@zelari/core 2.55.0 → 2.56.0

package/dist/session/decisionEvents.d.ts

@@ -0,0 +1,167 @@
+/**
+ * session/decisionEvents.ts — WS7 slice 2: the DECISION-POINT vocabulary.
+ *
+ * A replay of a spine can already answer "what did the agent DO" (tool.call /
+ * tool.result, file.*, verification.run, verify.debt_*). What it could not
+ * answer — the whole point of `zelari-code replay` — is "what did the HARNESS
+ * decide on the way": whether the operator was asked, whether an approval was
+ * auto-granted, whether the OS jail blocked the spawn, whether the model
+ * stopped to ask the user, whether a verify was requested at all.
+ *
+ * Those five kinds are declared in `types.ts` (SESSION_EVENT_KINDS) and their
+ * payload contracts live HERE, in one place, mirrored from the emitters that
+ * already exist so a future writer does not invent a second spelling:
+ *
+ *   permission.asked    ← PermissionRequestPayload (safety/permissionGate.ts,
+ *                         WS5): {tool, categories?, effect?, matchedRuleId?,
+ *                         source?, reason?, argsSummary?}
+ *   auto_approve.granted← the same decision block, effect resolved to allow
+ *                         (category default / allow rule / `--permissions yolo`)
+ *   jail.blocked        ← JailSpawnDecision deny branch (safety/osJail.ts):
+ *                         {backend, mode, reason, tool?}
+ *   ask_user.fired      ← the ask_user tool args (question/choices/context)
+ *   verify.requested    ← the K1.5/F5 obligation side: a verify was ASKED for
+ *                         (`verification.run` records that it actually ran)
+ *
+ * ALL FIVE ARE STATE-ONLY (P1): they record a decision, they never feed the
+ * model loop, so `deriveMessages()` ignores them and MODEL_SURFACE_KINDS must
+ * never gain them (pinned by decisionEvents.test.ts).
+ *
+ * Replay discipline (same as `parsePermissionDenial`): every reader here is
+ * DEFENSIVE. A hand-edited or half-written line must yield empty strings, never
+ * a throw — the tolerant reader owns "this line is broken" reporting.
+ */
+import { z } from 'zod';
+import type { SessionEventEnvelope } from './types.js';
+/**
+ * The five kinds this slice ADDED to the spine vocabulary (see SESSION_EVENT_KINDS).
+ * Order is the reading order of a session, not the declaration order in types.ts.
+ */
+export declare const DECISION_EVENT_KINDS: readonly ["permission.asked", "auto_approve.granted", "jail.blocked", "ask_user.fired", "verify.requested"];
+export type DecisionEventKind = (typeof DECISION_EVENT_KINDS)[number];
+/**
+ * What the `decisionEvents` projection aggregates: the five kinds above PLUS
+ * the WS1 `permission.denied` — same question ("what did the harness decide
+ * about this call?"), so a shadow replay must not have to merge two lists.
+ * `permission.denied` keeps its own dedicated `permissionDenials` field too;
+ * that field is untouched by this slice.
+ */
+export declare const DECISION_PROJECTION_KINDS: readonly ["permission.asked", "auto_approve.granted", "jail.blocked", "ask_user.fired", "verify.requested", "permission.denied"];
+export type DecisionProjectionKind = (typeof DECISION_PROJECTION_KINDS)[number];
+/** True for every kind the `decisionEvents` projection collects. */
+export declare function isDecisionProjectionKind(kind: string): kind is DecisionProjectionKind;
+/** `permission.asked` — the gate resolved a dispatch to a PROMPT. */
+export declare const PermissionAskedPayloadSchema: z.ZodObject<{
+    tool: z.ZodString;
+    categories: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    effect: z.ZodOptional<z.ZodLiteral<"ask">>;
+    matchedRuleId: z.ZodOptional<z.ZodString>;
+    source: z.ZodOptional<z.ZodString>;
+    reason: z.ZodOptional<z.ZodString>;
+    argsSummary: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** `auto_approve.granted` — the same decision, resolved to ALLOW without a prompt. */
+export declare const AutoApproveGrantedPayloadSchema: z.ZodObject<{
+    tool: z.ZodString;
+    categories: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    source: z.ZodOptional<z.ZodString>;
+    matchedRuleId: z.ZodOptional<z.ZodString>;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** `jail.blocked` — the OS jail refused the spawn (typed `[jail]` error). */
+export declare const JailBlockedPayloadSchema: z.ZodObject<{
+    tool: z.ZodOptional<z.ZodString>;
+    backend: z.ZodString;
+    mode: z.ZodEnum<{
+        required: "required";
+        off: "off";
+        advisory: "advisory";
+    }>;
+    reason: z.ZodString;
+}, z.core.$strip>;
+/** `ask_user.fired` — the model stopped the loop to ask the operator. */
+export declare const AskUserFiredPayloadSchema: z.ZodObject<{
+    question: z.ZodString;
+    callId: z.ZodOptional<z.ZodString>;
+    choices: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    context: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** `verify.requested` — a verify was ASKED for (it may never run). */
+export declare const VerifyRequestedPayloadSchema: z.ZodObject<{
+    taskId: z.ZodOptional<z.ZodString>;
+    criterionIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    source: z.ZodOptional<z.ZodString>;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** One schema per DECISION_EVENT_KIND — the payload contract table. */
+export declare const DECISION_EVENT_PAYLOAD_SCHEMAS: {
+    readonly 'permission.asked': z.ZodObject<{
+        tool: z.ZodString;
+        categories: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        effect: z.ZodOptional<z.ZodLiteral<"ask">>;
+        matchedRuleId: z.ZodOptional<z.ZodString>;
+        source: z.ZodOptional<z.ZodString>;
+        reason: z.ZodOptional<z.ZodString>;
+        argsSummary: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    readonly 'auto_approve.granted': z.ZodObject<{
+        tool: z.ZodString;
+        categories: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        source: z.ZodOptional<z.ZodString>;
+        matchedRuleId: z.ZodOptional<z.ZodString>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    readonly 'jail.blocked': z.ZodObject<{
+        tool: z.ZodOptional<z.ZodString>;
+        backend: z.ZodString;
+        mode: z.ZodEnum<{
+            required: "required";
+            off: "off";
+            advisory: "advisory";
+        }>;
+        reason: z.ZodString;
+    }, z.core.$strip>;
+    readonly 'ask_user.fired': z.ZodObject<{
+        question: z.ZodString;
+        callId: z.ZodOptional<z.ZodString>;
+        choices: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        context: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    readonly 'verify.requested': z.ZodObject<{
+        taskId: z.ZodOptional<z.ZodString>;
+        criterionIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        source: z.ZodOptional<z.ZodString>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+};
+/**
+ * Validate a payload against its kind's contract. Returns `null` when the
+ * payload satisfies it, else a one-line reason (the FIRST zod issue, prefixed
+ * with the field path) ready for stderr. Never throws.
+ */
+export declare function decisionPayloadError(kind: DecisionEventKind, data: unknown): string | null;
+/**
+ * One decision point, flattened for replay rendering. `seq`/`at` come from the
+ * ENVELOPE (never from a `timestamp` field inside the payload): an event's ts
+ * is writer-assigned, and replay must read the same clock the rest of the
+ * projection reads.
+ */
+export interface DecisionEventSummary {
+    seq: number;
+    at: number;
+    kind: DecisionProjectionKind;
+    /** Tool the decision was about (`''` when the kind carries none). */
+    tool: string;
+    /** Rule/layer that drove it (`''` when none did). */
+    source: string;
+    /** Human reason, verbatim from the payload (`''` when absent). */
+    reason: string;
+    /** Bounded, kind-specific one-liner (question, backend+mode, criteria…). */
+    detail: string;
+}
+/**
+ * Flatten one decision event. Pure and defensive: a payload missing every
+ * field still yields a summary with empty strings (the KIND is the datum).
+ */
+export declare function parseDecisionEvent(e: SessionEventEnvelope): DecisionEventSummary;
+//# sourceMappingURL=decisionEvents.d.ts.map

