@xpufx/paseo-top 0.4.4 → 0.4.5

package/server/vendor/paseo-plugin-helper/telemetry.ts

@@ -0,0 +1,486 @@
+import { z } from "zod";
+import type { FeatureModule, FeatureDisposer } from "../../../shared/vendor/paseo-plugin-helper/features";
+import type { PluginRpcContract } from "../../../shared/vendor/paseo-plugin-helper/rpc";
+
+/**
+ * Raw usage structure as emitted by various Paseo agent engines and providers.
+ */
+export interface RawTurnUsage {
+  inputTokens?: number;
+  outputTokens?: number;
+  cachedTokens?: number;
+  cachedInputTokens?: number;
+  reasoningTokens?: number;
+  contextWindowUsedTokens?: number;
+  contextWindowMaxTokens?: number;
+  totalCostUsd?: number;
+  /** Claude Code SDK nested iterations array */
+  iterations?: Array<{
+    input_tokens?: number;
+    cache_creation_input_tokens?: number;
+    cache_read_input_tokens?: number;
+    output_tokens?: number;
+  }>;
+  /** OpenCode / ACP tokens object */
+  tokens?: {
+    input?: number;
+    output?: number;
+    reasoning?: number;
+    cache_read?: number;
+  };
+  [key: string]: unknown;
+}
+
+export interface RawTurnOutcome {
+  kind: "completed" | "failed" | "canceled" | string;
+  error?: { message: string; code?: string };
+  reason?: string;
+  stopReason?: string;
+}
+
+export interface RawTurnData {
+  turnId?: string | null;
+  agentId: string;
+  repo?: string | null;
+  role?: string | null;
+  model?: string | null;
+  provider?: string | null;
+  outcome?: RawTurnOutcome;
+  durationMs?: number;
+  timeline?: readonly unknown[];
+  liveUsage?: RawTurnUsage | null;
+  gitBefore?: { insertions: number; deletions: number; filesChanged: number } | null;
+  gitAfter?: { insertions: number; deletions: number; filesChanged: number } | null;
+}
+
+export const NormalizedTurnTelemetrySchema = z.object({
+  turnId: z.string().nullable(),
+  agentId: z.string(),
+  repo: z.string().nullable(),
+  role: z.string().nullable(),
+  model: z.string().nullable(),
+  provider: z.string().nullable(),
+  timestamp: z.string(),
+  durationMs: z.number(),
+  inputTokens: z.number(),
+  outputTokens: z.number(),
+  cachedTokens: z.number(),
+  reasoningTokens: z.number(),
+  totalTokens: z.number(),
+  tokensPerSecond: z.number(),
+  contextUsedTokens: z.number(),
+  contextMaxTokens: z.number(),
+  contextUtilizationPct: z.number(),
+  costUsd: z.number(),
+  toolCallsCount: z.number(),
+  toolErrorsCount: z.number(),
+  finishReason: z.string(),
+  stopReason: z.string().optional(),
+  errorMessage: z.string().optional(),
+  gitInsertions: z.number(),
+  gitDeletions: z.number(),
+  gitFilesChanged: z.number(),
+  isInterrupted: z.boolean(),
+  isSubscriptionZeroCost: z.boolean().optional(),
+});
+
+export type NormalizedTurnTelemetry = z.infer<typeof NormalizedTurnTelemetrySchema>;
+
+function finite(val: unknown, fallback = 0): number {
+  return typeof val === "number" && Number.isFinite(val) ? val : fallback;
+}
+
+function round2(val: number): number {
+  return Math.round(val * 100) / 100;
+}
+
+/**
+ * Normalizes vendor/provider quirks into a canonical TurnTelemetry record:
+ * - Claude nested iterations array accumulation
+ * - OpenCode isolated reasoning tokens
+ * - ACP asynchronous context meter readings
+ * - Interrupted / canceled turn normalization (prevents division by zero)
+ * - Subscription $0 cost normalization
+ */
+export function normalizeTurnTelemetry(
+  raw: RawTurnData,
+  now = Date.now(),
+): NormalizedTurnTelemetry {
+  const usage = raw.liveUsage;
+  let inputTokens = 0;
+  let outputTokens = 0;
+  let cachedTokens = 0;
+  let reasoningTokens = 0;
+  let contextUsedTokens = 0;
+  let contextMaxTokens = 0;
+  let costUsd = 0;
+
+  if (usage) {
+    if (Array.isArray(usage.iterations) && usage.iterations.length > 0) {
+      // Claude nested iterations normalization
+      let iterInput = 0;
+      let iterOutput = 0;
+      let iterCache = 0;
+      for (const iter of usage.iterations) {
+        iterInput += finite(iter.input_tokens);
+        iterCache += finite(iter.cache_read_input_tokens) + finite(iter.cache_creation_input_tokens);
