@zelari/core 2.9.2 → 2.11.0

package/dist/runtime/recorder/Redactor.js

@@ -0,0 +1,78 @@
+/**
+ * Centralized redaction for run-recorder payloads (Frontier PHASE 5, §99).
+ *
+ * Every writer funnels through `redactRuntimePayload()`; no individual
+ * recorder path is allowed to serialize secrets on its own. Best-effort by
+ * nature (regex-based), but the single choke point keeps patterns auditable.
+ */
+export const REDACTED = '[REDACTED]';
+/** Object keys whose values are always redacted regardless of content. */
+const SECRET_KEY_RE = /(pass(word|wd)?|secret|token|api[-_]?key|auth(orization)?|credential|private[-_]?key|access[-_]?key)/i;
+const VALUE_PATTERNS = [
+    // "Authorization: <credential>" (with optional bearer/Basic scheme prefix) — whole value.
+    // Value class excludes [ ] so the [REDACTED] marker can never be re-matched.
+    {
+        re: /\b(authorization\s*[:=]\s*)(?:bearer|basic|token)\s+[^\s,;"'}\]\[]+/gi,
+        replacement: '$1[REDACTED]',
+    },
+    {
+        re: /\b(authorization\s*[:=]\s*)[^\s,;"'}\]\[]+/gi,
+        replacement: '$1[REDACTED]',
+    },
+    // Bare bearer schemes anywhere ("bearer <token>", any casing)
+    { re: /\bbearer\s+[A-Za-z0-9\-._~+/]+=*/gi, replacement: 'bearer [REDACTED]' },
+    // OpenAI-style keys (sk-, sk-proj-)
+    { re: /\bsk-(proj-)?[A-Za-z0-9_-]{8,}\b/g, replacement: 'sk-[REDACTED]' },
+    // GitHub tokens
+    {
+        re: /\b(ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}\b/g,
+        replacement: '[REDACTED]',
+    },
+    { re: /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g, replacement: '[REDACTED]' },
+    // Slack
+    { re: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g, replacement: '[REDACTED]' },
+    // AWS access keys
+    { re: /\bAKIA[0-9A-Z]{16}\b/g, replacement: '[REDACTED]' },
+    // Google OAuth
+    { re: /\bya29\.[A-Za-z0-9\-_.]+/g, replacement: '[REDACTED]' },
+    // Secret-looking assignments, UPPER_SNAKE or lower: FOO_PASSWORD=x, password: x
+    {
+        re: /\b([A-Za-z0-9_]*(?:password|passwd|secret|token|api[_-]?key|apikey|access[_-]?key|private[_-]?key)[A-Za-z0-9_]*)\s*[:=]\s*("[^"]*"|'[^']*'|[^\s,;}&\]]+)/gi,
+        replacement: '$1=[REDACTED]',
+    },
+];
+/** Redact secret-looking substrings from free text. */
+export function redactString(input) {
+    let out = input;
+    for (const { re, replacement } of VALUE_PATTERNS) {
+        out = out.replace(re, replacement);
+    }
+    return out;
+}
+/**
+ * Recursively redact a payload before it is persisted by the recorder.
+ * - secret-ish object keys → whole value replaced
+ * - strings → pattern scrub
+ * - arrays/objects → walked
+ * - primitives → passed through
+ */
+export function redactRuntimePayload(value) {
+    if (value === null || value === undefined)
+        return value;
+    if (typeof value === 'string')
+        return redactString(value);
+    if (typeof value === 'number' || typeof value === 'boolean')
+        return value;
+    if (Array.isArray(value))
+        return value.map((item) => redactRuntimePayload(item));
+    if (typeof value === 'object') {
+        const out = {};
+        for (const [key, val] of Object.entries(value)) {
+            out[key] = SECRET_KEY_RE.test(key) ? REDACTED : redactRuntimePayload(val);
+        }
+        return out;
+    }
+    // Functions / symbols / bigints: nothing useful to persist.
+    return REDACTED;
+}
+//# sourceMappingURL=Redactor.js.map