package/dist/session/decisionEvents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionEvents.d.ts","sourceRoot":"","sources":["../../src/session/decisionEvents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,oBAAoB,6GAMvB,CAAC;AACX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,kIAA0D,CAAC;AACjG,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,oEAAoE;AACpE,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,sBAAsB,CAErF;AAaD,qEAAqE;AACrE,eAAO,MAAM,4BAA4B;;;;;;;;iBASvC,CAAC;AAEH,sFAAsF;AACtF,eAAO,MAAM,+BAA+B;;;;;;iBAM1C,CAAC;AAEH,6EAA6E;AAC7E,eAAO,MAAM,wBAAwB;;;;;;;;;iBAQnC,CAAC;AAEH,yEAAyE;AACzE,eAAO,MAAM,yBAAyB;;;;;iBAMpC,CAAC;AAEH,sEAAsE;AACtE,eAAO,MAAM,4BAA4B;;;;;iBAOvC,CAAC;AAEH,uEAAuE;AACvE,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMiB,CAAC;AAE7D;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAO1F;AAID;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,sBAAsB,CAAC;IAC7B,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;CAChB;AA4DD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,oBAAoB,GAAG,oBAAoB,CAWhF"}

package/dist/session/decisionEvents.js

@@ -0,0 +1,206 @@
+/**
+ * session/decisionEvents.ts — WS7 slice 2: the DECISION-POINT vocabulary.
+ *
+ * A replay of a spine can already answer "what did the agent DO" (tool.call /
+ * tool.result, file.*, verification.run, verify.debt_*). What it could not
+ * answer — the whole point of `zelari-code replay` — is "what did the HARNESS
+ * decide on the way": whether the operator was asked, whether an approval was
+ * auto-granted, whether the OS jail blocked the spawn, whether the model
+ * stopped to ask the user, whether a verify was requested at all.
+ *
+ * Those five kinds are declared in `types.ts` (SESSION_EVENT_KINDS) and their
+ * payload contracts live HERE, in one place, mirrored from the emitters that
+ * already exist so a future writer does not invent a second spelling:
+ *
+ *   permission.asked    ← PermissionRequestPayload (safety/permissionGate.ts,
+ *                         WS5): {tool, categories?, effect?, matchedRuleId?,
+ *                         source?, reason?, argsSummary?}
+ *   auto_approve.granted← the same decision block, effect resolved to allow
+ *                         (category default / allow rule / `--permissions yolo`)
+ *   jail.blocked        ← JailSpawnDecision deny branch (safety/osJail.ts):
+ *                         {backend, mode, reason, tool?}
+ *   ask_user.fired      ← the ask_user tool args (question/choices/context)
+ *   verify.requested    ← the K1.5/F5 obligation side: a verify was ASKED for
+ *                         (`verification.run` records that it actually ran)
+ *
+ * ALL FIVE ARE STATE-ONLY (P1): they record a decision, they never feed the
+ * model loop, so `deriveMessages()` ignores them and MODEL_SURFACE_KINDS must
+ * never gain them (pinned by decisionEvents.test.ts).
+ *
+ * Replay discipline (same as `parsePermissionDenial`): every reader here is
+ * DEFENSIVE. A hand-edited or half-written line must yield empty strings, never
+ * a throw — the tolerant reader owns "this line is broken" reporting.
+ */
+import { z } from 'zod';
+/**
+ * The five kinds this slice ADDED to the spine vocabulary (see SESSION_EVENT_KINDS).
+ * Order is the reading order of a session, not the declaration order in types.ts.
+ */
+export const DECISION_EVENT_KINDS = [
+    'permission.asked',
+    'auto_approve.granted',
+    'jail.blocked',
+    'ask_user.fired',
+    'verify.requested',
+];
+/**
+ * What the `decisionEvents` projection aggregates: the five kinds above PLUS
+ * the WS1 `permission.denied` — same question ("what did the harness decide
+ * about this call?"), so a shadow replay must not have to merge two lists.
+ * `permission.denied` keeps its own dedicated `permissionDenials` field too;
+ * that field is untouched by this slice.
+ */
+export const DECISION_PROJECTION_KINDS = [...DECISION_EVENT_KINDS, 'permission.denied'];
+/** True for every kind the `decisionEvents` projection collects. */
+export function isDecisionProjectionKind(kind) {
+    return DECISION_PROJECTION_KINDS.includes(kind);
+}
+// ── Payload contracts (zod) ────────────────────────────────────────────────
+//
+// NOT `.strict()`: the envelope's `data` is an open record and emitters grow
+// fields (an `argsSummary`, a `durationMs`, a future `callId`). These schemas
+// exist to pin what a payload MUST carry (and to be the single place a writer
+// looks up the spelling) — not to reject forward-compatible additions.
+// Unknown/missing REQUIRED fields are reported by `decisionPayloadError`.
+const nonEmpty = z.string().min(1);
+const toolName = z.object({ tool: nonEmpty });
+/** `permission.asked` — the gate resolved a dispatch to a PROMPT. */
+export const PermissionAskedPayloadSchema = toolName.extend({
+    /** Declared permission categories of the call (`read`, `write`, …). */
+    categories: z.array(z.string()).optional(),
+    /** Always `ask` when present — a deny is `permission.denied` (WS1). */
+    effect: z.literal('ask').optional(),
+    matchedRuleId: nonEmpty.optional(),
+    source: nonEmpty.optional(),
+    reason: z.string().optional(),
+    argsSummary: z.string().optional(),
+});
+/** `auto_approve.granted` — the same decision, resolved to ALLOW without a prompt. */
+export const AutoApproveGrantedPayloadSchema = toolName.extend({
