@synaplink/orqlaude 0.3.0

package/dist/cli.js

@@ -0,0 +1,322 @@
+#!/usr/bin/env node
+import path from "node:path";
+import readline from "node:readline/promises";
+import { stdin, stdout } from "node:process";
+import { StateStore } from "./lib/state.js";
+import { AuditLog } from "./lib/audit.js";
+import { snapshotSession } from "./lib/jsonl_tail.js";
+import { loadConfig, saveConfig, CONFIG_PATH } from "./telegram/config.js";
+import { TelegramApi } from "./telegram/api.js";
+import { runBot } from "./telegram/bot.js";
+/**
+ * orqlaude CLI — read-only inspection of state + audit log + Telegram setup
+ * and run.
+ *
+ * Subcommands:
+ *   orqlaude list / status / show / history    — read-only project inspection
+ *   orqlaude tg setup / whitelist / start / test / show / help
+ */
+const STATE_DIR = process.env.ORQLAUDE_STATE_DIR ?? path.join(process.cwd(), ".orqlaude");
+async function main() {
+    const [cmd, ...rest] = process.argv.slice(2);
+    switch (cmd) {
+        case undefined:
+        case "help":
+        case "-h":
+        case "--help":
+            printHelp();
+            return 0;
+        case "list":
+            return await cmdList();
+        case "status":
+            return await cmdStatus(rest[0]);
+        case "show":
+            return await cmdShow(rest[0]);
+        case "history":
+            return await cmdHistory(parseLimit(rest));
+        case "tg":
+            return await cmdTg(rest);
+        default:
+            console.error(`Unknown subcommand: ${cmd}`);
+            printHelp();
+            return 1;
+    }
+}
+function printHelp() {
+    console.log(`orqlaude — multi-agent orchestrator for Claude Code
+
+Inspection:
+  orqlaude list                   List every plan in this project
+  orqlaude status <plan_id>       Refreshed status of one plan
+  orqlaude show <plan_id>         Raw plan JSON
+  orqlaude history [--limit N]    Tail the audit log (default 30)
+
+Telegram:
+  orqlaude tg setup               Configure bot token (interactive)
+  orqlaude tg whitelist <id> [--owner] [--label NAME]
+  orqlaude tg unwhitelist <id>
+  orqlaude tg show                Show current Telegram config
+  orqlaude tg test <chat_id>      Send a test message
+  orqlaude tg start               Run the bot (foreground, monitors this project)
+  orqlaude tg help                Telegram-specific help
+
+State dir: ${STATE_DIR}`);
+}
+// ---- read-only inspection -------------------------------------------------
+async function cmdList() {
+    const store = new StateStore(STATE_DIR);
+    const plans = await store.read((s) => Object.values(s.plans).sort((a, b) => b.createdAt - a.createdAt));
+    if (plans.length === 0) {
+        console.log("No plans yet in this project.");
+        return 0;
+    }
+    for (const p of plans) {
+        const done = p.tasks.filter((t) => t.status === "done").length;
+        const running = p.tasks.filter((t) => t.status === "running" || t.status === "dispatched").length;
+        console.log(`${p.id}  ${p.status.padEnd(22)}  ${done}/${p.tasks.length} done${running ? `, ${running} running` : ""}  — ${truncate(p.rootTask, 60)}`);
+    }
+    return 0;
+}
+async function cmdStatus(planId) {
+    if (!planId) {
+        console.error("usage: orqlaude status <plan_id>");
+        return 2;
+    }
+    const store = new StateStore(STATE_DIR);
+    let plan;
+    try {
+        plan = await store.read((s) => requirePlan(s.plans, planId));
+    }
+    catch (err) {
+        console.error(err.message);
+        return 1;
+    }
+    console.log(`Plan ${plan.id}`);
+    console.log(`  status:     ${plan.status}`);
+    console.log(`  root_task:  ${plan.rootTask}`);
+    console.log(`  budget:     ${plan.budgetCapTokens.toLocaleString()} tokens (${Math.round(plan.budgetCapTokens / 1000)}k)`);
+    console.log(`  created:    ${new Date(plan.createdAt).toISOString()}`);
+    if (plan.approvedAt)
+        console.log(`  approved:   ${new Date(plan.approvedAt).toISOString()}`);
+    console.log(`  tasks:`);
+    let totalTokens = 0;
+    for (const t of plan.tasks) {
+        let extra = "";
+        if (t.spawnedSessionId) {
+            const snap = await snapshotSession(process.cwd(), t.spawnedSessionId);
+            totalTokens += snap.totalEffectiveTokens;
+            extra = `  ${snap.totalEffectiveTokens.toLocaleString()}t  ${snap.terminated ? "✓" : snap.lastToolUse?.name ?? snap.lastEventType ?? ""}`;