package/dist/runtime/recorder/Redactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Redactor.js","sourceRoot":"","sources":["../../../src/runtime/recorder/Redactor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC,0EAA0E;AAC1E,MAAM,aAAa,GACjB,uGAAuG,CAAC;AAE1G,MAAM,cAAc,GAA+C;IACjE,0FAA0F;IAC1F,6EAA6E;IAC7E;QACE,EAAE,EAAE,uEAAuE;QAC3E,WAAW,EAAE,cAAc;KAC5B;IACD;QACE,EAAE,EAAE,8CAA8C;QAClD,WAAW,EAAE,cAAc;KAC5B;IACD,8DAA8D;IAC9D,EAAE,EAAE,EAAE,oCAAoC,EAAE,WAAW,EAAE,mBAAmB,EAAE;IAC9E,oCAAoC;IACpC,EAAE,EAAE,EAAE,mCAAmC,EAAE,WAAW,EAAE,eAAe,EAAE;IACzE,gBAAgB;IAChB;QACE,EAAE,EAAE,6CAA6C;QACjD,WAAW,EAAE,YAAY;KAC1B;IACD,EAAE,EAAE,EAAE,mCAAmC,EAAE,WAAW,EAAE,YAAY,EAAE;IACtE,QAAQ;IACR,EAAE,EAAE,EAAE,mCAAmC,EAAE,WAAW,EAAE,YAAY,EAAE;IACtE,kBAAkB;IAClB,EAAE,EAAE,EAAE,uBAAuB,EAAE,WAAW,EAAE,YAAY,EAAE;IAC1D,eAAe;IACf,EAAE,EAAE,EAAE,2BAA2B,EAAE,WAAW,EAAE,YAAY,EAAE;IAC9D,gFAAgF;IAChF;QACE,EAAE,EAAE,4JAA4J;QAChK,WAAW,EAAE,eAAe;KAC7B;CACF,CAAC;AAEF,uDAAuD;AACvD,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,cAAc,EAAE,CAAC;QACjD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,4DAA4D;IAC5D,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/runtime/recorder/RunRecorder.d.ts

@@ -0,0 +1,73 @@
+export interface RunRecorderOptions {
+    /** Root directory that contains one folder per run. */
+    runsDir: string;
+    runId?: string;
+    sessionId?: string;
+    mode?: string;
+    phase?: string;
+    cwd?: string;
+    models?: Record<string, string>;
+    now?: () => number;
+}
+export interface RunManifest {
+    version: 1;
+    runId: string;
+    sessionId?: string;
+    mode: string;
+    phase: string;
+    startedAt: number;
+    endedAt?: number;
+    status: 'running' | 'completed' | 'failed' | 'cancelled';
+    cwd: string;
+    models: Record<string, string>;
+}
+/** Metrics the recorder itself can count truthfully at finalize time. */
+export interface RunMetricsFile {
+    durationMs: number;
+    modelCalls: number;
+    toolCalls: number;
+    toolFailures: number;
+    turns: number;
+}
+export type RunFinalStatus = 'completed' | 'failed' | 'cancelled';
+/** Generate a stable-enough run id: `run_<time36>_<hex>`. */
+export declare function newRunId(now?: () => number): string;
+/** Env flag for the run flight recorder (Frontier PHASE 5 rollout). */
+export declare function runRecordEnabled(): boolean;
+export declare class RunRecorder {
+    readonly runId: string;
+    readonly runDir: string;
+    private readonly opts;
+    private readonly now;
+    private chain;
+    private startedAt;
+    private started;
+    private finalized;
+    private readonly models;
+    private readonly counters;
+    constructor(options: RunRecorderOptions);
+    /** Create the run dir and write the initial manifest. Idempotent. */
+    start(): void;
+    /** Append one redacted event to trace.jsonl. */
+    record(event: Record<string, unknown>): void;
+    /** Append one redacted event to the per-agent stream. */
+    recordAgent(agentId: string, event: Record<string, unknown>): void;
+    /** Track which model served which role, for the final manifest. */
+    noteModel(role: string, model: string | undefined): void;
+    bumpModelCall(): void;
+    bumpToolCall(): void;
+    bumpToolFailure(): void;
+    bumpTurn(): void;
+    getMetrics(): RunMetricsFile;
+    /** Write final manifest + metrics.json. Idempotent. */
+    finalize(status: RunFinalStatus): void;
+    /** Await pending writes (tests / graceful shutdown). */
+    flush(): Promise<void>;
+    private buildManifest;
+    /**
+     * Serial best-effort write queue: preserves trace ordering and swallows
+     * IO errors (§102 — recorder failure must not block the run).
+     */
+    private enqueue;
+}
+//# sourceMappingURL=RunRecorder.d.ts.map