+    categories: z.array(z.string()).optional(),
+    /** Where the approval came from (`default` / `project` / `session` / `preset`). */
+    source: nonEmpty.optional(),
+    matchedRuleId: nonEmpty.optional(),
+    reason: z.string().optional(),
+});
+/** `jail.blocked` — the OS jail refused the spawn (typed `[jail]` error). */
+export const JailBlockedPayloadSchema = z.object({
+    /** Exec tool whose spawn was refused, when one call owned the spawn. */
+    tool: nonEmpty.optional(),
+    /** Backend id that failed it (`seatbelt` / `bwrap` / `win32-restricted-token`). */
+    backend: nonEmpty,
+    /** Wire mirror of `safety/osJail.ts` JailMode (core cannot import the CLI). */
+    mode: z.enum(['off', 'advisory', 'required']),
+    reason: nonEmpty,
+});
+/** `ask_user.fired` — the model stopped the loop to ask the operator. */
+export const AskUserFiredPayloadSchema = z.object({
+    question: nonEmpty,
+    /** `tool.call` id this question belongs to, when the emitter knows it. */
+    callId: nonEmpty.optional(),
+    choices: z.array(z.string()).optional(),
+    context: z.string().optional(),
+});
+/** `verify.requested` — a verify was ASKED for (it may never run). */
+export const VerifyRequestedPayloadSchema = z.object({
+    /** K1.5/F5 debt slot the request belongs to, when one exists. */
+    taskId: nonEmpty.optional(),
+    /** Criterion ids the request targets (`verification.run` reports outcomes). */
+    criterionIds: z.array(z.string()).optional(),
+    source: nonEmpty.optional(),
+    reason: z.string().optional(),
+});
+/** One schema per DECISION_EVENT_KIND — the payload contract table. */
+export const DECISION_EVENT_PAYLOAD_SCHEMAS = {
+    'permission.asked': PermissionAskedPayloadSchema,
+    'auto_approve.granted': AutoApproveGrantedPayloadSchema,
+    'jail.blocked': JailBlockedPayloadSchema,
+    'ask_user.fired': AskUserFiredPayloadSchema,
+    'verify.requested': VerifyRequestedPayloadSchema,
+};
+/**
+ * Validate a payload against its kind's contract. Returns `null` when the
+ * payload satisfies it, else a one-line reason (the FIRST zod issue, prefixed
+ * with the field path) ready for stderr. Never throws.
+ */
+export function decisionPayloadError(kind, data) {
+    const schema = DECISION_EVENT_PAYLOAD_SCHEMAS[kind];
+    const result = schema.safeParse(data);
+    if (result.success)
+        return null;
+    const issue = result.error.issues[0];
+    const where = issue?.path.length ? `${issue.path.join('.')}: ` : '';
+    return `${where}${issue?.message ?? 'payload does not match the contract'}`;
+}
+/** Primitive-only string read: exotic values degrade to `''`, never `[object Object]`. */
+function str(value) {
+    if (typeof value === 'string')
+        return value;
+    if (typeof value === 'number' || typeof value === 'boolean')
+        return String(value);
+    return '';
+}
+/** `str` + collapse + bound, so a multi-line question cannot break the report. */
+function oneLine(value, max = 120) {
+    const text = str(value).replace(/\s+/g, ' ').trim();
+    return text.length > max ? `${text.slice(0, Math.max(0, max - 1))}…` : text;
+}
+/** `a, b, c` for a bounded list, `''` when there is nothing to join. */
+function joinList(value, max = 6) {
+    if (!Array.isArray(value))
+        return '';
+    return value
+        .map((v) => oneLine(v, 40))
+        .filter((v) => v.length > 0)
+        .slice(0, max)
+        .join(', ');
+}
+/** `ruleId @source` / `ruleId` / `source` — whatever the payload carried. */
+function describeOrigin(data) {
+    const rule = oneLine(data.matchedRuleId, 60);
+    const source = oneLine(data.source, 60);
+    if (rule && source)
+        return `${rule} @${source}`;
+    return rule || source;
+}
+function describeDetail(kind, data) {
+    switch (kind) {
+        case 'permission.asked':
+            return (oneLine(data.reason) ||
+                oneLine(data.argsSummary) ||
+                (describeOrigin(data) ? `rule ${describeOrigin(data)}` : 'prompt awaited'));
+        case 'auto_approve.granted': {
+            const origin = describeOrigin(data);
+            return origin ? `auto-approved (${origin})` : 'auto-approved';
+        }
+        case 'jail.blocked':
+            return `${oneLine(data.backend, 40) || 'jail'} ${oneLine(data.mode, 20) || '?'}: ${oneLine(data.reason)}`;
+        case 'ask_user.fired': {
+            const choices = joinList(data.choices);
+            return oneLine(data.question) + (choices ? `  [choices: ${choices}]` : '');
+        }
+        case 'verify.requested': {
+            const criteria = joinList(data.criterionIds, 4);
+            return oneLine(data.reason) || (criteria ? `criteria: ${criteria}` : '');
+        }
+        case 'permission.denied':
+            return oneLine(data.reason) || `denied by ${describeOrigin(data) || 'a permission rule'}`;
+    }
+}
+/**
+ * Flatten one decision event. Pure and defensive: a payload missing every
+ * field still yields a summary with empty strings (the KIND is the datum).
+ */
+export function parseDecisionEvent(e) {
+    const data = e.data;
+    return {
+        seq: e.seq,
+        at: e.ts,
+        kind: e.kind,
+        tool: oneLine(data.tool, 60),
+        source: oneLine(data.source, 60),
+        reason: oneLine(data.reason),
+        detail: describeDetail(e.kind, data),
+    };
+}
+//# sourceMappingURL=decisionEvents.js.map