+        iterOutput += finite(iter.output_tokens);
+      }
+      inputTokens = iterInput;
+      cachedTokens = iterCache;
+      outputTokens = iterOutput;
+    } else {
+      inputTokens = finite(usage.inputTokens ?? usage.tokens?.input);
+      outputTokens = finite(usage.outputTokens ?? usage.tokens?.output);
+      cachedTokens = finite(usage.cachedTokens ?? usage.cachedInputTokens ?? usage.tokens?.cache_read);
+      reasoningTokens = finite(usage.reasoningTokens ?? usage.tokens?.reasoning);
+    }
+
+    if (reasoningTokens === 0 && usage.tokens?.reasoning) {
+      reasoningTokens = finite(usage.tokens.reasoning);
+    }
+
+    contextUsedTokens = finite(usage.contextWindowUsedTokens);
+    contextMaxTokens = finite(usage.contextWindowMaxTokens);
+    costUsd = finite(usage.totalCostUsd);
+  }
+
+  // Count timeline tool calls and tool errors if timeline is provided
+  let toolCallsCount = 0;
+  let toolErrorsCount = 0;
+  if (Array.isArray(raw.timeline)) {
+    for (const item of raw.timeline) {
+      if (!item || typeof item !== "object") continue;
+      const type = (item as any).type;
+      if (type === "tool_call" || type === "tool_use" || (item as any).toolCall) {
+        toolCallsCount++;
+        if ((item as any).isError || (item as any).error || (item as any).status === "error") {
+          toolErrorsCount++;
+        }
+      }
+    }
+  }
+
+  // Interrupted / canceled normalization
+  const kind = raw.outcome?.kind ?? "completed";
+  const stopReason = raw.outcome?.stopReason ?? (raw.outcome as any)?.reason;
+  const isInterrupted =
+    kind === "canceled" ||
+    stopReason === "cancelled" ||
+    stopReason === "interrupted" ||
+    raw.outcome?.reason === "canceled" ||
+    raw.outcome?.reason === "interrupted";
+
+  let finishReason = isInterrupted ? "interrupted" : kind;
+  if (kind === "failed") finishReason = "failed";
+
+  const durationMs = Math.max(0, finite(raw.durationMs));
+  const durationSec = durationMs / 1000;
+
+  // Generation velocity (TPS): sum output + reasoning (OpenCode isolation rule)
+  // Interrupted turns with 0 duration or incomplete payloads yield 0 TPS to avoid skewed averages
+  const generationTokens = outputTokens + reasoningTokens;
+  const tokensPerSecond =
+    !isInterrupted && durationSec > 0.05 && generationTokens > 0
+      ? round2(generationTokens / durationSec)
+      : 0;
+
+  const contextUtilizationPct =
+    contextMaxTokens > 0 ? round2(Math.min(100, (contextUsedTokens / contextMaxTokens) * 100)) : 0;
+
+  // Git churn diff
+  let gitInsertions = 0;
+  let gitDeletions = 0;
+  let gitFilesChanged = 0;
+  if (raw.gitAfter) {
+    const before = raw.gitBefore;
+    gitInsertions = Math.max(0, raw.gitAfter.insertions - (before?.insertions ?? 0));
+    gitDeletions = Math.max(0, raw.gitAfter.deletions - (before?.deletions ?? 0));
+    gitFilesChanged = raw.gitAfter.filesChanged;
+  }
+
+  const isSubscriptionZeroCost = costUsd === 0 && (inputTokens > 0 || outputTokens > 0);
+
+  return {
+    turnId: raw.turnId ?? null,
+    agentId: raw.agentId,
+    repo: raw.repo ?? null,
+    role: raw.role ?? null,
+    model: raw.model ?? null,
+    provider: raw.provider ?? null,
+    timestamp: new Date(now).toISOString(),
+    durationMs,
+    inputTokens,
+    outputTokens,
+    cachedTokens,
+    reasoningTokens,
+    totalTokens: inputTokens + outputTokens + cachedTokens + reasoningTokens,
+    tokensPerSecond,
+    contextUsedTokens,
+    contextMaxTokens,
+    contextUtilizationPct,
+    costUsd: round2(costUsd),
+    toolCallsCount,
+    toolErrorsCount,
+    finishReason,
+    stopReason: stopReason ? String(stopReason) : undefined,
+    errorMessage: raw.outcome?.error?.message,
+    gitInsertions,
+    gitDeletions,
+    gitFilesChanged,
+    isInterrupted,
+    isSubscriptionZeroCost,
+  };
+}
+
+/**
+ * 1. Front Desk Suitability Index (FDSI)
+ * FDSI = Conversational Conciseness / (TTFT Latency * (Turn Locks + 1) * Token Burn Ratio)
+ */
+export interface FDSIInput {