+        }
+        console.log(`    [${t.status.padEnd(10)}] ${t.title.padEnd(50)}${extra}`);
+        if (t.prUrl)
+            console.log(`        PR: ${t.prUrl}`);
+    }
+    console.log(`  used:       ${totalTokens.toLocaleString()} tokens`);
+    if (plan.notes.length > 0)
+        console.log(`  notes:      ${plan.notes.length}`);
+    if (plan.claims.length > 0)
+        console.log(`  claims:     ${plan.claims.length}`);
+    return 0;
+}
+async function cmdShow(planId) {
+    if (!planId) {
+        console.error("usage: orqlaude show <plan_id>");
+        return 2;
+    }
+    const store = new StateStore(STATE_DIR);
+    try {
+        const plan = await store.read((s) => requirePlan(s.plans, planId));
+        console.log(JSON.stringify(plan, null, 2));
+        return 0;
+    }
+    catch (err) {
+        console.error(err.message);
+        return 1;
+    }
+}
+async function cmdHistory(limit) {
+    const audit = new AuditLog(STATE_DIR);
+    const events = await audit.tail(limit);
+    if (events.length === 0) {
+        console.log("(no audit events yet)");
+        return 0;
+    }
+    for (const e of events) {
+        const ts = new Date(e.ts).toISOString().slice(11, 19);
+        const ok = e.ok ? "  ok" : "ERR ";
+        const id = e.planId ? ` plan=${e.planId.slice(0, 8)}` : e.sessionId ? ` sess=${e.sessionId.slice(0, 8)}` : "";
+        console.log(`${ts}  ${ok}  ${e.tool.padEnd(18)} ${e.durationMs.toString().padStart(4)}ms${id}  ${e.resultSummary ? truncate(e.resultSummary, 80) : e.error ?? ""}`);
+    }
+    return 0;
+}
+// ---- Telegram subcommands -------------------------------------------------
+async function cmdTg(args) {
+    const [sub, ...rest] = args;
+    switch (sub) {
+        case undefined:
+        case "help":
+            printTgHelp();
+            return 0;
+        case "setup":
+            return await cmdTgSetup();
+        case "show":
+            return await cmdTgShow();
+        case "whitelist":
+            return await cmdTgWhitelist(rest);
+        case "unwhitelist":
+            return await cmdTgUnwhitelist(rest);
+        case "test":
+            return await cmdTgTest(rest);
+        case "start":
+            return await cmdTgStart();
+        default:
+            console.error(`Unknown tg subcommand: ${sub}`);
+            printTgHelp();
+            return 1;
+    }
+}
+function printTgHelp() {
+    console.log(`orqlaude tg — Telegram bot
+
+Commands:
+  orqlaude tg setup                       Interactively set the bot token
+  orqlaude tg show                        Show current config
+  orqlaude tg whitelist <user_id> [--owner] [--label NAME]
+  orqlaude tg unwhitelist <user_id>
+  orqlaude tg test <chat_id>              Send a test message
+  orqlaude tg start                       Run the bot (foreground)
+
+Config file: ${CONFIG_PATH}
+The bot watches the current working directory's .orqlaude state.`);
+}
+async function cmdTgSetup() {
+    const rl = readline.createInterface({ input: stdin, output: stdout });
+    const cfg = await loadConfig();
+    console.log("Telegram bot setup.\n");
+    console.log("1. Open Telegram, search for @BotFather, create a new bot, and copy the token.\n");
+    const token = (await rl.question(`Bot token${cfg.botToken ? " (press enter to keep existing)" : ""}: `)).trim();
+    if (token)
+        cfg.botToken = token;
+    rl.close();
+    if (!cfg.botToken) {
+        console.error("No token provided.");
+        return 1;
+    }
+    // Verify
+    const api = new TelegramApi(cfg.botToken);
+    try {
+        const me = await api.getMe();
+        console.log(`\n✓ Verified: @${me.username} (bot id ${me.id})`);
+    }
+    catch (err) {
+        console.error(`Failed to verify token: ${err.message}`);
+        return 1;
+    }
+    await saveConfig(cfg);
+    console.log(`Saved to ${CONFIG_PATH} (mode 600).`);
+    console.log("\nNext: message your bot with /start in Telegram. It'll print your user id. Then run:");
+    console.log(`  orqlaude tg whitelist <your_user_id> --owner`);
+    console.log(`Then:`);
+    console.log(`  orqlaude tg start`);
+    return 0;
+}
+async function cmdTgShow() {
+    const cfg = await loadConfig();
+    console.log(`Telegram config (${CONFIG_PATH}):`);
+    console.log(`  bot token:  ${cfg.botToken ? cfg.botToken.slice(0, 8) + "…" : "(not set)"}`);