package/dist/session/decisionEvents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionEvents.js","sourceRoot":"","sources":["../../src/session/decisionEvents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,kBAAkB;IAClB,sBAAsB;IACtB,cAAc;IACd,gBAAgB;IAChB,kBAAkB;CACV,CAAC;AAGX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,oBAAoB,EAAE,mBAAmB,CAAU,CAAC;AAGjG,oEAAoE;AACpE,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,OAAQ,yBAA+C,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,uEAAuE;AACvE,0EAA0E;AAE1E,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AAE9C,qEAAqE;AACrE,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC1D,uEAAuE;IACvE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,uEAAuE;IACvE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAEH,sFAAsF;AACtF,MAAM,CAAC,MAAM,+BAA+B,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC7D,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,mFAAmF;IACnF,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAC3B,aAAa,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,wEAAwE;IACxE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE;IACzB,mFAAmF;IACnF,OAAO,EAAE,QAAQ;IACjB,+EAA+E;IAC/E,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAC7C,MAAM,EAAE,QAAQ;CACjB,CAAC,CAAC;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,QAAQ,EAAE,QAAQ;IAClB,0EAA0E;IAC1E,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,sEAAsE;AACtE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,iEAAiE;IACjE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAC3B,+EAA+E;IAC/E,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEH,uEAAuE;AACvE,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,kBAAkB,EAAE,4BAA4B;IAChD,sBAAsB,EAAE,+BAA+B;IACvD,cAAc,EAAE,wBAAwB;IACxC,gBAAgB,EAAE,yBAAyB;IAC3C,kBAAkB,EAAE,4BAA4B;CACU,CAAC;AAE7D;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAuB,EAAE,IAAa;IACzE,MAAM,MAAM,GAAiB,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,OAAO,GAAG,KAAK,GAAG,KAAK,EAAE,OAAO,IAAI,qCAAqC,EAAE,CAAC;AAC9E,CAAC;AAwBD,0FAA0F;AAC1F,SAAS,GAAG,CAAC,KAAc;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAClF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,kFAAkF;AAClF,SAAS,OAAO,CAAC,KAAc,EAAE,GAAG,GAAG,GAAG;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9E,CAAC;AAED,wEAAwE;AACxE,SAAS,QAAQ,CAAC,KAAc,EAAE,GAAG,GAAG,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SAC3B,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACb,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc,CAAC,IAA6B;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,IAAI,IAAI,MAAM;QAAE,OAAO,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC;IAChD,OAAO,IAAI,IAAI,MAAM,CAAC;AACxB,CAAC;AAED,SAAS,cAAc,CAAC,IAA4B,EAAE,IAA6B;IACjF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,kBAAkB;YACrB,OAAO,CACL,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;gBACzB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAC3E,CAAC;QACJ,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,CAAC,CAAC,kBAAkB,MAAM,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC;QAChE,CAAC;QACD,KAAK,cAAc;YACjB,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5G,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YAChD,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,mBAAmB;YACtB,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,aAAa,cAAc,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC;IAC9F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAuB;IACxD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACpB,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAA8B;QACtC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAChC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5B,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,IAA8B,EAAE,IAAI,CAAC;KAC/D,CAAC;AACJ,CAAC"}