+  conciseness: number;
+  ttftLatencyMs: number;
+  turnLocks: number;
+  tokenBurnRatio: number;
+}
+
+export function calculateFDSI(input: FDSIInput): number {
+  const conciseness = Math.max(0, input.conciseness);
+  const ttftSec = Math.max(0.001, input.ttftLatencyMs / 1000);
+  const locksFactor = Math.max(1, input.turnLocks + 1);
+  const burnRatio = Math.max(1.0, input.tokenBurnRatio);
+
+  const denominator = ttftSec * locksFactor * burnRatio;
+  return round2(conciseness / denominator);
+}
+
+/**
+ * 2. Worker Implementation ROI (Cost & Churn per Merged PR)
+ * Worker ROI = (Net Deliverable Value / (Total Tokens * Wall Clock Time * (Rework Rounds + 1))) / ChurnRatio
+ */
+export interface WorkerROIInput {
+  netDeliverableValue: number;
+  totalTokens: number;
+  wallClockTimeMs: number;
+  reworkRounds: number;
+  linesAdded: number;
+  linesDeleted: number;
+  netChanges: number;
+}
+
+export function calculateWorkerROI(input: WorkerROIInput): number {
+  const deliverable = Math.max(0, input.netDeliverableValue);
+  const tokens = Math.max(1, input.totalTokens);
+  const wallClockSec = Math.max(1, input.wallClockTimeMs / 1000);
+  const rework = Math.max(1, input.reworkRounds + 1);
+
+  const netChanges = Math.max(1, Math.abs(input.netChanges));
+  const totalChurn = Math.max(netChanges, input.linesAdded + input.linesDeleted);
+  const churnRatio = Math.max(1.0, totalChurn / netChanges);
+
+  const rawRoi = (deliverable * 1_000_000) / (tokens * wallClockSec * rework);
+  return round2(rawRoi / churnRatio);
+}
+
+/**
+ * 3. Orchestrator Audit Vigilance Score
+ * Vigilance = (Flaws Caught in Pre-Flight + False-Positive Claims Debunked) / Total PRs Audited
+ */
+export interface OrchestratorVigilanceInput {
+  flawsCaught: number;
+  falsePositiveClaimsDebunked: number;
+  totalPRsAudited: number;
+}
+
+export function calculateOrchestratorVigilance(input: OrchestratorVigilanceInput): number {
+  const totalAudits = Math.max(1, input.totalPRsAudited);
+  const signals = Math.max(0, input.flawsCaught + input.falsePositiveClaimsDebunked);
+  return round2(signals / totalAudits);
+}
+
+/**
+ * 4. Tool Thrashing / Loop Index
+ * Frequency of non-zero exit codes (rc != 0) followed immediately by another command
+ * without intervening file inspections or edits.
+ */
+export interface ToolCallTrace {
+  command?: string;
+  exitCode?: number;
+  isInspectionOrEdit?: boolean;
+}
+
+export function calculateToolThrashingIndex(traces: readonly ToolCallTrace[]): number {
+  if (traces.length < 2) return 0;
+
+  let thrashedSequences = 0;
+  let totalCommandTransitions = 0;
+
+  for (let i = 0; i < traces.length - 1; i++) {
+    const curr = traces[i]!;
+    const next = traces[i + 1]!;
+
+    if (curr.exitCode !== undefined) {
+      totalCommandTransitions++;
+      if (curr.exitCode !== 0 && !curr.isInspectionOrEdit && !next.isInspectionOrEdit) {
+        thrashedSequences++;
+      }
+    }
+  }
+
+  if (totalCommandTransitions === 0) return 0;
+  return round2((thrashedSequences / totalCommandTransitions) * 100);
+}
+
+/**
+ * 5. Context Decay & Amnesia Risk
+ * Correlation between context utilization (> 75%) and subsequent turn failures, tool loops, or repetitive questions.
+ */
+export interface ContextTurnTrace {
+  contextUtilizationPct: number;
+  failed: boolean;
+  hasToolLoop?: boolean;
+}
+
+export function calculateContextDecayRisk(turns: readonly ContextTurnTrace[]): number {
+  if (turns.length === 0) return 0;
+
+  const highContextTurns = turns.filter((t) => t.contextUtilizationPct > 75);
+  if (highContextTurns.length === 0) return 0;
+
+  const failuresUnderHighContext = highContextTurns.filter(
+    (t) => t.failed || t.hasToolLoop,
+  ).length;
+
+  return round2((failuresUnderHighContext / highContextTurns.length) * 100);
+}
+
+export interface TurnTelemetryTapOptions {
+  onRecord?: (record: NormalizedTurnTelemetry) => void | Promise<void>;
+  onTurnStarted?: (event: any, context: any) => void;
+  onTurnEnded?: (event: any, context: any) => void | Promise<void>;
+  context?: any;