+    console.log(`  owner:      ${cfg.ownerId ?? "(none)"}`);
+    console.log(`  whitelist:  ${cfg.whitelist.length} user(s)`);
+    for (const w of cfg.whitelist) {
+        console.log(`    - ${w.userId}${w.label ? ` (${w.label})` : ""}`);
+    }
+    return 0;
+}
+async function cmdTgWhitelist(args) {
+    const userId = Number(args[0]);
+    if (!Number.isFinite(userId)) {
+        console.error("usage: orqlaude tg whitelist <user_id> [--owner] [--label NAME]");
+        return 2;
+    }
+    const isOwner = args.includes("--owner");
+    const labelIdx = args.indexOf("--label");
+    const label = labelIdx !== -1 ? args[labelIdx + 1] : undefined;
+    const cfg = await loadConfig();
+    if (!cfg.whitelist.some((w) => w.userId === userId)) {
+        cfg.whitelist.push({ userId, chatId: userId, label });
+    }
+    if (isOwner)
+        cfg.ownerId = userId;
+    await saveConfig(cfg);
+    console.log(`✓ Whitelisted ${userId}${label ? ` (${label})` : ""}${isOwner ? " — set as owner" : ""}.`);
+    return 0;
+}
+async function cmdTgUnwhitelist(args) {
+    const userId = Number(args[0]);
+    if (!Number.isFinite(userId)) {
+        console.error("usage: orqlaude tg unwhitelist <user_id>");
+        return 2;
+    }
+    const cfg = await loadConfig();
+    cfg.whitelist = cfg.whitelist.filter((w) => w.userId !== userId);
+    if (cfg.ownerId === userId)
+        cfg.ownerId = null;
+    await saveConfig(cfg);
+    console.log(`✓ Removed ${userId}.`);
+    return 0;
+}
+async function cmdTgTest(args) {
+    const chatId = Number(args[0]);
+    if (!Number.isFinite(chatId)) {
+        console.error("usage: orqlaude tg test <chat_id>");
+        return 2;
+    }
+    const cfg = await loadConfig();
+    if (!cfg.botToken) {
+        console.error("No bot token. Run `orqlaude tg setup` first.");
+        return 1;
+    }
+    const api = new TelegramApi(cfg.botToken);
+    try {
+        await api.sendMessage(chatId, "🦾 orqlaude bot test — if you see this, the wiring works.");
+        console.log("✓ Sent.");
+        return 0;
+    }
+    catch (err) {
+        console.error(`Failed: ${err.message}`);
+        return 1;
+    }
+}
+async function cmdTgStart() {
+    try {
+        await runBot(process.cwd());
+        return 0;
+    }
+    catch (err) {
+        console.error(err.message);
+        return 1;
+    }
+}
+// ---- helpers --------------------------------------------------------------
+function requirePlan(plans, planId) {
+    const full = plans[planId] ?? Object.values(plans).find((p) => p.id.startsWith(planId));
+    if (!full)
+        throw new Error(`Plan not found: ${planId}`);
+    return full;
+}
+function parseLimit(args) {
+    const idx = args.indexOf("--limit");
+    if (idx === -1 || !args[idx + 1])
+        return 30;
+    const n = parseInt(args[idx + 1], 10);
+    return Number.isFinite(n) && n > 0 ? n : 30;
+}
+function truncate(s, n) {
+    if (s.length <= n)
+        return s;
+    return s.slice(0, n - 1) + "…";
+}
+main().then((code) => process.exit(code), (err) => {
+    console.error(err);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,QAAQ,MAAM,wBAAwB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAa,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C;;;;;;;GAOG;AAEH,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;AAE1F,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,IAAI,CAAC;QACV,KAAK,QAAQ;YACX,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC;QACX,KAAK,MAAM;YACT,OAAO,MAAM,OAAO,EAAE,CAAC;QACzB,KAAK,QAAQ;YACX,OAAO,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,MAAM;YACT,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,KAAK,SAAS;YACZ,OAAO,MAAM,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,KAAK,IAAI;YACP,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B;YACE,OAAO,CAAC,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YAC5C,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;aAiBD,SAAS,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAE9E,KAAK,UAAU,OAAO;IACpB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACxG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QAC/D,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,MAAM,CAAC;QAClG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,QAAQ,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACxJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAA0B;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