    tasks: number;
+    hits: number;
+    hitRate: number;
+    qsig: number[];
+}
+export declare const QSIG_CAP = 12;
+export declare class PlanCacheProbe {
+    private readonly metrics?;
+    private readonly logger?;
+    private readonly byScope;
+    constructor(metrics?: Metrics | undefined, logger?: Logger | undefined);
+    record(scopeRaw: string | undefined, objective: string, completed: boolean): void;
+    dump(): Record<string, ScopeRecurrence>;
+    private touch;
+}
+//# sourceMappingURL=plan-cache-probe.d.ts.map

package/dist/plan-cache-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-cache-probe.d.ts","sourceRoot":"","sources":["../src/plan-cache-probe.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAWxD,wBAAgB,MAAM,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAE1C;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAE/C;AAcD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAEhB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAID,eAAO,MAAM,QAAQ,KAAK,CAAC;AAM3B,qBAAa,cAAc;IAGvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAH1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;gBAEtC,OAAO,CAAC,EAAE,OAAO,YAAA,EACjB,MAAM,CAAC,EAAE,MAAM,YAAA;IAOlC,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI;IA+BjF,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;IAcvC,OAAO,CAAC,KAAK;CAed"}

package/dist/plan-cache-probe.js

@@ -0,0 +1,79 @@
+const STOP = new Set([
+    "the", "and", "for", "with", "from", "this", "that", "into", "your", "you", "are", "was", "were", "has",
+    "have", "had", "not", "but", "all", "any", "can", "use", "using", "via", "then", "than", "out", "get",
+    "got", "its", "it's", "their", "them", "they", "what", "when", "which", "who", "how", "why", "a", "an",
+    "of", "to", "in", "on", "is", "it", "or", "as", "at", "by", "be", "do", "if", "so", "no", "up", "we",
+]);
+export function tokens(s) {
+    return s.toLowerCase().match(/[a-z0-9]+/g) ?? [];
+}
+export function significant(s) {
+    return tokens(s).filter((t) => t.length >= 3 && !STOP.has(t));
+}
+const RING = 1000;
+const MAX_SCOPES = 2000;
+export const QSIG_CAP = 12;
+export class PlanCacheProbe {
+    metrics;
+    logger;
+    byScope = new Map();
+    constructor(metrics, logger) {
+        this.metrics = metrics;
+        this.logger = logger;
+    }
+    record(scopeRaw, objective, completed) {
+        const scope = scopeRaw && scopeRaw.length > 0 ? scopeRaw : "anon";
+        const qSig = significant(objective);
+        const st = this.touch(scope);
+        let hit = false;
+        if (qSig.length > 0) {
+            for (const hist of st.ring) {
+                if (qSig.every((t) => hist.has(t))) {
+                    hit = true;
+                    break;
+                }
+            }
+        }
+        st.tasks++;
+        if (hit)
+            st.hits++;
+        st.qsig[Math.min(qSig.length, QSIG_CAP)]++;
+        if (completed) {
+            st.ring.push(new Set(tokens(objective)));
+            if (st.ring.length > RING)
+                st.ring.shift();
+        }
+        this.metrics?.inc("plan_cache_recurrence_total", { hit: hit ? "true" : "false" });
+        this.metrics?.observe("plan_cache_qsig", qSig.length);
+        this.logger?.debug("plan-cache recurrence probe", { scope, qSig: qSig.length, hit, completed });
+    }
+    dump() {
+        const out = {};
+        for (const [scope, st] of this.byScope) {
+            out[scope] = {
+                tasks: st.tasks,
+                hits: st.hits,
+                hitRate: st.tasks > 0 ? st.hits / st.tasks : 0,
+                qsig: [...st.qsig],
+            };
+        }
+        return out;
+    }
+    touch(scope) {
+        let st = this.byScope.get(scope);
+        if (st) {
+            this.byScope.delete(scope);
+            this.byScope.set(scope, st);
+            return st;
+        }
+        st = { ring: [], tasks: 0, hits: 0, qsig: new Array(QSIG_CAP + 1).fill(0) };
+        this.byScope.set(scope, st);
+        if (this.byScope.size > MAX_SCOPES) {
+            const oldest = this.byScope.keys().next().value;
+            if (oldest !== undefined)
+                this.byScope.delete(oldest);
+        }
+        return st;
+    }
+}
+//# sourceMappingURL=plan-cache-probe.js.map

package/dist/plan-cache-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-cache-probe.js","sourceRoot":"","sources":["../src/plan-cache-probe.ts"],"names":[],"mappings":"AAyBA,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC;IACnB,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK;IACvG,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;IACrG,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI;IACtG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CACrG,CAAC,CAAC;AAGH,MAAM,UAAU,MAAM,CAAC,CAAS;IAC9B,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAsBD,MAAM,IAAI,GAAG,IAAI,CAAC;AAClB,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,MAAM,CAAC,MAAM,QAAQ,GAAG,EAAE,CAAC;AAM3B,MAAM,OAAO,cAAc;IAGN;IACA;IAHF,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IACzD,YACmB,OAAiB,EACjB,MAAe;QADf,YAAO,GAAP,OAAO,CAAU;QACjB,WAAM,GAAN,MAAM,CAAS;IAC/B,CAAC;IAMJ,MAAM,CAAC,QAA4B,EAAE,SAAiB,EAAE,SAAkB;QACxE,MAAM,KAAK,GAAG,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QAClE,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAI7B,IAAI,GAAG,GAAG,KAAK,CAAC;QAChB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;gBAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,GAAG,GAAG,IAAI,CAAC;oBACX,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,GAAG;YAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QACnB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAE,EAAE,CAAC;QAC5C,IAAI,SAAS,EAAE,CAAC;YACd,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACzC,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI;gBAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,6BAA6B,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IAClG,CAAC;IAGD,IAAI;QACF,MAAM,GAAG,GAAoC,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,GAAG;gBACX,KAAK,EAAE,EAAE,CAAC,KAAK;gBACf,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,OAAO,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9C,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aACnB,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAGO,KAAK,CAAC,KAAa;QACzB,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,EAAE,EAAE,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,UAAU,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAChD,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF"}

