@trenchwork/erosolar 1.1.28 → 1.1.29

package/dist/core/projectTracker.js

@@ -0,0 +1,275 @@
+/**
+ * Project tracking — pairs every CLI session with a stable project
+ * doc keyed off the working directory. The project doc rolls up
+ * lastSeenAt / sessionCount / totalTokens so the audit portal can
+ * show "what's the CLI been doing in /home/bo/GitHub/foo lately"
+ * without scanning every session.
+ *
+ * Identity:
+ *   projectId = sha256(absolute path).slice(0, 12)
+ * Same checkout on the same machine → same project across launches,
+ * with no operator input needed.
+ *
+ * Schema (Firestore):
+ *   projects/{projectId}
+ *     ownerUid:        string
+ *     name:            string                 (basename of workingDir)
+ *     workingDir:      string
+ *     workingDirHash:  string                 (the projectId, repeated for queries)
+ *     gitRemote:       string | null
+ *     gitBranchAtFirst: string | null
+ *     createdAt:       timestamp              (server time)
+ *     lastSeenAt:      timestamp              (server time, every boot)
+ *     sessionCount:    int                    (Firestore Increment(+1) per boot)
+ *     totalTokens:     int                    (Increment on session-end with usage)
+ *     status:          'active' | 'archived'
+ *
+ *   usage_logs/{uid}/sessions/{sessionId}
+ *     ... existing session-start fields ...
+ *     projectId:       string                 (FK)
+ *     gitBranch:       string | null
+ *     gitCommit:       string | null
+ *     outcome:         'in_progress' | 'completed' | 'cancelled' | 'errored'
+ *     filesModified:   string[]               (post-end update)
+ *     toolsUsed:       string[]               (post-end update)
+ *     tokensIn / tokensOut: int               (post-end update)
+ *     endedAt:         timestamp | null       (post-end update)
+ */
+import { createHash } from 'node:crypto';
+import { execSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { basename, resolve } from 'node:path';
+import { FIREBASE_PROJECT_ID, getAuthStatus, getValidIdToken } from './auth.js';
+const FIRESTORE_BASE = `https://firestore.googleapis.com/v1/projects/${FIREBASE_PROJECT_ID}/databases/(default)/documents`;
+export function deriveProjectId(workingDir) {
+    return createHash('sha256').update(resolve(workingDir)).digest('hex').slice(0, 12);
+}
+function safeGit(args, cwd) {
+    try {
+        const out = execSync(`git ${args.map(shellQuote).join(' ')}`, {
+            cwd,
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+            timeout: 2000,
+        });
+        return out.trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+function shellQuote(s) {
+    return /^[\w./:=-]+$/.test(s) ? s : `'${s.replace(/'/g, "'\\''")}'`;
+}
+function gitInfo(workingDir) {
+    if (!existsSync(workingDir))
+        return { branch: null, commit: null, remote: null };
+    return {
+        branch: safeGit(['rev-parse', '--abbrev-ref', 'HEAD'], workingDir),
+        commit: safeGit(['rev-parse', 'HEAD'], workingDir),
+        remote: safeGit(['config', '--get', 'remote.origin.url'], workingDir),
+    };
+}
+export function buildProjectContext(workingDir) {
+    const abs = resolve(workingDir);
+    const id = deriveProjectId(abs);
+    const { branch, commit, remote } = gitInfo(abs);
+    return {
+        projectId: id,
+        workingDir: abs,
+        name: basename(abs) || abs,
+        gitBranch: branch,
+        gitCommit: commit,
+        gitRemote: remote,
+    };
+}
+function strField(v) {
+    if (v == null || v === '')
+        return { nullValue: null };
+    return { stringValue: v };
+}
+/**
+ * Idempotent register of `projects/{projectId}`. Uses Firestore's
+ * REST `commit` endpoint with two writes in a transaction-like
+ * batch: an upsert of mutable fields + a server-side
+ * `Increment(1)` on sessionCount. The createdAt-vs-lastSeenAt
+ * distinction is preserved because Firestore PATCH with a partial
+ * field mask only touches the listed fields.