package/dist/session/index.d.ts

@@ -12,6 +12,8 @@ export * from './agentAdapter.js';
 export * from './writer.js';
 export * from './replay.js';
 export * from './replayCache.js';
+export * from './decisionEvents.js';
+export * from './verifyDebt.js';
 export * from './store.js';
 export * from './lineage.js';
 export * from './exportSession.js';

package/dist/session/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC"}

package/dist/session/index.js

@@ -12,6 +12,8 @@ export * from './agentAdapter.js';
 export * from './writer.js';
 export * from './replay.js';
 export * from './replayCache.js';
+export * from './decisionEvents.js';
+export * from './verifyDebt.js';
 export * from './store.js';
 export * from './lineage.js';
 export * from './exportSession.js';

package/dist/session/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC"}

package/dist/session/replay.d.ts

@@ -8,6 +8,8 @@
 import { type SessionEventEnvelope } from './types.js';
 import { type DerivedMessage } from './modelSurface.js';
 import { type ToolInterrupted } from './recovery.js';
+import { type DecisionEventSummary } from './decisionEvents.js';
+import { type VerifyDebtSummary } from './verifyDebt.js';
 export type ReplayIssueType = 'corrupt-line' | 'schema-mismatch' | 'seq-duplicate' | 'seq-gap' | 'seq-nonmonotonic';
 export interface ReplayIssue {
     type: ReplayIssueType;
@@ -82,6 +84,37 @@ export interface SessionProjection {
     issues: ReplayIssue[];
     /** Dangling tool.call events classified for crash recovery (2.x B). */
     interruptedTools: ToolInterrupted[];
+    /** WS1 (t133): pre-dispatch permission denials, in log order. */
+    permissionDenials: PermissionDenialSummary[];
+    /**
+     * WS7 slice 2 (t140): every decision point on this spine, in log order —
+     * the five new decision kinds plus `permission.denied` (see
+     * decisionEvents.ts for why the two lists are one aggregate).
+     */
+    decisionEvents: DecisionEventSummary[];
+    /** K1.5/F5 (t78): verify-debt slots, open + cleared, in first-open order. */
+    verifyDebts: VerifyDebtSummary[];
+    /** Per-tool tally over `tool.call` / `tool.result` (row order = first call). */
+    toolCallBreakdown: ToolCallTally[];
+}
+/** One tool's call/result counters, as replay shows them. */
+export interface ToolCallTally {
+    tool: string;
+    calls: number;
+    results: number;
+}
+/**
+ * WS1 (t133): a `permission.denied` event, replayed. Defensive reads: an
+ * older writer (or a hand-edited log) with a missing field yields '' rather
+ * than throwing — replay must never die on telemetry.
+ */
+export interface PermissionDenialSummary {
+    seq: number;
+    at: number;
+    tool: string;
+    matchedRuleId: string;
+    source: string;
+    reason: string;
 }
 /** Build the materialized view of a session from its (valid) events. */
 export declare function buildProjection(events: readonly SessionEventEnvelope[], issues?: ReplayIssue[]): SessionProjection;