,IAAU,CAAC;IACf,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,YAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3H,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACvE,IAAI,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACtE,WAAW,IAAI,IAAI,CAAC,oBAAoB,CAAC;YACzC,KAAK,GAAG,KAAK,IAAI,CAAC,oBAAoB,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,IAAI,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;QAC5I,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,CAAC,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,iBAAiB,WAAW,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,MAA0B;IAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAChD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAa;IACrC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9G,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;IACtK,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8EAA8E;AAE9E,KAAK,UAAU,KAAK,CAAC,IAAc;IACjC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,MAAM;YACT,WAAW,EAAE,CAAC;YACd,OAAO,CAAC,CAAC;QACX,KAAK,OAAO;YACV,OAAO,MAAM,UAAU,EAAE,CAAC;QAC5B,KAAK,MAAM;YACT,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,KAAK,WAAW;YACd,OAAO,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,aAAa;YAChB,OAAO,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,KAAK,MAAM;YACT,OAAO,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,OAAO;YACV,OAAO,MAAM,UAAU,EAAE,CAAC;QAC5B;YACE,OAAO,CAAC,KAAK,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAC;YAC/C,WAAW,EAAE,CAAC;YACd,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;eAUC,WAAW;iEACuC,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChH,IAAI,KAAK;QAAE,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;IAChC,EAAE,CAAC,KAAK,EAAE,CAAC;IACX,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,SAAS;IACT,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,QAAQ,YAAY,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,2BAA4B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,YAAY,WAAW,cAAc,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC;IACrG,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,oBAAoB,WAAW,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,SAAS,CAAC,MAAM,UAAU,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAc;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACjF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,OAAO;QAAE,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC;IAClC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxG,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAc;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACjE,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM;QAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;IAC/C,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,GAAG,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAc;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,2DAA2D,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,WAAY,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E,SAAS,WAAW,CAAC,KAA2B,EAAE,MAAc;IAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;AACjC,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5B,CAAC,GAAG,EAAE,EAAE;IACN,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CACF,CAAC"}

package/dist/lib/audit.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Append-only audit log. Every MCP tool invocation writes one line.
+ *
+ * Format: JSONL — each line is { ts, tool, args, result_summary, ok, error?, plan_id? }
+ *
+ * Why append-only and not part of the state file: the state file is small and
+ * frequently rewritten (atomic temp+rename); folding audit events into it
+ * would churn it constantly. The audit log is unbounded and naturally
+ * line-oriented, so JSONL append is the right primitive.
+ *
+ * Inspect with: `tail -f .orqlaude/audit.jsonl | jq`
+ */
+export interface AuditEvent {
+    ts: number;
+    tool: string;
+    args: unknown;
+    ok: boolean;
+    durationMs: number;
+    resultSummary?: string;
+    error?: string;
+    planId?: string;
+    sessionId?: string;
+}
+export declare class AuditLog {
+    private filePath;
+    private writeQueue;
+    constructor(stateDir: string);
+    append(evt: AuditEvent): Promise<void>;
+    /**
+     * Wrap a tool handler so every invocation is audited. Captures duration,
+     * success/failure, and a short summary of the result.