+ */
+export async function registerProject(workingDir) {
+    const context = buildProjectContext(workingDir);
+    const status = getAuthStatus();
+    if (!status.authenticated || !status.uid) {
+        return { ok: false, context, reason: 'not signed in' };
+    }
+    try {
+        const idToken = await getValidIdToken();
+        // Two writes via :commit so server-side timestamps + Increment fire
+        // atomically. The first PATCH ensures createdAt and gitBranchAtFirst
+        // only land on first write (updateMask omits them on subsequent
+        // calls — see below). The second write Increments sessionCount and
+        // sets lastSeenAt every boot.
+        const docPath = `projects/${context.projectId}`;
+        const fullName = `projects/${FIREBASE_PROJECT_ID}/databases/(default)/documents/${docPath}`;
+        // Discover whether the doc exists (so we can skip writing
+        // createdAt / gitBranchAtFirst on subsequent boots).
+        const getRes = await fetch(`${FIRESTORE_BASE}/${docPath}`, {
+            headers: { Authorization: `Bearer ${idToken}` },
+        });
+        const exists = getRes.status === 200;
+        const fields = {
+            ownerUid: { stringValue: status.uid },
+            name: { stringValue: context.name },
+            workingDir: { stringValue: context.workingDir },
+            workingDirHash: { stringValue: context.projectId },
+            gitRemote: strField(context.gitRemote),
+            lastSeenAt: { timestampValue: new Date().toISOString() },
+            status: { stringValue: 'active' },
+        };
+        if (!exists) {
+            fields['createdAt'] = { timestampValue: new Date().toISOString() };
+            fields['gitBranchAtFirst'] = strField(context.gitBranch);
+            fields['sessionCount'] = { integerValue: '1' };
+            fields['totalTokens'] = { integerValue: '0' };
+        }
+        const updateMask = Object.keys(fields).map((k) => `updateMask.fieldPaths=${k}`).join('&');
+        const patchUrl = `${FIRESTORE_BASE}/${docPath}?${updateMask}`;
+        const patchRes = await fetch(patchUrl, {
+            method: 'PATCH',
+            headers: { Authorization: `Bearer ${idToken}`, 'Content-Type': 'application/json' },
+            body: JSON.stringify({ fields }),
+        });
+        if (!patchRes.ok) {
+            const txt = await patchRes.text().catch(() => '<no body>');
+            return { ok: false, context, reason: `PATCH ${patchRes.status}: ${txt.slice(0, 200)}` };
+        }
+        // For existing docs, increment sessionCount via the :commit endpoint.
+        if (exists) {
+            const commitUrl = `${FIRESTORE_BASE.replace(/\/documents$/, '')}/documents:commit`;
+            const commitBody = {
+                writes: [{
+                        transform: {
+                            document: fullName,
+                            fieldTransforms: [{
+                                    fieldPath: 'sessionCount',
+                                    increment: { integerValue: '1' },
+                                }],
+                        },
+                    }],
+            };
+            await fetch(commitUrl, {
+                method: 'POST',
+                headers: { Authorization: `Bearer ${idToken}`, 'Content-Type': 'application/json' },
+                body: JSON.stringify(commitBody),
+            }).catch(() => { });
+        }
+        return { ok: true, context };
+    }
+    catch (err) {
+        return { ok: false, context, reason: err instanceof Error ? err.message : String(err) };
+    }
+}
+/**
+ * Append `usage_logs/{uid}/sessions/{sessionId}` with the project FK.
+ * Returns the sessionId so the caller can later write session-end.
+ * Replaces the prior `writeUsageLog` for the project-aware path.