package/dist/session/replay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"replay.d.ts","sourceRoot":"","sources":["../../src/session/replay.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAA4B,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAE/E,MAAM,MAAM,eAAe,GACvB,cAAc,GACd,iBAAiB,GACjB,eAAe,GACf,SAAS,GACT,kBAAkB,CAAC;AAEvB,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,eAAe,CAAC;IACtB,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,4DAA4D;IAC5D,EAAE,EAAE,OAAO,CAAC;CACb;AAED,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAW5E;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,YAAY,CAGnF;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACvD;IAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CA2CpG;AAED,mEAAmE;AACnE,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,sBAAsB,EAAE,CAAC;IACxC,aAAa,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,0EAA0E;IAC1E,aAAa,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjF,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,uEAAuE;IACvE,gBAAgB,EAAE,eAAe,EAAE,CAAC;CACrC;AAmBD,wEAAwE;AACxE,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,EAAE,MAAM,GAAE,WAAW,EAAO,GAAG,iBAAiB,CA4DtH"}
+{"version":3,"file":"replay.d.ts","sourceRoot":"","sources":["../../src/session/replay.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAiC,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAA4B,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAsB,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAsB,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE7E,MAAM,MAAM,eAAe,GACvB,cAAc,GACd,iBAAiB,GACjB,eAAe,GACf,SAAS,GACT,kBAAkB,CAAC;AAEvB,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,eAAe,CAAC;IACtB,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,4DAA4D;IAC5D,EAAE,EAAE,OAAO,CAAC;CACb;AAED,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAW5E;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,YAAY,CAGnF;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACvD;IAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CA2CpG;AAED,mEAAmE;AACnE,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,sBAAsB,EAAE,CAAC;IACxC,aAAa,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,0EAA0E;IAC1E,aAAa,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjF,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,uEAAuE;IACvE,gBAAgB,EAAE,eAAe,EAAE,CAAC;IACpC,iEAAiE;IACjE,iBAAiB,EAAE,uBAAuB,EAAE,CAAC;IAC7C;;;;OAIG;IACH,cAAc,EAAE,oBAAoB,EAAE,CAAC;IACvC,6EAA6E;IAC7E,WAAW,EAAE,iBAAiB,EAAE,CAAC;IACjC,gFAAgF;IAChF,iBAAiB,EAAE,aAAa,EAAE,CAAC;CACpC;AAED,6DAA6D;AAC7D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AA2BD;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AA8BD,wEAAwE;AACxE,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,EAAE,MAAM,GAAE,WAAW,EAAO,GAAG,iBAAiB,CA+EtH"}

package/dist/session/replay.js

@@ -7,8 +7,10 @@
  */
 import { promises as fs } from 'node:fs';
 import { SessionEventEnvelopeSchema, } from './types.js';
-import { deriveMessages } from './modelSurface.js';
+import { deriveMessages, pairToolCalls } from './modelSurface.js';
 import { classifyInterruptedTools } from './recovery.js';
+import { parseDecisionEvent } from './decisionEvents.js';
+import { projectVerifyDebts } from './verifyDebt.js';
 export async function readSessionLog(filePath) {
     let content;
     try {
@@ -82,6 +84,42 @@ export function parseSessionLogLines(lines, opts = {}) {
     }
     return { events, issues, expected, linesConsumed: base + lines.length };
 }
+/**
+ * Per-tool tally. A `tool.result` on a REAL spine carries only
+ * `{callId, output, ok, durationMs}` — NOT the tool name (verified on a live
+ * 938-event session log) — so results are attributed through `pairToolCalls`
+ * (the same callId rule the model surface and recovery use). A result whose
+ * call is not on this spine (a resumed log can start mid-turn) cannot be
+ * attributed and is not counted here; the aggregate `toolCalls`/`toolResults`
+ * counters still count it. Rows are ordered by calls desc, then name.
+ */
+function tallyToolCalls(events) {
+    const byTool = new Map();
+    const slot = (tool) => {
+        const found = byTool.get(tool) ?? { tool, calls: 0, results: 0 };
+        byTool.set(tool, found);
+        return found;
+    };
+    for (const pair of pairToolCalls(events)) {
+        const tool = typeof pair.call.data.tool === 'string' ? pair.call.data.tool : '';
+        if (tool.length === 0)
+            continue;
+        slot(tool).calls += 1;
+        if (pair.result !== undefined)
+            slot(tool).results += 1;
+    }
+    return [...byTool.values()].sort((a, b) => b.calls - a.calls || a.tool.localeCompare(b.tool));
+}
+function parsePermissionDenial(e) {
+    return {
+        seq: e.seq,
+        at: e.ts,
+        tool: String(e.data.tool ?? ''),
+        matchedRuleId: String(e.data.matchedRuleId ?? ''),
+        source: String(e.data.source ?? ''),
+        reason: String(e.data.reason ?? ''),
+    };
+}
 function parseVerification(e) {
     const raw = Array.isArray(e.data.results) ? e.data.results : [];
     const results = raw
@@ -115,6 +153,10 @@ export function buildProjection(events, issues = []) {
         replans: 0,
         issues,
         interruptedTools: classifyInterruptedTools(events),
+        permissionDenials: [],
+        decisionEvents: [],
+        verifyDebts: projectVerifyDebts(events),
+        toolCallBreakdown: tallyToolCalls(events),
     };
     for (const e of events) {
         switch (e.kind) {
@@ -155,6 +197,21 @@ export function buildProjection(events, issues = []) {
                     rationale: String(e.data.rationale ?? ''),
                 });
                 break;
+            case 'permission.denied':
+                projection.permissionDenials.push(parsePermissionDenial(e));
+                // …and it IS a decision point: the WS1 denial joins the aggregate too
+                // (its dedicated field stays for back-compat consumers — see
+                // DECISION_PROJECTION_KINDS).
+                projection.decisionEvents.push(parseDecisionEvent(e));
+                break;
+            // WS7 slice 2 (t140): decision points. Listed explicitly (not a `default`
+            // guard) so "who replays ask_user.fired?" answers itself by grep.
+            case 'permission.asked':
+            case 'auto_approve.granted':
+            case 'jail.blocked':
+            case 'ask_user.fired':
+            case 'verify.requested':
+                projection.decisionEvents.push(parseDecisionEvent(e));
                 break;
         }
     }