package/dist/runtime/recorder/RunRecorder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RunRecorder.d.ts","sourceRoot":"","sources":["../../../src/runtime/recorder/RunRecorder.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,kBAAkB;IACjC,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAElE,6DAA6D;AAC7D,wBAAgB,QAAQ,CAAC,GAAG,GAAE,MAAM,MAAiB,GAAG,MAAM,CAE7D;AAED,uEAAuE;AACvE,wBAAgB,gBAAgB,IAAI,OAAO,CAG1C;AAOD,qBAAa,WAAW;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAC1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,KAAK,CAAoC;IACjD,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8D;gBAE3E,OAAO,EAAE,kBAAkB;IAQvC,qEAAqE;IACrE,KAAK,IAAI,IAAI;IAWb,gDAAgD;IAChD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAK5C,yDAAyD;IACzD,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAOlE,mEAAmE;IACnE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAIxD,aAAa,IAAI,IAAI;IAIrB,YAAY,IAAI,IAAI;IAIpB,eAAe,IAAI,IAAI;IAIvB,QAAQ,IAAI,IAAI;IAIhB,UAAU,IAAI,cAAc;IAO5B,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;IAWtC,wDAAwD;IAClD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,OAAO,CAAC,aAAa;IAerB;;;OAGG;IACH,OAAO,CAAC,OAAO;CAKhB"}