+ */
+export async function writeSessionStart(entry) {
+    const status = getAuthStatus();
+    if (!status.authenticated || !status.uid) {
+        return { ok: false, sessionId: null, reason: 'not signed in' };
+    }
+    try {
+        const idToken = await getValidIdToken();
+        const sessionId = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+        const url = `${FIRESTORE_BASE}/usage_logs/${encodeURIComponent(status.uid)}/sessions?documentId=${encodeURIComponent(sessionId)}`;
+        const body = {
+            fields: {
+                uid: { stringValue: status.uid },
+                email: strField(status.email ?? ''),
+                startedAt: { timestampValue: new Date().toISOString() },
+                profile: { stringValue: entry.profile },
+                model: { stringValue: entry.model },
+                version: { stringValue: entry.version },
+                platform: { stringValue: entry.platform },
+                projectId: { stringValue: entry.project.projectId },
+                gitBranch: strField(entry.project.gitBranch),
+                gitCommit: strField(entry.project.gitCommit),
+                outcome: { stringValue: 'in_progress' },
+                tokensIn: { integerValue: '0' },
+                tokensOut: { integerValue: '0' },
+            },
+        };
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: { Authorization: `Bearer ${idToken}`, 'Content-Type': 'application/json' },
+            body: JSON.stringify(body),
+        });
+        if (!res.ok) {
+            const txt = await res.text().catch(() => '<no body>');
+            return { ok: false, sessionId: null, reason: `Firestore ${res.status}: ${txt.slice(0, 200)}` };
+        }
+        return { ok: true, sessionId };
+    }
+    catch (err) {
+        return { ok: false, sessionId: null, reason: err instanceof Error ? err.message : String(err) };
+    }
+}
+/**
+ * Patch the session row on shell exit + bump the parent project's
+ * totalTokens. Best-effort; a kill -9 leaves the session at
+ * `outcome: in_progress` which the audit page can highlight.
+ */
+export async function writeSessionEnd(entry) {
+    const status = getAuthStatus();
+    if (!status.authenticated || !status.uid) {
+        return { ok: false, reason: 'not signed in' };
+    }
+    try {
+        const idToken = await getValidIdToken();
+        const sessionDoc = `usage_logs/${encodeURIComponent(status.uid)}/sessions/${encodeURIComponent(entry.sessionId)}`;
+        const sessionFields = ['outcome', 'endedAt', 'filesModified', 'toolsUsed', 'tokensIn', 'tokensOut'];
+        const sessionMask = sessionFields.map((k) => `updateMask.fieldPaths=${k}`).join('&');
+        const sessionBody = {
+            fields: {
+                outcome: { stringValue: entry.outcome },
+                endedAt: { timestampValue: new Date().toISOString() },
+                filesModified: { arrayValue: { values: entry.filesModified.slice(0, 100).map((s) => ({ stringValue: s })) } },
+                toolsUsed: { arrayValue: { values: entry.toolsUsed.slice(0, 100).map((s) => ({ stringValue: s })) } },
+                tokensIn: { integerValue: String(entry.tokensIn) },
+                tokensOut: { integerValue: String(entry.tokensOut) },
+            },
+        };
+        await fetch(`${FIRESTORE_BASE}/${sessionDoc}?${sessionMask}`, {
+            method: 'PATCH',
+            headers: { Authorization: `Bearer ${idToken}`, 'Content-Type': 'application/json' },
+            body: JSON.stringify(sessionBody),
+        });
+        // Increment the project's totalTokens via the :commit endpoint.