package/dist/session/replay.js.map

@@ -1 +1 @@
-{"version":3,"file":"replay.js","sourceRoot":"","sources":["../../src/session/replay.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EACL,0BAA0B,GAE3B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAuB,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAwB,MAAM,eAAe,CAAC;AAyB/E,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB;IACnD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAC9D,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,OAAe;IACnE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAwB,EACxB,OAAsD,EAAE;IAExD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;IACrC,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,0BAA0B;aACtE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;QAC7B,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtB,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC;aAAM,IAAI,QAAQ,CAAC,GAAG,GAAG,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,MAAM,EAAE,eAAe,QAAQ,KAAK,QAAQ,CAAC,GAAG,GAAG,CAAC,EAAE;aACvD,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtB,QAAQ,GAAG,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;AAC1E,CAAC;AA+BD,SAAS,iBAAiB,CAAC,CAAuB;IAChD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,OAAO,GAAG,GAAG;SAChB,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;SAChF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,SAAS,CAAC;QAC/C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC;QACrC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;KACjE,CAAC,CAAC,CAAC;IACN,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,OAAO;QACP,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KAC7E,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,eAAe,CAAC,MAAuC,EAAE,SAAwB,EAAE;IACjG,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,MAAM,UAAU,GAAsB;QACpC,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,EAAE;QAChC,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,YAAY,EAAE,CAAC;QACf,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC;QAChC,SAAS,EAAE,CAAC;QACZ,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;QACjB,OAAO,EAAE,CAAC;QACV,MAAM;QACN,gBAAgB,EAAE,wBAAwB,CAAC,MAAM,CAAC;KACnD,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,iBAAiB;gBACpB,UAAU,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC1B,MAAM;YACR,KAAK,iBAAiB;gBACpB,UAAU,CAAC,YAAY,IAAI,CAAC,CAAC;gBAC7B,MAAM;YACR,KAAK,gBAAgB;gBACnB,UAAU,CAAC,IAAI,GAAG;oBAChB,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;oBACrD,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;iBACzC,CAAC;gBACF,MAAM;YACR,KAAK,WAAW;gBACd,UAAU,CAAC,SAAS,IAAI,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,aAAa;gBAChB,UAAU,CAAC,WAAW,IAAI,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,kBAAkB;gBACrB,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpD,MAAM;YACR,KAAK,eAAe;gBAClB,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;gBACjF,MAAM;YACR,KAAK,gBAAgB;gBACnB,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;gBACxB,MAAM;YACR,KAAK,kBAAkB;gBACrB,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC;oBAC5B,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;oBACnD,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;iBAC1C,CAAC,CAAC;gBACH,MAAM;gBACN,MAAM;QACV,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}
+{"version":3,"file":"replay.js","sourceRoot":"","sources":["../../src/session/replay.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EACL,0BAA0B,GAE3B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAuB,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAwB,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAA6B,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAA0B,MAAM,iBAAiB,CAAC;AAyB7E,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB;IACnD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAC9D,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,OAAe;IACnE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAwB,EACxB,OAAsD,EAAE;IAExD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;IACrC,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,0BAA0B;aACtE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;QAC7B,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtB,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC;aAAM,IAAI,QAAQ,CAAC,GAAG,GAAG,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,MAAM,EAAE,eAAe,QAAQ,KAAK,QAAQ,CAAC,GAAG,GAAG,CAAC,EAAE;aACvD,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtB,QAAQ,GAAG,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;AAC1E,CAAC;AAkDD;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,MAAuC;IAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAiB,EAAE;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAChG,CAAC;AAgBD,SAAS,qBAAqB,CAAC,CAAuB;IACpD,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC/B,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;QACjD,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QACnC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAuB;IAChD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,OAAO,GAAG,GAAG;SAChB,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;SAChF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,SAAS,CAAC;QAC/C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC;QACrC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;KACjE,CAAC,CAAC,CAAC;IACN,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,OAAO;QACP,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KAC7E,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,eAAe,CAAC,MAAuC,EAAE,SAAwB,EAAE;IACjG,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,MAAM,UAAU,GAAsB;QACpC,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,EAAE;QAChC,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,YAAY,EAAE,CAAC;QACf,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC;QAChC,SAAS,EAAE,CAAC;QACZ,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;QACjB,OAAO,EAAE,CAAC;QACV,MAAM;QACN,gBAAgB,EAAE,wBAAwB,CAAC,MAAM,CAAC;QAClD,iBAAiB,EAAE,EAAE;QACrB,cAAc,EAAE,EAAE;QAClB,WAAW,EAAE,kBAAkB,CAAC,MAAM,CAAC;QACvC,iBAAiB,EAAE,cAAc,CAAC,MAAM,CAAC;KAC1C,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,iBAAiB;gBACpB,UAAU,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC1B,MAAM;YACR,KAAK,iBAAiB;gBACpB,UAAU,CAAC,YAAY,IAAI,CAAC,CAAC;gBAC7B,MAAM;YACR,KAAK,gBAAgB;gBACnB,UAAU,CAAC,IAAI,GAAG;oBAChB,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;oBACrD,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;iBACzC,CAAC;gBACF,MAAM;YACR,KAAK,WAAW;gBACd,UAAU,CAAC,SAAS,IAAI,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,aAAa;gBAChB,UAAU,CAAC,WAAW,IAAI,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,kBAAkB;gBACrB,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpD,MAAM;YACR,KAAK,eAAe;gBAClB,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;gBACjF,MAAM;YACR,KAAK,gBAAgB;gBACnB,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;gBACxB,MAAM;YACR,KAAK,kBAAkB;gBACrB,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC;oBAC5B,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;oBACnD,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;iBAC1C,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,mBAAmB;gBACtB,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5D,sEAAsE;gBACtE,6DAA6D;gBAC7D,8BAA8B;gBAC9B,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtD,MAAM;YACR,0EAA0E;YAC1E,kEAAkE;YAClE,KAAK,kBAAkB,CAAC;YACxB,KAAK,sBAAsB,CAAC;YAC5B,KAAK,cAAc,CAAC;YACpB,KAAK,gBAAgB,CAAC;YACtB,KAAK,kBAAkB;gBACrB,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtD,MAAM;QACV,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/session/types.d.ts

