@zelari/core 2.54.0 → 2.56.0

package/dist/session/types.js

@@ -97,6 +97,26 @@ export const SESSION_EVENT_KINDS = [
     // model-surface). Additive kinds — no SCHEMA_VERSION bump (ADR-0021).
     'verify.debt_open',
     'verify.debt_cleared',
+    // WS1 (t133): a pre-dispatch permission RULE denied a tool call. State-only
+    // (never model-surface): data = {tool, matchedRuleId, source, reason}.
+    // Additive kind — no SCHEMA_VERSION bump (ADR-0021): older readers report
+    // schema-mismatch and skip via tolerant replay; deriveMessages ignores it.
+    'permission.denied',
+    // WS7 slice 2 (t140): DECISION-POINT telemetry — the five questions a shadow
+    // replay must be able to ask of a past session ("was the operator asked? was
+    // the call auto-approved instead? did the OS jail block the spawn? did the
+    // model STOP to ask the user? was a verify requested?"). State-only (never
+    // model-surface): they RECORD a decision the harness already took, they never
+    // feed it back into the loop. Payload contracts live in decisionEvents.ts
+    // (zod, per kind); projections land on SessionProjection.decisionEvents.
+    // Additive kinds — no SCHEMA_VERSION bump (ADR-0021), same tolerant-replay
+    // path as every kind above: an older reader reports schema-mismatch, skips
+    // the line, and still replays the rest of the spine.
+    'permission.asked',
+    'auto_approve.granted',
+    'jail.blocked',
+    'ask_user.fired',
+    'verify.requested',
     'note',
 ];
 export const SessionEventEnvelopeSchema = z.object({

package/dist/session/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/session/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,sFAAsF;AACtF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC7D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChC,wDAAwD;IACxD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAGH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,gBAAgB;IAChB,yEAAyE;IACzE,6EAA6E;IAC7E,+DAA+D;IAC/D,0BAA0B;IAC1B,cAAc;IACd,mBAAmB;IACnB,WAAW;IACX,aAAa;IACb,qEAAqE;IACrE,kBAAkB;IAClB,mBAAmB;IACnB,cAAc;IACd,cAAc;IACd,iEAAiE;IACjE,0EAA0E;IAC1E,mEAAmE;IACnE,eAAe;IACf,uBAAuB;IACvB,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,6EAA6E;IAC7E,0EAA0E;IAC1E,kBAAkB;IAClB,kBAAkB;IAClB,wEAAwE;IACxE,uEAAuE;IACvE,uEAAuE;IACvE,uBAAuB;IACvB,0EAA0E;IAC1E,0EAA0E;IAC1E,2DAA2D;IAC3D,wBAAwB;IACxB,mBAAmB;IACnB,wBAAwB;IACxB,0BAA0B;IAC1B,sEAAsE;IACtE,kBAAkB;IAClB,yEAAyE;IACzE,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,oEAAoE;IACpE,6EAA6E;IAC7E,4EAA4E;IAC5E,oBAAoB;IACpB,kBAAkB;IAClB,yEAAyE;IACzE,wEAAwE;IACxE,0EAA0E;IAC1E,sEAAsE;IACtE,WAAW;IACX,cAAc;IACd,eAAe;IACf,4EAA4E;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,eAAe;IACf,kEAAkE;IAClE,sEAAsE;IACtE,kBAAkB;IAClB,qBAAqB;IACrB,MAAM;CACE,CAAC;AAGX,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,6EAA6E;IAC7E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;IACjC,KAAK,EAAE,kBAAkB;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CACxC,CAAC,CAAC;AAUH,0BAA0B;AAC1B,MAAM,CAAC,MAAM,UAAU,GAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACzD,MAAM,CAAC,MAAM,WAAW,GAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3D,MAAM,CAAC,MAAM,YAAY,GAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/session/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,sFAAsF;AACtF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC7D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChC,wDAAwD;IACxD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAGH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,gBAAgB;IAChB,yEAAyE;IACzE,6EAA6E;IAC7E,+DAA+D;IAC/D,0BAA0B;IAC1B,cAAc;IACd,mBAAmB;IACnB,WAAW;IACX,aAAa;IACb,qEAAqE;IACrE,kBAAkB;IAClB,mBAAmB;IACnB,cAAc;IACd,cAAc;IACd,iEAAiE;IACjE,0EAA0E;IAC1E,mEAAmE;IACnE,eAAe;IACf,uBAAuB;IACvB,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,6EAA6E;IAC7E,0EAA0E;IAC1E,kBAAkB;IAClB,kBAAkB;IAClB,wEAAwE;IACxE,uEAAuE;IACvE,uEAAuE;IACvE,uBAAuB;IACvB,0EAA0E;IAC1E,0EAA0E;IAC1E,2DAA2D;IAC3D,wBAAwB;IACxB,mBAAmB;IACnB,wBAAwB;IACxB,0BAA0B;IAC1B,sEAAsE;IACtE,kBAAkB;IAClB,yEAAyE;IACzE,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,oEAAoE;IACpE,6EAA6E;IAC7E,4EAA4E;IAC5E,oBAAoB;IACpB,kBAAkB;IAClB,yEAAyE;IACzE,wEAAwE;IACxE,0EAA0E;IAC1E,sEAAsE;IACtE,WAAW;IACX,cAAc;IACd,eAAe;IACf,4EAA4E;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,eAAe;IACf,kEAAkE;IAClE,sEAAsE;IACtE,kBAAkB;IAClB,qBAAqB;IACrB,4EAA4E;IAC5E,uEAAuE;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,mBAAmB;IACnB,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,qDAAqD;IACrD,kBAAkB;IAClB,sBAAsB;IACtB,cAAc;IACd,gBAAgB;IAChB,kBAAkB;IAClB,MAAM;CACE,CAAC;AAGX,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,6EAA6E;IAC7E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;IACjC,KAAK,EAAE,kBAAkB;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CACxC,CAAC,CAAC;AAUH,0BAA0B;AAC1B,MAAM,CAAC,MAAM,UAAU,GAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACzD,MAAM,CAAC,MAAM,WAAW,GAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3D,MAAM,CAAC,MAAM,YAAY,GAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC"}