+}
+
+/**
+ * Sets up in-process turn telemetry listeners on the Paseo plugin server (#933).
+ */
+export function setupTurnTelemetryTap(
+  server: any,
+  options?: TurnTelemetryTapOptions,
+): FeatureDisposer {
+  const turnStartTimes = new Map<string, number>();
+  const lastKnownUsage = new Map<string, RawTurnUsage>();
+  const unsubs: Array<() => void> = [];
+
+  if (typeof server?.on === "function") {
+    // 1. Turn started
+    try {
+      const unsubStart = server.on("agent.turn_started", (event: any, ctx: any) => {
+        if (!event?.agent?.id) return;
+        turnStartTimes.set(event.agent.id, Date.now());
+        if (event.agent.lastUsage) {
+          lastKnownUsage.set(event.agent.id, event.agent.lastUsage);
+        }
+        options?.onTurnStarted?.(event, ctx);
+      });
+      if (typeof unsubStart === "function") unsubs.push(unsubStart);
+    } catch {}
+
+    // 2. Usage updated
+    try {
+      const unsubUsage = server.on("agent.usage_updated", (event: any) => {
+        if (!event?.agent?.id) return;
+        const usage = event.usage ?? event.agent?.lastUsage;
+        if (usage) {
+          lastKnownUsage.set(event.agent.id, usage);
+        }
+      });
+      if (typeof unsubUsage === "function") unsubs.push(unsubUsage);
+    } catch {}
+
+    // 3. Turn ended
+    try {
+      const unsubEnd = server.on("agent.turn_ended", async (event: any, ctx: any) => {
+        if (!event?.agent?.id) return;
+        const agentId = event.agent.id;
+        const startTime = turnStartTimes.get(agentId);
+        const durationMs = startTime ? Date.now() - startTime : undefined;
+        turnStartTimes.delete(agentId);
+
+        const cachedUsage = lastKnownUsage.get(agentId);
+        const effectiveUsage = (event.agent as any)?.lastUsage ?? cachedUsage ?? null;
+
+        const rawData: RawTurnData = {
+          turnId: event.turnId ?? null,
+          agentId,
+          repo: (event.agent as any)?.repo ?? null,
+          role: (event.agent as any)?.role ?? null,
+          model: event.agent.model ?? null,
+          provider: event.agent.provider ?? null,
+          outcome: event.outcome ?? { kind: "completed" },
+          durationMs,
+          timeline: event.timeline,
+          liveUsage: effectiveUsage,
+        };
+
+        try {
+          const record = normalizeTurnTelemetry(rawData);
+          if (options?.onRecord) {
+            await options.onRecord(record);
+          }
+          if (options?.onTurnEnded) {
+            await options.onTurnEnded(event, ctx);
+          }
+        } catch {
+          // Best effort
+        }
+      });
+      if (typeof unsubEnd === "function") unsubs.push(unsubEnd);
+    } catch {}
+  }
+
+  let disposed = false;
+  return () => {
+    if (disposed) return;
+    disposed = true;
+    for (const unsub of unsubs) {
+      try {
+        unsub();
+      } catch {}
+    }
+    turnStartTimes.clear();
+    lastKnownUsage.clear();
+  };
+}
+
+export interface TimelineTelemetryFeatureOptions<TServerContext = any, TClientContext = any>
+  extends TurnTelemetryTapOptions {
+  id?: string;
+  contracts?: Record<string, PluginRpcContract>;
+  serverTap?: (server: TServerContext) => FeatureDisposer | void;
+  clientRenderer?: (client: TClientContext) => FeatureDisposer | void;
+}
+
+/**
+ * Creates a reusable FeatureModule for timeline telemetry (#933).
+ */
+export function createTimelineTelemetryFeature<TServerContext = any, TClientContext = any>(
+  options: TimelineTelemetryFeatureOptions<TServerContext, TClientContext> = {},
+): FeatureModule<TServerContext, TClientContext> {
+  return {
+    id: options.id || "timeline-telemetry",
+    contracts: options.contracts,
+    contributeServer(server: TServerContext) {
+      if (options.serverTap) {
+        return options.serverTap(server);
+      }
+      return setupTurnTelemetryTap(server, options);
+    },
+    contributeClient(client: TClientContext) {
+      if (options.clientRenderer) {
+        return options.clientRenderer(client);
+      }
+    },
+  };
+}
+