+     */
+    wrap<TArgs extends Record<string, unknown>, TResult>(toolName: string, handler: (args: TArgs) => Promise<TResult>, extractIds?: (args: TArgs, result?: TResult) => {
+        planId?: string;
+        sessionId?: string;
+    }): (args: TArgs) => Promise<TResult>;
+    tail(limit?: number): Promise<AuditEvent[]>;
+}

package/dist/lib/audit.js

@@ -0,0 +1,108 @@
+import { promises as fs } from "node:fs";
+import path from "node:path";
+export class AuditLog {
+    filePath;
+    writeQueue = Promise.resolve();
+    constructor(stateDir) {
+        this.filePath = path.join(stateDir, "audit.jsonl");
+    }
+    async append(evt) {
+        // Serialize writes to avoid interleaving from concurrent tool calls.
+        this.writeQueue = this.writeQueue.then(async () => {
+            try {
+                await fs.mkdir(path.dirname(this.filePath), { recursive: true });
+                await fs.appendFile(this.filePath, JSON.stringify(evt) + "\n");
+            }
+            catch (err) {
+                // Best-effort: never fail a tool call because audit logging failed.
+                // The error message goes to stderr where MCP debug surfaces it.
+                process.stderr.write(`[orqlaude audit] write failed: ${err.message}\n`);
+            }
+        });
+        return this.writeQueue;
+    }
+    /**
+     * Wrap a tool handler so every invocation is audited. Captures duration,
+     * success/failure, and a short summary of the result.
+     */
+    wrap(toolName, handler, extractIds) {
+        return async (args) => {
+            const started = Date.now();
+            try {
+                const result = await handler(args);
+                const ids = extractIds?.(args, result) ?? {};
+                await this.append({
+                    ts: started,
+                    tool: toolName,
+                    args: redactSecrets(args),
+                    ok: true,
+                    durationMs: Date.now() - started,
+                    resultSummary: summarize(result),
+                    ...ids,
+                });
+                return result;
+            }
+            catch (err) {
+                const ids = extractIds?.(args) ?? {};
+                await this.append({
+                    ts: started,
+                    tool: toolName,
+                    args: redactSecrets(args),
+                    ok: false,
+                    durationMs: Date.now() - started,
+                    error: err instanceof Error ? err.message : String(err),
+                    ...ids,
+                });
+                throw err;
+            }
+        };
+    }
+    async tail(limit = 50) {
+        try {
+            const raw = await fs.readFile(this.filePath, "utf8");
+            const lines = raw.split("\n").filter((l) => l.trim());
+            return lines
+                .slice(-limit)
+                .map((l) => {
+                try {
+                    return JSON.parse(l);
+                }
+                catch {
+                    return null;
+                }
+            })
+                .filter((e) => e !== null);
+        }
+        catch (err) {
+            if (err.code === "ENOENT")
+                return [];
+            throw err;
+        }
+    }
+}
+function summarize(result) {
+    // MCP tool results are typically { content: [{ type: "text", text: "..." }] }.
+    // Extract the first text and truncate.
+    try {
+        const r = result;
+        const text = r?.content?.[0]?.text;
+        if (typeof text === "string")
+            return text.slice(0, 200);
+        return JSON.stringify(result).slice(0, 200);
+    }
+    catch {
+        return String(result).slice(0, 200);
+    }
+}
+function redactSecrets(args) {
+    // Approval tokens are single-use, but we still don't want them sitting in
+    // the audit log forever.