package/dist/session/verifyDebt.d.ts

@@ -0,0 +1,41 @@
+/**
+ * session/verifyDebt.ts — the K1.5/F5 obligation pairs, projected.
+ *
+ * `verify.debt_open` binds a task slot that must end in a passing verify (or an
+ * explicit waiver); `verify.debt_cleared` closes it. The runtime keeps the LIVE
+ * cache in `taskTool`/`runOneTurn` and WS2 renders the operator-facing view
+ * with an acknowledgement boundary (`src/cli/inboxSources.ts`: a debt older
+ * than your last reply is not an inbox item anymore).
+ *
+ * This module answers the REPLAY question instead, and answers it raw: what do
+ * the events on this spine say, in log order, with no operator in the loop?
+ * Same derive-only discipline, deliberately NO ack boundary — a shadow replay
+ * must see the obligation the harness carried, not the one the human still
+ * cares about. The two views coexist: `inboxSources` = "what still needs YOU",
+ * `projectVerifyDebts` = "what did the run leave unfinished".
+ */
+import type { SessionEventEnvelope } from './types.js';
+/** One debt slot, from its open (last-wins) to its first clear. */
+export interface VerifyDebtSummary {
+    /** Slot id (`verify.debt_open`.data.taskId). */
+    taskId: string;
+    /** What the obligation was about, verbatim. */
+    description: string;
+    /** Optional one-line detail the writer attached. */
+    detail?: string;
+    openedSeq: number;
+    openedAt: number;
+    /** Absent ⇒ still OPEN at the end of the spine. */
+    clearedSeq?: number;
+    clearedAt?: number;
+}
+/**
+ * Pair the debt events of a spine. Pure: no I/O, no clock, no acknowledgement
+ * boundary. Re-opening a cleared slot opens it again; a `debt_cleared` with no
+ * matching open is ignored; a debt whose `taskId` is missing/empty is skipped
+ * (it cannot be paired, so claiming it would invent a slot).
+ */
+export declare function projectVerifyDebts(events: readonly SessionEventEnvelope[]): VerifyDebtSummary[];
+/** Debts never cleared by the end of the spine (`[]` ⇒ the run left nothing open). */
+export declare function openVerifyDebts(debts: readonly VerifyDebtSummary[]): VerifyDebtSummary[];
+//# sourceMappingURL=verifyDebt.d.ts.map