package/dist/runtime/recorder/RunRecorder.js

@@ -0,0 +1,137 @@
+/**
+ * Run Flight Recorder (Frontier PHASE 5, §67-§71).
+ *
+ * Persists a per-run directory under `.zelari/runs/<run-id>/`:
+ *
+ *   manifest.json   run metadata (no secrets — payloads pass Redactor)
+ *   trace.jsonl     ordered runtime events
+ *   agents/*.jsonl  per-agent event streams
+ *   metrics.json    counters snapshot, written at finalize
+ *
+ * All IO is best-effort (§102): every write is enqueued on a serial chain
+ * whose errors are swallowed, so a recorder failure never blocks the run.
+ */
+import { appendFile, mkdir, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { randomBytes } from 'node:crypto';
+import { redactRuntimePayload } from './Redactor.js';
+/** Generate a stable-enough run id: `run_<time36>_<hex>`. */
+export function newRunId(now = Date.now) {
+    return `run_${now().toString(36)}_${randomBytes(4).toString('hex')}`;
+}
+/** Env flag for the run flight recorder (Frontier PHASE 5 rollout). */
+export function runRecordEnabled() {
+    const raw = process.env.ZELARI_RUN_RECORD?.trim().toLowerCase();
+    return raw === '1' || raw === 'true' || raw === 'on';
+}
+function sanitizeAgentId(agentId) {
+    const safe = agentId.replace(/[^a-zA-Z0-9._-]/g, '-').slice(0, 64);
+    return safe.length > 0 ? safe : 'agent';
+}
+export class RunRecorder {
+    runId;
+    runDir;
+    opts;
+    now;
+    chain = Promise.resolve();
+    startedAt = 0;
+    started = false;
+    finalized = false;
+    models;
+    counters = { modelCalls: 0, toolCalls: 0, toolFailures: 0, turns: 0 };
+    constructor(options) {
+        this.opts = options;
+        this.now = options.now ?? Date.now;
+        this.runId = options.runId ?? newRunId(this.now);
+        this.runDir = join(options.runsDir, this.runId);
+        this.models = { ...(options.models ?? {}) };
+    }
+    /** Create the run dir and write the initial manifest. Idempotent. */
+    start() {
+        if (this.started)
+            return;
+        this.started = true;
+        this.startedAt = this.now();
+        this.enqueue(async () => {
+            await mkdir(this.runDir, { recursive: true });
+            await mkdir(join(this.runDir, 'agents'), { recursive: true });
+            await writeFile(join(this.runDir, 'manifest.json'), JSON.stringify(this.buildManifest('running'), null, 2));
+        });
+    }
+    /** Append one redacted event to trace.jsonl. */
+    record(event) {
+        if (!this.started)
+            this.start();
+        this.enqueue(() => appendFile(join(this.runDir, 'trace.jsonl'), `${JSON.stringify(redactRuntimePayload(event))}\n`));
+    }
+    /** Append one redacted event to the per-agent stream. */
+    recordAgent(agentId, event) {
+        if (!this.started)
+            this.start();
+        this.enqueue(() => appendFile(join(this.runDir, 'agents', `${sanitizeAgentId(agentId)}.jsonl`), `${JSON.stringify(redactRuntimePayload(event))}\n`));
+    }
+    /** Track which model served which role, for the final manifest. */
+    noteModel(role, model) {
+        if (role && model)
+            this.models[role] = model;
+    }
+    bumpModelCall() {
+        this.counters.modelCalls += 1;
+    }
+    bumpToolCall() {
+        this.counters.toolCalls += 1;
+    }
+    bumpToolFailure() {
+        this.counters.toolFailures += 1;
+    }
+    bumpTurn() {
+        this.counters.turns += 1;
+    }
+    getMetrics() {
+        return {
+            durationMs: this.finalized || this.startedAt > 0 ? Math.max(0, this.now() - this.startedAt) : 0,
+            ...this.counters,
+        };
+    }
+    /** Write final manifest + metrics.json. Idempotent. */
+    finalize(status) {
+        if (this.finalized)
+            return;
+        if (!this.started)
+            this.start();
+        this.finalized = true;
+        const endedAt = this.now();
+        this.enqueue(async () => {
+            await writeFile(join(this.runDir, 'manifest.json'), JSON.stringify(this.buildManifest(status, endedAt), null, 2));
+            await writeFile(join(this.runDir, 'metrics.json'), JSON.stringify(this.getMetrics(), null, 2));
+        });
+    }
+    /** Await pending writes (tests / graceful shutdown). */
+    async flush() {
+        await this.chain;
+    }
+    buildManifest(status, endedAt) {
+        return {
+            version: 1,
+            runId: this.runId,
+            sessionId: this.opts.sessionId,
+            mode: this.opts.mode ?? 'kraken',
+            phase: this.opts.phase ?? 'build',
+            startedAt: this.startedAt,
+            ...(endedAt !== undefined ? { endedAt } : {}),
+            status,
+            cwd: this.opts.cwd ?? process.cwd(),
+            models: this.models,
+        };
+    }
+    /**
+     * Serial best-effort write queue: preserves trace ordering and swallows
+     * IO errors (§102 — recorder failure must not block the run).
+     */
+    enqueue(write) {
+        this.chain = this.chain.then(write).catch(() => {
+            /* best-effort: drop failed write, keep the chain alive */
+        });
+    }
+}
+//# sourceMappingURL=RunRecorder.js.map