+    if (args && typeof args === "object") {
+        const clone = { ...args };
+        if ("approval_token" in clone)
+            clone.approval_token = "<redacted>";
+        return clone;
+    }
+    return args;
+}
+//# sourceMappingURL=audit.js.map

package/dist/lib/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/lib/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AA2B7B,MAAM,OAAO,QAAQ;IACX,QAAQ,CAAS;IACjB,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEtD,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAe;QAC1B,qEAAqE;QACrE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAChD,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjE,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,oEAAoE;gBACpE,gEAAgE;gBAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAmC,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;YACrF,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,IAAI,CACF,QAAgB,EAChB,OAA0C,EAC1C,UAAuF;QAEvF,OAAO,KAAK,EAAE,IAAW,EAAE,EAAE;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC7C,MAAM,IAAI,CAAC,MAAM,CAAC;oBAChB,EAAE,EAAE,OAAO;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;oBACzB,EAAE,EAAE,IAAI;oBACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;oBAChC,aAAa,EAAE,SAAS,CAAC,MAAM,CAAC;oBAChC,GAAG,GAAG;iBACP,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,MAAM,CAAC;oBAChB,EAAE,EAAE,OAAO;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;oBACzB,EAAE,EAAE,KAAK;oBACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;oBAChC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;oBACvD,GAAG,GAAG;iBACP,CAAC,CAAC;gBACH,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACtD,OAAO,KAAK;iBACT,KAAK,CAAC,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,IAAI,CAAC;oBACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAe,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC,CAAC;iBACD,MAAM,CAAC,CAAC,CAAC,EAAmB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YACrC,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED,SAAS,SAAS,CAAC,MAAe;IAChC,+EAA+E;IAC/E,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAa,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QACnC,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,0EAA0E;IAC1E,yBAAyB;IACzB,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,KAAK,GAA4B,EAAE,GAAI,IAAgC,EAAE,CAAC;QAChF,IAAI,gBAAgB,IAAI,KAAK;YAAE,KAAK,CAAC,cAAc,GAAG,YAAY,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/budgeting.d.ts

@@ -0,0 +1,37 @@
+import { MODEL_PRICING } from "./pricing.js";
+export interface DailyTokenUsage {
+    date: string;
+    tokens: number;
+}
+/**
+ * Read the Desktop app's daily token tally. Returns null if file missing
+ * (e.g. user isn't on the Desktop app). Safe to call repeatedly; the file is
+ * small and disk-resident.
+ */
+export declare function readDailyTokenUsage(): Promise<DailyTokenUsage | null>;
+/**
+ * Rough token estimate per agent for a sub-task. Mirrors estimateAgentCost
+ * but in tokens so it composes with a token-based cap.
+ *
+ * Baselines tuned to one Haiku probe (~30k cache-creation + ~50k cache-read
+ * over the run + ~4k output ≈ 84k effective tokens). Tune as we collect more.
+ */
+export declare function estimateAgentTokens(effortMultiplier?: number): {
+    inputTokens: number;
+    cacheReadTokens: number;
+    cacheCreationTokens: number;
+    outputTokens: number;
+    totalEffective: number;
+};
+/** Convenience: compute USD cost AND token estimate together. */
+export declare function estimateAgent(model: string, effortMultiplier?: number): {
+    tokens: {
+        inputTokens: number;
+        cacheReadTokens: number;
+        cacheCreationTokens: number;
+        outputTokens: number;
+        totalEffective: number;
+    };
+    costUsd: number;
+};
+export { MODEL_PRICING };

package/dist/lib/budgeting.js

@@ -0,0 +1,67 @@
+import { promises as fs } from "node:fs";
+import path from "node:path";
+import { MODEL_PRICING, estimateAgentCost } from "./pricing.js";
+/**
+ * Token-based budgeting (Max x20 friendly).
+ *
+ * Max-plan users care about their daily/weekly token bucket, not USD. The
+ * Claude Desktop app already tracks daily usage in:
+ *   ~/Library/Application Support/Claude/buddy-tokens.json
+ *
+ * We read that file to surface remaining quota, and we let the user set a
+ * per-fleet token cap. USD remains tracked (and shown informationally) because
+ * it's a useful sanity check for runaway agents and because not every user is
+ * on Max — but token caps are the primary enforcement mechanism.
+ */
+const HOME = process.env.HOME ?? process.env.USERPROFILE ?? "";
+const BUDDY_TOKENS_PATH = path.join(HOME, "Library", "Application Support", "Claude", "buddy-tokens.json");
+/**
+ * Read the Desktop app's daily token tally. Returns null if file missing
+ * (e.g. user isn't on the Desktop app). Safe to call repeatedly; the file is
+ * small and disk-resident.
+ */
+export async function readDailyTokenUsage() {
+    try {
+        const raw = await fs.readFile(BUDDY_TOKENS_PATH, "utf8");
+        const parsed = JSON.parse(raw);
+        return parsed["tokens-today"] ?? null;
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return null;
+        throw err;
+    }
+}
+/**
+ * Rough token estimate per agent for a sub-task. Mirrors estimateAgentCost
+ * but in tokens so it composes with a token-based cap.
+ *
+ * Baselines tuned to one Haiku probe (~30k cache-creation + ~50k cache-read
+ * over the run + ~4k output ≈ 84k effective tokens). Tune as we collect more.