package/dist/session/verifyDebt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyDebt.d.ts","sourceRoot":"","sources":["../../src/session/verifyDebt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,mEAAmE;AACnE,MAAM,WAAW,iBAAiB;IAChC,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,GAAG,iBAAiB,EAAE,CAsB/F;AAED,sFAAsF;AACtF,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,GAAG,iBAAiB,EAAE,CAExF"}

package/dist/session/verifyDebt.js

@@ -0,0 +1,40 @@
+function str(value) {
+    return typeof value === 'string' ? value : '';
+}
+/**
+ * Pair the debt events of a spine. Pure: no I/O, no clock, no acknowledgement
+ * boundary. Re-opening a cleared slot opens it again; a `debt_cleared` with no
+ * matching open is ignored; a debt whose `taskId` is missing/empty is skipped
+ * (it cannot be paired, so claiming it would invent a slot).
+ */
+export function projectVerifyDebts(events) {
+    const byTask = new Map();
+    for (const e of events) {
+        const taskId = str(e.data.taskId);
+        if (taskId.length === 0)
+            continue;
+        if (e.kind === 'verify.debt_open') {
+            const detail = str(e.data.detail);
+            byTask.set(taskId, {
+                taskId,
+                description: str(e.data.description),
+                ...(detail ? { detail } : {}),
+                openedSeq: e.seq,
+                openedAt: e.ts,
+            });
+        }
+        else if (e.kind === 'verify.debt_cleared') {
+            const open = byTask.get(taskId);
+            if (!open || open.clearedSeq !== undefined)
+                continue;
+            open.clearedSeq = e.seq;
+            open.clearedAt = e.ts;
+        }
+    }
+    return [...byTask.values()].sort((a, b) => a.openedSeq - b.openedSeq);
+}
+/** Debts never cleared by the end of the spine (`[]` ⇒ the run left nothing open). */
+export function openVerifyDebts(debts) {
+    return debts.filter((d) => d.clearedSeq === undefined);
+}
+//# sourceMappingURL=verifyDebt.js.map

package/dist/session/verifyDebt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyDebt.js","sourceRoot":"","sources":["../../src/session/verifyDebt.ts"],"names":[],"mappings":"AAiCA,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAuC;IACxE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE;gBACjB,MAAM;gBACN,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;gBACpC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,SAAS,EAAE,CAAC,CAAC,GAAG;gBAChB,QAAQ,EAAE,CAAC,CAAC,EAAE;aACf,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;gBAAE,SAAS;YACrD,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC;YACxB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;AACxE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,eAAe,CAAC,KAAmC;IACjE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;AACzD,CAAC"}

package/dist/version.d.ts

@@ -3,5 +3,5 @@
  * require.resolve('@zelari/core/package.json') (2.6.1 plan §7).
  * Kept in sync with package.json by scripts/verify-versions.mjs.
  */
-export declare const CORE_VERSION = "2.54.0";
+export declare const CORE_VERSION = "2.56.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -3,5 +3,5 @@
  * require.resolve('@zelari/core/package.json') (2.6.1 plan §7).
  * Kept in sync with package.json by scripts/verify-versions.mjs.
  */
-export const CORE_VERSION = '2.54.0';
+export const CORE_VERSION = '2.56.0';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zelari/core",
-  "version": "2.54.0",
+  "version": "2.56.0",
   "description": "Zelari Code core library — provider-neutral agent loop (AgentHarness), multi-agent council orchestration, and built-in skills. Used by the zelari-code CLI; consumable by other agent frontends.",
   "author": "Anathema Studio <https://anathema-studio.com/>",
   "license": "Apache-2.0",