package/dist/runtime/recorder/RunRecorder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RunRecorder.js","sourceRoot":"","sources":["../../../src/runtime/recorder/RunRecorder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAsCrD,6DAA6D;AAC7D,MAAM,UAAU,QAAQ,CAAC,MAAoB,IAAI,CAAC,GAAG;IACnD,OAAO,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChE,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AAC1C,CAAC;AAED,MAAM,OAAO,WAAW;IACb,KAAK,CAAS;IACd,MAAM,CAAS;IAEP,IAAI,CAAqB;IACzB,GAAG,CAAe;IAC3B,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IACzC,SAAS,GAAG,CAAC,CAAC;IACd,OAAO,GAAG,KAAK,CAAC;IAChB,SAAS,GAAG,KAAK,CAAC;IACT,MAAM,CAAyB;IAC/B,QAAQ,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAEvF,YAAY,OAA2B;QACrC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;QACpB,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,qEAAqE;IACrE,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACtB,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9G,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gDAAgD;IAChD,MAAM,CAAC,KAA8B;QACnC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACvH,CAAC;IAED,yDAAyD;IACzD,WAAW,CAAC,OAAe,EAAE,KAA8B;QACzD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAChB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CACjI,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,SAAS,CAAC,IAAY,EAAE,KAAyB;QAC/C,IAAI,IAAI,IAAI,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC/C,CAAC;IAED,aAAa;QACX,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,eAAe;QACb,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,UAAU;QACR,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/F,GAAG,IAAI,CAAC,QAAQ;SACjB,CAAC;IACJ,CAAC;IAED,uDAAuD;IACvD,QAAQ,CAAC,MAAsB;QAC7B,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACtB,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAClH,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjG,CAAC,CAAC,CAAC;IACL,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAEO,aAAa,CAAC,MAA6B,EAAE,OAAgB;QACnE,OAAO;YACL,OAAO,EAAE,CAAC;YACV,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;YAC9B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,QAAQ;YAChC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM;YACN,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,OAAO,CAAC,KAA0B;QACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC7C,0DAA0D;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/runtime/recorder/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Run Flight Recorder (Frontier PHASE 5) — public surface.
+ */
+export * from './Redactor.js';
+export * from './RunRecorder.js';
+export * from './recorderObserver.js';
+export * from './retention.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/recorder/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/recorder/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC"}

package/dist/runtime/recorder/index.js

@@ -0,0 +1,8 @@
+/**
+ * Run Flight Recorder (Frontier PHASE 5) — public surface.
+ */
+export * from './Redactor.js';
+export * from './RunRecorder.js';
+export * from './recorderObserver.js';
+export * from './retention.js';
+//# sourceMappingURL=index.js.map

package/dist/runtime/recorder/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/recorder/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC"}

package/dist/runtime/recorder/recorderObserver.d.ts

@@ -0,0 +1,4 @@
+import type { AgentObserver } from '../observers/types.js';
+import { RunRecorder } from './RunRecorder.js';
+export declare function createRecorderObserver(recorder: RunRecorder): AgentObserver;
+//# sourceMappingURL=recorderObserver.d.ts.map

package/dist/runtime/recorder/recorderObserver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recorderObserver.d.ts","sourceRoot":"","sources":["../../../src/runtime/recorder/recorderObserver.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,aAAa,EASd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAmB/C,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,aAAa,CAoD3E"}

package/dist/runtime/recorder/recorderObserver.js

@@ -0,0 +1,63 @@
+/**
+ * Bridge that turns observer events into RunRecorder writes
+ * (Frontier PHASE 5). Never intervenes: every hook returns CONTINUE.
+ * Model deltas are deliberately not traced (noise; §70 event list).
+ */
+import { CONTINUE } from '../observers/types.js';
+function base(event) {
+    return {
+        id: event.id,
+        ts: event.ts,
+        turn: event.turn,
+        agentId: event.identity.agentId,
+        role: event.identity.role,
+    };
+}
+export function createRecorderObserver(recorder) {
+    return {
+        onRunStart(event) {
+            recorder.noteModel(event.identity.role, event.identity.model);
+            recorder.start();
+            recorder.record({ type: 'run_start', ...base(event) });
+            return CONTINUE;
+        },
+        onModelAttempt(event) {
+            recorder.bumpModelCall();
+            recorder.record({ type: 'model_attempt', ...base(event) });
+            return CONTINUE;
+        },
+        onModelResponse(event) {
+            recorder.record({ type: 'model_response', ...base(event) });
+            return CONTINUE;
+        },
+        onToolCall(event) {
+            recorder.bumpToolCall();
+            recorder.record({ type: 'tool_call', ...base(event), toolCallId: event.toolCallId, tool: event.toolName });
+            return CONTINUE;
+        },
+        onToolResult(event) {
+            if (!event.ok)
+                recorder.bumpToolFailure();
+            const line = { type: 'tool_result', ...base(event), toolCallId: event.toolCallId, tool: event.toolName, ok: event.ok };
+            recorder.record(line);
+            recorder.recordAgent(event.identity.agentId, line);
+            return CONTINUE;
+        },
+        onTurnEnd(event) {
+            recorder.bumpTurn();
+            recorder.record({ type: 'turn_end', ...base(event) });
+            return CONTINUE;
+        },
+        onRunEnd(event) {
+            recorder.record({ type: 'run_end', ...base(event), reason: event.reason });
+            recorder.finalize(event.reason === 'completed' ? 'completed' : event.reason === 'cancelled' ? 'cancelled' : 'failed');
+            return CONTINUE;
+        },
+        onCancelled(event) {
+            recorder.record({ type: 'run_cancelled', ...base(event), reason: event.reason });
+            recorder.finalize('cancelled');
+            return CONTINUE;
+        },
+    };
+}
+//# sourceMappingURL=recorderObserver.js.map