+        const totalDelta = entry.tokensIn + entry.tokensOut;
+        if (totalDelta > 0) {
+            const commitUrl = `${FIRESTORE_BASE.replace(/\/documents$/, '')}/documents:commit`;
+            const commitBody = {
+                writes: [{
+                        transform: {
+                            document: `projects/${FIREBASE_PROJECT_ID}/databases/(default)/documents/projects/${entry.projectId}`,
+                            fieldTransforms: [{
+                                    fieldPath: 'totalTokens',
+                                    increment: { integerValue: String(totalDelta) },
+                                }],
+                        },
+                    }],
+            };
+            await fetch(commitUrl, {
+                method: 'POST',
+                headers: { Authorization: `Bearer ${idToken}`, 'Content-Type': 'application/json' },
+                body: JSON.stringify(commitBody),
+            }).catch(() => { });
+        }
+        return { ok: true };
+    }
+    catch (err) {
+        return { ok: false, reason: err instanceof Error ? err.message : String(err) };
+    }
+}
+//# sourceMappingURL=projectTracker.js.map

package/dist/core/projectTracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectTracker.js","sourceRoot":"","sources":["../../src/core/projectTracker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEhF,MAAM,cAAc,GAAG,gDAAgD,mBAAmB,gCAAgC,CAAC;AAW3H,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,OAAO,CAAC,IAAc,EAAE,GAAW;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;YAC5D,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACtE,CAAC;AAED,SAAS,OAAO,CAAC,UAAkB;IACjC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjF,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC;QAClE,MAAM,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC;QAClD,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE,UAAU,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO;QACL,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,GAAG;QACf,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG;QAC1B,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,MAAM;KAClB,CAAC;AACJ,CAAC;AAWD,SAAS,QAAQ,CAAC,CAA4B;IAC5C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACtD,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAkB;IAKtD,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;QACxC,oEAAoE;QACpE,qEAAqE;QACrE,gEAAgE;QAChE,mEAAmE;QACnE,8BAA8B;QAC9B,MAAM,OAAO,GAAG,YAAY,OAAO,CAAC,SAAS,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,YAAY,mBAAmB,kCAAkC,OAAO,EAAE,CAAC;QAE5F,0DAA0D;QAC1D,qDAAqD;QACrD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,cAAc,IAAI,OAAO,EAAE,EAAE;YACzD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE;SAChD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC;QAErC,MAAM,MAAM,GAAmC;YAC7C,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,EAAE;YACrC,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE;YACnC,UAAU,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE;YAC/C,cAAc,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE;YAClD,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;YACtC,UAAU,EAAE,EAAE,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;YACxD,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE;SAClC,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACnE,MAAM,CAAC,kBAAkB,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzD,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;YAC/C,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;QAChD,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,GAAG,cAAc,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YACrC,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACnF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;YAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;QAC1F,CAAC;QAED,sEAAsE;QACtE,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,SAAS,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,mBAAmB,CAAC;YACnF,MAAM,UAAU,GAAG;gBACjB,MAAM,EAAE,CAAC;wBACP,SAAS,EAAE;4BACT,QAAQ,EAAE,QAAQ;4BAClB,eAAe,EAAE,CAAC;oCAChB,SAAS,EAAE,cAAc;oCACzB,SAAS,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE;iCACjC,CAAC;yBACH;qBACF,CAAC;aACH,CAAC;YACF,MAAM,KAAK,CAAC,SAAS,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACnF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;aACjC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAkD,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1F,CAAC;AACH,CAAC;AAUD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAwB;IAK9D,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,GAAG,GAAG,GAAG,cAAc,eAAe,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClI,MAAM,IAAI,GAAG;YACX,MAAM,EAAE;gBACN,GAAG,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,EAAE;gBAChC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;gBACnC,SAAS,EAAE,EAAE,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;gBACvD,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE;gBACvC,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE;gBACnC,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE;gBACvC,QAAQ,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,QAAQ,EAAE;gBACzC,SAAS,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE;gBACnD,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC5C,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC5C,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE;gBACvC,QAAQ,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE;gBAC/B,SAAS,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE;aACjC;SACF,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACnF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;QACjG,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAClG,CAAC;AACH,CAAC;AAYD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAsB;IAC1D,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,cAAc,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAClH,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACpG,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrF,MAAM,WAAW,GAAG;YAClB,MAAM,EAAE;gBACN,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE;gBACvC,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;gBACrD,aAAa,EAAE,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC7G,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;gBACrG,QAAQ,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;gBAClD,SAAS,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;aACrD;SACF,CAAC;QACF,MAAM,KAAK,CAAC,GAAG,cAAc,IAAI,UAAU,IAAI,WAAW,EAAE,EAAE;YAC5D,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACnF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SAClC,CAAC,CAAC;QAEH,gEAAgE;QAChE,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;QACpD,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,mBAAmB,CAAC;YACnF,MAAM,UAAU,GAAG;gBACjB,MAAM,EAAE,CAAC;wBACP,SAAS,EAAE;4BACT,QAAQ,EAAE,YAAY,mBAAmB,2CAA2C,KAAK,CAAC,SAAS,EAAE;4BACrG,eAAe,EAAE,CAAC;oCAChB,SAAS,EAAE,aAAa;oCACxB,SAAS,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE;iCAChD,CAAC;yBACH;qBACF,CAAC;aACH,CAAC;YACF,MAAM,KAAK,CAAC,SAAS,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACnF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;aACjC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAqB,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACjF,CAAC;AACH,CAAC"}

package/dist/headless/interactiveShell.js

@@ -206,6 +206,13 @@ class InteractiveShell {
     // immediately resume the work the user just cancelled. Cleared when the
     // user submits a fresh prompt.