+ */
+export function estimateAgentTokens(effortMultiplier = 1) {
+    const e = effortMultiplier;
+    const cacheCreate = Math.round(30_000 * e);
+    const input = Math.round(1_000 * e);
+    const cacheRead = Math.round(50_000 * e);
+    const output = Math.round(4_000 * e);
+    // "totalEffective" approximates buddy-bucket consumption; the Desktop app's
+    // accounting collapses everything into one counter so we sum without
+    // weighting.
+    return {
+        inputTokens: input,
+        cacheReadTokens: cacheRead,
+        cacheCreationTokens: cacheCreate,
+        outputTokens: output,
+        totalEffective: input + cacheRead + cacheCreate + output,
+    };
+}
+/** Convenience: compute USD cost AND token estimate together. */
+export function estimateAgent(model, effortMultiplier = 1) {
+    return {
+        tokens: estimateAgentTokens(effortMultiplier),
+        costUsd: estimateAgentCost(model, effortMultiplier),
+    };
+}
+export { MODEL_PRICING };
+//# sourceMappingURL=budgeting.js.map

package/dist/lib/budgeting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budgeting.js","sourceRoot":"","sources":["../../src/lib/budgeting.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEhE;;;;;;;;;;;GAWG;AAEH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;AAC/D,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CACjC,IAAI,EACJ,SAAS,EACT,qBAAqB,EACrB,QAAQ,EACR,mBAAmB,CACpB,CAAC;AAOF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyC,CAAC;QACvE,OAAO,MAAM,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC;IACxC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,gBAAgB,GAAG,CAAC;IAOtD,MAAM,CAAC,GAAG,gBAAgB,CAAC;IAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACrC,4EAA4E;IAC5E,qEAAqE;IACrE,aAAa;IACb,OAAO;QACL,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,SAAS;QAC1B,mBAAmB,EAAE,WAAW;QAChC,YAAY,EAAE,MAAM;QACpB,cAAc,EAAE,KAAK,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM;KACzD,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,gBAAgB,GAAG,CAAC;IAC/D,OAAO;QACL,MAAM,EAAE,mBAAmB,CAAC,gBAAgB,CAAC;QAC7C,OAAO,EAAE,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/lib/hallucination.d.ts

@@ -0,0 +1,46 @@
+import type { SessionSnapshot } from "./jsonl_tail.js";
+/**
+ * Hallucination detection for spawned agents.
+ *
+ * Two cheap deterministic checks, summed into a score. Higher score = more
+ * concerning. The primary Claude is told the score in `status()` and can
+ * decide whether to send a STOP message or just nudge.
+ *
+ * Check 1 — path-existence: scan recent tool_use entries for file paths
+ *   (Read/Edit/Write inputs). If many reference paths that don't exist in the
+ *   worktree, the agent is editing imaginary files.
+ *
+ * Check 2 — tool-pattern sanity:
+ *   • commits without any prior Read on the file being edited
+ *   • Write of a file that already exists (often an Edit-vs-Write mistake)
+ *   • repeated identical tool calls (loop)
+ *   • Edit failing repeatedly with "no match" (agent is guessing at the content)
+ *
+ * These are deliberately conservative. False positives are acceptable; we
+ * surface concerns, we don't kill agents automatically.
+ *
+ * NOTE: a future iteration can add a Check 3 — second-model cross-validation:
+ * periodically have a Haiku read the recent activity and flag suspect turns.
+ * That costs tokens though, so it's opt-in.
+ */
+export interface HallucinationReport {
+    score: number;
+    level: "clean" | "minor" | "moderate" | "severe";
+    concerns: string[];
+}
+interface ToolUseEvent {
+    name: string;
+    input: any;
+}
+/**
+ * Score a session by inspecting its full set of tool_use events (extracted by
+ * the caller from the JSONL). cwd is the worktree root to check paths against.
+ */
+export declare function detectHallucination(toolUses: ToolUseEvent[], cwd: string): Promise<HallucinationReport>;
+/**
+ * Extract all tool_use events from a JSONL-derived snapshot's raw lines.
+ * The snapshot module currently only keeps the *last* tool_use; for
+ * hallucination detection we need the full history. This re-reads the JSONL.
+ */
+export declare function extractToolUses(jsonlPath: string): Promise<ToolUseEvent[]>;
+export type { SessionSnapshot };