package/dist/runtime/recorder/recorderObserver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recorderObserver.js","sourceRoot":"","sources":["../../../src/runtime/recorder/recorderObserver.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAqBjD,SAAS,IAAI,CAAC,KAAsB;IAClC,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;QAC/B,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAqB;IAC1D,OAAO;QACL,UAAU,CAAC,KAAoB;YAC7B,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9D,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,cAAc,CAAC,KAAwB;YACrC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC3D,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,eAAe,CAAC,KAAyB;YACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC5D,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,UAAU,CAAC,KAAoB;YAC7B,QAAQ,CAAC,YAAY,EAAE,CAAC;YACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3G,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,YAAY,CAAC,KAAsB;YACjC,IAAI,CAAC,KAAK,CAAC,EAAE;gBAAE,QAAQ,CAAC,eAAe,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YACvH,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtB,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACnD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,SAAS,CAAC,KAAmB;YAC3B,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,QAAQ,CAAC,KAAkB;YACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3E,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACtH,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,WAAW,CAAC,KAAwB;YAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACjF,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC/B,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/recorder/retention.d.ts

@@ -0,0 +1,15 @@
+export interface RunRetentionOptions {
+    maxAgeDays?: number;
+    maxTotalBytes?: number;
+    now?: () => number;
+}
+export interface RetentionResult {
+    deleted: string[];
+    freedBytes: number;
+    kept: number;
+}
+export declare const DEFAULT_RUN_RETENTION_DAYS = 30;
+export declare const DEFAULT_RUN_RETENTION_MAX_MB = 2048;
+export declare function runRetentionFromEnv(): Required<Pick<RunRetentionOptions, 'maxAgeDays' | 'maxTotalBytes'>>;
+export declare function enforceRunRetention(runsDir: string, options?: RunRetentionOptions): Promise<RetentionResult>;
+//# sourceMappingURL=retention.d.ts.map

package/dist/runtime/recorder/retention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.d.ts","sourceRoot":"","sources":["../../../src/runtime/recorder/retention.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD,wBAAgB,mBAAmB,IAAI,QAAQ,CAAC,IAAI,CAAC,mBAAmB,EAAE,YAAY,GAAG,eAAe,CAAC,CAAC,CAQzG;AAiCD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,eAAe,CAAC,CA6D1B"}