package/server/vendor/paseo-plugin-helper/tickets.ts

@@ -1,5 +1,4 @@
 import { readFile, stat } from "node:fs/promises";
-import { homedir } from "node:os";
 import { isAbsolute, join, resolve } from "node:path";
 import { PluginStorage } from "./storage";
 import { createPluginLogger } from "./logger";
@@ -13,7 +12,6 @@ import {
   activeForgeForDirectory,
   forgeCapabilityFromRepo,
   forgeContextContract,
-  forgeForgeContextContract,
   openIssuesContract,
   searchIssuesContract,
   issueDetailContract,
@@ -624,18 +622,20 @@ export async function resolveForgeToken(
     } catch {}
   }
 
-  const storagePluginId = options?.storagePluginId ?? "forges";
-  try {
-    const storage = new PluginStorage<{ tokensByHost?: Record<string, string> }>(
-      storagePluginId,
-      "settings.json",
-    );
-    const data = await storage.readAsync();
-    const token = data?.tokensByHost?.[host];
-    if (typeof token === "string" && token.trim()) {
-      return token.trim();
-    }
-  } catch {}
+  // Read ONLY from the caller's own plugin scope — never fall back to 'forges'.
+  if (options?.storagePluginId) {
+    try {
+      const storage = new PluginStorage<{ tokensByHost?: Record<string, string> }>(
+        options.storagePluginId,
+        "settings.json",
+      );
+      const data = await storage.readAsync();
+      const token = data?.tokensByHost?.[host];
+      if (typeof token === "string" && token.trim()) {
+        return token.trim();
+      }
+    } catch {}
+  }
 
   if (process.env.FORGEJO_TOKEN?.trim()) {
     return process.env.FORGEJO_TOKEN.trim();
@@ -644,24 +644,6 @@ export async function resolveForgeToken(
     return process.env.GITEA_TOKEN.trim();
   }
 