     userInterruptedRun = false;
+    // Session-level aggregates rolled up across every processPrompt call
+    // and flushed to Firestore on shutdown. Bounded by the writeSessionEnd
+    // slicer (top 100 of each).
+    sessionToolsUsed = new Set();
+    sessionFilesModified = new Set();
+    sessionTokensIn = 0;
+    sessionTokensOut = 0;
     cachedProviders = null;
     secretInputMode = {
         active: false,
@@ -291,6 +298,29 @@ class InteractiveShell {
             this.promptController?.stop();
             setStatusSink(null);
         });
+        // Session-end Firestore write — transitions the session row from
+        // `in_progress` to `completed` and rolls up the project's
+        // totalTokens. Best-effort: a kill -9 leaves the row stale at
+        // `in_progress`, which the audit portal can highlight.
+        onShutdown(async () => {
+            const sessionId = process.env['EROSOLAR_SESSION_ID'];
+            const projectId = process.env['EROSOLAR_PROJECT_ID'];
+            if (!sessionId || !projectId)
+                return;
+            try {
+                const { writeSessionEnd } = await import('../core/projectTracker.js');
+                await writeSessionEnd({
+                    sessionId,
+                    projectId,
+                    outcome: this.userInterruptedRun ? 'cancelled' : 'completed',
+                    filesModified: Array.from(this.sessionFilesModified).slice(0, 100),
+                    toolsUsed: Array.from(this.sessionToolsUsed).slice(0, 100),
+                    tokensIn: this.sessionTokensIn,
+                    tokensOut: this.sessionTokensOut,
+                });
+            }
+            catch { /* best-effort */ }
+        });
         setStatusSink((message) => this.promptController?.setStatusMessage(message));
         // Hand the terminal off to the HITL prompt while it's open: suspend
         // prompt rendering and detach our keypress handler so arrow keys aren't
@@ -1646,11 +1676,13 @@ class InteractiveShell {
                         if (!toolsUsed.includes(toolName)) {
                             toolsUsed.push(toolName);
                         }
+                        this.sessionToolsUsed.add(toolName);
                         const filePath = args?.['file_path'];
                         if (filePath && (toolName === 'Write' || toolName === 'Edit')) {
                             if (!filesModified.includes(filePath)) {
                                 filesModified.push(filePath);
                             }
+                            this.sessionFilesModified.add(filePath);
                         }
                         if (toolName === 'Bash' && args?.['command']) {
                             toolDisplay = `Bash(${String(args['command']).slice(0, 120)})`;
@@ -1758,6 +1790,9 @@ class InteractiveShell {
                             tokensUsed: event.totalTokens,
                             tokenLimit: 200000, // Approximate limit
                         });
+                        // Roll up to session totals for the session-end Firestore write.
+                        this.sessionTokensIn += event.inputTokens || 0;
+                        this.sessionTokensOut += event.outputTokens || 0;
                         break;
                     case 'provider.fallback': {
                         // Display fallback notification