package/dist/runtime/recorder/retention.js

@@ -0,0 +1,105 @@
+/**
+ * Run retention (Frontier PHASE 5, §77): keep `.zelari/runs` bounded.
+ *
+ * - never deletes a run whose manifest is missing `endedAt`/final status
+ *   (active or unknown runs are conservatively kept)
+ * - deletes completed runs older than `maxAgeDays`
+ * - then deletes oldest completed runs until total size fits `maxTotalBytes`
+ *
+ * Env: ZELARI_RUN_RETENTION_DAYS (default 30),
+ *      ZELARI_RUN_RETENTION_MAX_MB (default 2048).
+ */
+import { readdir, readFile, rm, stat } from 'node:fs/promises';
+import { join } from 'node:path';
+export const DEFAULT_RUN_RETENTION_DAYS = 30;
+export const DEFAULT_RUN_RETENTION_MAX_MB = 2048;
+export function runRetentionFromEnv() {
+    const parseDays = Number(process.env.ZELARI_RUN_RETENTION_DAYS);
+    const parseMb = Number(process.env.ZELARI_RUN_RETENTION_MAX_MB);
+    return {
+        maxAgeDays: Number.isFinite(parseDays) && parseDays > 0 ? parseDays : DEFAULT_RUN_RETENTION_DAYS,
+        maxTotalBytes: Number.isFinite(parseMb) && parseMb > 0 ? Math.round(parseMb * 1024 * 1024) : DEFAULT_RUN_RETENTION_MAX_MB * 1024 * 1024,
+    };
+}
+async function dirSize(path) {
+    let total = 0;
+    let entries;
+    try {
+        entries = await readdir(path, { withFileTypes: true });
+    }
+    catch {
+        return 0;
+    }
+    for (const entry of entries) {
+        const child = join(path, entry.name);
+        if (entry.isDirectory())
+            total += await dirSize(child);
+        else {
+            try {
+                total += (await stat(child)).size;
+            }
+            catch {
+                /* vanished mid-walk */
+            }
+        }
+    }
+    return total;
+}
+export async function enforceRunRetention(runsDir, options = {}) {
+    const now = options.now ?? Date.now;
+    const maxAgeDays = options.maxAgeDays ?? DEFAULT_RUN_RETENTION_DAYS;
+    const maxTotalBytes = options.maxTotalBytes ?? DEFAULT_RUN_RETENTION_MAX_MB * 1024 * 1024;
+    const result = { deleted: [], freedBytes: 0, kept: 0 };
+    let entries;
+    try {
+        entries = await readdir(runsDir, { withFileTypes: true });
+    }
+    catch {
+        return result; // no runs dir yet → nothing to do
+    }
+    const infos = [];
+    for (const entry of entries) {
+        if (!entry.isDirectory())
+            continue;
+        const path = join(runsDir, entry.name);
+        let startedAt = 0;
+        let endedAt;
+        let completed = false;
+        try {
+            const manifest = JSON.parse(await readFile(join(path, 'manifest.json'), 'utf8'));
+            startedAt = manifest.startedAt ?? 0;
+            endedAt = manifest.endedAt;
+            // §77: only finalized runs are deletable; 'running' / unknown stay.
+            completed = Boolean(endedAt) && manifest.status !== 'running';
+        }
+        catch {
+            completed = false; // unreadable manifest → conservative keep
+        }
+        infos.push({ name: entry.name, path, startedAt, endedAt, completed, bytes: await dirSize(path) });
+    }
+    const remove = async (info) => {
+        await rm(info.path, { recursive: true, force: true });
+        result.deleted.push(info.name);
+        result.freedBytes += info.bytes;
+    };
+    // Pass 1: age-based eviction (oldest first).
+    const ageCutoffMs = maxAgeDays * 24 * 60 * 60 * 1000;
+    const expired = infos
+        .filter((info) => info.completed && info.startedAt > 0 && now() - info.startedAt > ageCutoffMs)
+        .sort((a, b) => a.startedAt - b.startedAt);
+    for (const info of expired)
+        await remove(info);
+    // Pass 2: size-budget eviction over what is left (oldest completed first).
+    const survivors = infos.filter((info) => !result.deleted.includes(info.name));
+    let totalBytes = survivors.reduce((sum, info) => sum + info.bytes, 0);
+    const byOldest = survivors.filter((info) => info.completed).sort((a, b) => a.startedAt - b.startedAt);
+    for (const info of byOldest) {
+        if (totalBytes <= maxTotalBytes)
+            break;
+        totalBytes -= info.bytes;
+        await remove(info);
+    }
+    result.kept = infos.filter((info) => !result.deleted.includes(info.name)).length;
+    return result;
+}
+//# sourceMappingURL=retention.js.map