-  try {
-    const teaConfigPath = join(homedir(), ".config", "tea", "config.yml");
-    const content = await readFile(teaConfigPath, "utf8");
-    const lines = content.split("\n");
-    let currentLoginMatches = false;
-    for (const line of lines) {
-      if (line.includes(host) || line.includes("https://" + host)) {
-        currentLoginMatches = true;
-      } else if (line.trim().startsWith("- name:")) {
-        currentLoginMatches = line.includes(host);
-      }
-      if (currentLoginMatches && line.trim().startsWith("token:")) {
-        const token = line.replace(/.*token:\s*/, "").trim();
-        if (token) return token;
-      }
-    }
-  } catch {}
-
   return undefined;
 }
 
@@ -672,45 +654,15 @@ export async function resolveDefaultForgeHost(): Promise<string> {
   if (process.env.GITEA_HOST?.trim()) {
     return process.env.GITEA_HOST.trim().replace(/^https?:\/\//, "").replace(/\/+$/, "");
   }
-  try {
-    const teaConfigPath = join(homedir(), ".config", "tea", "config.yml");
-    const content = await readFile(teaConfigPath, "utf8");
-    const lines = content.split("\n");
-    let defaultLoginUrl = "";
-    let firstLoginUrl = "";
-    let inDefaultLogin = false;
-    for (const line of lines) {
-      if (line.trim().startsWith("- name:")) {
-        inDefaultLogin = false;
-      }
-      if (line.trim().startsWith("default: true")) {
-        inDefaultLogin = true;
-      }
-      if (line.trim().startsWith("url:") || line.trim().startsWith("ssh_host:")) {
-        const urlOrHost = line.replace(/.*(?:url|ssh_host):\s*/, "").trim();
-        if (urlOrHost) {
-          const host = urlOrHost.replace(/^https?:\/\//, "").replace(/\/+$/, "");
-          if (inDefaultLogin && !defaultLoginUrl) {
-            defaultLoginUrl = host;
-          }
-          if (!firstLoginUrl) {
-            firstLoginUrl = host;
-          }
-        }
-      }
-    }
-    if (defaultLoginUrl) return defaultLoginUrl;
-    if (firstLoginUrl) return firstLoginUrl;
-  } catch {}
 
   return "forge.mrs.uppidi.com";
 }
 
 export async function storedForgeSelection(
   directory: string | undefined,
-  storagePluginId = "forges",
+  storagePluginId?: string,
 ): Promise<string | undefined> {
-  if (!directory) return undefined;
+  if (!directory || !storagePluginId) return undefined;
   try {
     const storage = new PluginStorage<Record<string, any>>(storagePluginId, "settings.json");
     const settings = await storage.readAsync();
@@ -781,8 +733,8 @@ export interface TicketHandlers {
 }
 
 export function createTicketHandlers(options: TicketHandlerOptions = {}): TicketHandlers {
-  const storagePluginId = options.storagePluginId ?? "forges";
-  const log = createPluginLogger(storagePluginId, { banner: false });
+  const storagePluginId = options.storagePluginId; // no 'forges' fallback
+  const log = createPluginLogger(storagePluginId || "tickets", { banner: false });
   const guard = options.guard ?? new ForgeGuard();
 
   function logAt(level: GuardLogLevel, message: string, context: Record<string, unknown>): void {
@@ -1271,7 +1223,6 @@ export function registerTicketHandlers(
   server.handle(openIssuesContract, (input: OpenIssuesInput) => handlers.handleOpenIssues(input));
   server.handle(searchIssuesContract, (input: SearchIssuesInput) => handlers.handleSearchIssues(input));
   server.handle(forgeContextContract, (input: ForgeContextInput) => handlers.handleForgeContext(input));
-  server.handle(forgeForgeContextContract, (input: ForgeContextInput) => handlers.handleForgeContext(input));
   server.handle(issueDetailContract, (input: IssueDetailInput) => handlers.handleIssueDetail(input));
   server.handle(setLabelContract, (input: SetLabelInput) => handlers.handleSetLabel(input));
   server.handle(addCommentContract, (input: AddCommentInput) => handlers.handleAddComment(input));

package/server/vendor/permission-audit/index.ts

@@ -0,0 +1 @@
+export * from "./server.js";