@@ -36,7 +36,7 @@ export type SessionActor = z.infer<typeof SessionActorSchema>;
  * replay: the tolerant reader (replay.ts) reports unknown kinds as
  * `schema-mismatch` issues and skips those lines.
  */
-export declare const SESSION_EVENT_KINDS: readonly ["session.started", "session.resumed", "session.ended", "session.forked", "session.harness_manifest", "user.message", "assistant.message", "tool.call", "tool.result", "tool.interrupted", "session.compacted", "task.created", "task.updated", "task.contract", "task.contract_updated", "council.member", "mission.phase", "mission.replan", "mission.progress", "verification.run", "verification.evidence", "resource.epoch_started", "resource.snapshot", "resource.limit_reached", "resource.reserve_entered", "resource.overrun", "graph.node_started", "graph.node_ended", "file.read", "file.applied", "file.rejected", "strict.waived", "verify.debt_open", "verify.debt_cleared", "note"];
+export declare const SESSION_EVENT_KINDS: readonly ["session.started", "session.resumed", "session.ended", "session.forked", "session.harness_manifest", "user.message", "assistant.message", "tool.call", "tool.result", "tool.interrupted", "session.compacted", "task.created", "task.updated", "task.contract", "task.contract_updated", "council.member", "mission.phase", "mission.replan", "mission.progress", "verification.run", "verification.evidence", "resource.epoch_started", "resource.snapshot", "resource.limit_reached", "resource.reserve_entered", "resource.overrun", "graph.node_started", "graph.node_ended", "file.read", "file.applied", "file.rejected", "strict.waived", "verify.debt_open", "verify.debt_cleared", "permission.denied", "permission.asked", "auto_approve.granted", "jail.blocked", "ask_user.fired", "verify.requested", "note"];
 export type SessionEventKind = (typeof SESSION_EVENT_KINDS)[number];
 export declare const SessionEventEnvelopeSchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<1>;
@@ -78,6 +78,12 @@ export declare const SessionEventEnvelopeSchema: z.ZodObject<{
         "strict.waived": "strict.waived";
         "verify.debt_open": "verify.debt_open";
         "verify.debt_cleared": "verify.debt_cleared";
+        "permission.denied": "permission.denied";
+        "permission.asked": "permission.asked";
+        "auto_approve.granted": "auto_approve.granted";
+        "jail.blocked": "jail.blocked";
+        "ask_user.fired": "ask_user.fired";
+        "verify.requested": "verify.requested";
         note: "note";
     }>;
     actor: z.ZodObject<{

package/dist/session/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/session/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,sFAAsF;AACtF,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,eAAO,MAAM,kBAAkB;;;;;;;;;;iBAK7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,+qBAoEtB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBASrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,qFAAqF;AACrF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,YAAY,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,0BAA0B;AAC1B,eAAO,MAAM,UAAU,EAAE,YAA+B,CAAC;AACzD,eAAO,MAAM,WAAW,EAAE,YAAgC,CAAC;AAC3D,eAAO,MAAM,YAAY,EAAE,YAAiC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/session/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,sFAAsF;AACtF,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,eAAO,MAAM,kBAAkB;;;;;;;;;;iBAK7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,syBAwFtB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBASrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,qFAAqF;AACrF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,YAAY,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,0BAA0B;AAC1B,eAAO,MAAM,UAAU,EAAE,YAA+B,CAAC;AACzD,eAAO,MAAM,WAAW,EAAE,YAAgC,CAAC;AAC3D,eAAO,MAAM,YAAY,EAAE,YAAiC,CAAC"}