package/dist/plugins/approval-exemption-store.d.ts

@@ -0,0 +1,56 @@
+import type { Pool as MysqlPool } from "mysql2/promise";
+import type { Pool as PgPool } from "pg";
+export interface ApprovalExemptionRow {
+    toolName: string;
+    grantedBy: string | null;
+    createdAt: number;
+}
+export interface ApprovalExemptionStore {
+    grant(sessionId: string, toolName: string, grantedBy: string | null): Promise<void>;
+    has(sessionId: string, toolName: string): Promise<boolean>;
+    list(sessionId: string): Promise<ApprovalExemptionRow[]>;
+    revoke(sessionId: string, toolName: string): Promise<boolean>;
+    deleteBySession(sessionId: string): Promise<number>;
+}
+export declare class TiDBApprovalExemptionStore implements ApprovalExemptionStore {
+    private readonly pool;
+    constructor(pool: MysqlPool);
+    grant(sessionId: string, toolName: string, grantedBy: string | null): Promise<void>;
+    has(sessionId: string, toolName: string): Promise<boolean>;
+    list(sessionId: string): Promise<ApprovalExemptionRow[]>;
+    revoke(sessionId: string, toolName: string): Promise<boolean>;
+    deleteBySession(sessionId: string): Promise<number>;
+}
+export declare class PgApprovalExemptionStore implements ApprovalExemptionStore {
+    private readonly pool;
+    constructor(pool: PgPool);
+    grant(sessionId: string, toolName: string, grantedBy: string | null): Promise<void>;
+    has(sessionId: string, toolName: string): Promise<boolean>;
+    list(sessionId: string): Promise<ApprovalExemptionRow[]>;
+    revoke(sessionId: string, toolName: string): Promise<boolean>;
+    deleteBySession(sessionId: string): Promise<number>;
+}
+export declare class MemoryApprovalExemptionStore implements ApprovalExemptionStore {
+    private readonly bySession;
+    grant(sessionId: string, toolName: string, grantedBy: string | null): Promise<void>;
+    has(sessionId: string, toolName: string): Promise<boolean>;
+    list(sessionId: string): Promise<ApprovalExemptionRow[]>;
+    revoke(sessionId: string, toolName: string): Promise<boolean>;
+    deleteBySession(sessionId: string): Promise<number>;
+}
+export declare class FileApprovalExemptionStore implements ApprovalExemptionStore {
+    private readonly dir;
+    private readonly bySession;
+    private readonly logs;
+    constructor(root: string);
+    private pathFor;
+    private hydrate;
+    private logFor;
+    grant(sessionId: string, toolName: string, grantedBy: string | null): Promise<void>;
+    has(sessionId: string, toolName: string): Promise<boolean>;
+    list(sessionId: string): Promise<ApprovalExemptionRow[]>;
+    revoke(sessionId: string, toolName: string): Promise<boolean>;
+    deleteBySession(sessionId: string): Promise<number>;
+    dispose(): void;
+}
+//# sourceMappingURL=approval-exemption-store.d.ts.map

package/dist/plugins/approval-exemption-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-exemption-store.d.ts","sourceRoot":"","sources":["../../src/plugins/approval-exemption-store.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,IAAI,IAAI,SAAS,EAAkC,MAAM,gBAAgB,CAAC;AACxF,OAAO,KAAK,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,IAAI,CAAC;AAEzC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IAErC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpF,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3D,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAEzD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9D,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACrD;AAID,qBAAa,0BAA2B,YAAW,sBAAsB;IAC3D,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,SAAS;IAEtC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnF,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ1D,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAYxD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ7D,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAI1D;AAID,qBAAa,wBAAyB,YAAW,sBAAsB;IACzD,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,MAAM;IAEnC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnF,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ1D,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAYxD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ7D,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAI1D;AAID,qBAAa,4BAA6B,YAAW,sBAAsB;IACzE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmF;IAEvG,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnF,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1D,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAQxD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI7D,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAK1D;AAYD,qBAAa,0BAA2B,YAAW,sBAAsB;IACvE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmF;IAC7G,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgC;gBAEzC,IAAI,EAAE,MAAM;IAMxB,OAAO,CAAC,OAAO;IAKf,OAAO,CAAC,OAAO;IA2Bf,OAAO,CAAC,MAAM;IAUR,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAYnF,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1D,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAQxD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAS7D,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAuBzD,OAAO,IAAI,IAAI;CAUhB"}