package/dist/runtime/recorder/retention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.js","sourceRoot":"","sources":["../../../src/runtime/recorder/retention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAcjC,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD,MAAM,UAAU,mBAAmB;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAChE,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B;QAChG,aAAa,EACX,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,4BAA4B,GAAG,IAAI,GAAG,IAAI;KAC3H,CAAC;AACJ,CAAC;AAWD,KAAK,UAAU,OAAO,CAAC,IAAY;IACjC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAmC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,KAAK,IAAI,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;aAClD,CAAC;YACJ,IAAI,CAAC;gBACH,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAe,EACf,UAA+B,EAAE;IAEjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,0BAA0B,CAAC;IACpE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,4BAA4B,GAAG,IAAI,GAAG,IAAI,CAAC;IAE1F,MAAM,MAAM,GAAoB,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACxE,IAAI,OAAmC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,CAAC,kCAAkC;IACnD,CAAC;IAED,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,OAA2B,CAAC;QAChC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAI9E,CAAC;YACF,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;YACpC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC3B,oEAAoE;YACpE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,KAAK,CAAC,CAAC,0CAA0C;QAC/D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,EAAE,IAAgB,EAAiB,EAAE;QACvD,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC;IAClC,CAAC,CAAC;IAEF,6CAA6C;IAC7C,MAAM,WAAW,GAAG,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrD,MAAM,OAAO,GAAG,KAAK;SAClB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC;SAC9F,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,OAAO;QAAE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAE/C,2EAA2E;IAC3E,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IACtG,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,UAAU,IAAI,aAAa;YAAE,MAAM;QACvC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC;QACzB,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACjF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/session/taskContract.d.ts

@@ -29,9 +29,9 @@ export declare const TaskCriterionSchema: z.ZodObject<{
     required: z.ZodBoolean;
     verificationHint: z.ZodOptional<z.ZodObject<{
         kind: z.ZodEnum<{
+            tool: "tool";
             command: "command";
             manual: "manual";
-            tool: "tool";
             semantic: "semantic";
         }>;
         value: z.ZodOptional<z.ZodString>;
@@ -60,9 +60,9 @@ export declare const TaskContractSchema: z.ZodObject<{
         required: z.ZodBoolean;
         verificationHint: z.ZodOptional<z.ZodObject<{
             kind: z.ZodEnum<{
+                tool: "tool";
                 command: "command";
                 manual: "manual";
-                tool: "tool";
                 semantic: "semantic";
             }>;
             value: z.ZodOptional<z.ZodString>;

package/dist/shared/events.d.ts

@@ -10,7 +10,7 @@
  * @see docs/plans/2026-06-28-zelari-code.md (Task 11.1)
  */
 /** Discriminator for every {@link BrainEvent} variant. */
-export type BrainEventType = 'agent_start' | 'agent_end' | 'message_start' | 'message_end' | 'message_delta' | 'thinking_delta' | 'tool_execution_start' | 'tool_execution_update' | 'tool_execution_end' | 'queue_update' | 'session_compacted' | 'error' | 'member_cost' | 'council_mode' | 'task_update' | 'task_snapshot' | 'context_metrics' | 'kraken_progress' | 'kraken_metrics';
+export type BrainEventType = 'agent_start' | 'agent_end' | 'agent_spawned' | 'agent_status' | 'agent_tool' | 'agent_ended' | 'message_start' | 'message_end' | 'message_delta' | 'thinking_delta' | 'tool_execution_start' | 'tool_execution_update' | 'tool_execution_end' | 'queue_update' | 'session_compacted' | 'error' | 'member_cost' | 'council_mode' | 'task_update' | 'task_snapshot' | 'context_metrics' | 'kraken_progress' | 'kraken_metrics';
 /** Fields shared by every event. */
 export interface BrainEventBase {
     /** Type discriminator. */
@@ -51,6 +51,44 @@ export interface BrainAgentEndEvent extends BrainEventBase {
     memberId?: string;
     memberName?: string;
 }
+/** Role of a Kraken tentacle as spawned via the `task` tool. */
+export type TentacleAgentRole = 'explore' | 'general' | 'verify' | 'fix' | 'planner';
+/** A Kraken tentacle has been spawned by the lead (via the `task` tool). */
+export interface BrainAgentSpawnedEvent extends BrainEventBase {
+    type: 'agent_spawned';
+    agentId: string;
+    role: TentacleAgentRole;
+    title?: string;
+    model?: string;
+    provider?: string;
+    scope?: string[];
+    worktree?: string;
+}
+/** Coarse lifecycle status of a tentacle, for live activity UIs. */
+export interface BrainAgentStatusEvent extends BrainEventBase {
+    type: 'agent_status';
+    agentId: string;
+    status: 'queued' | 'running' | 'waiting' | 'completed' | 'failed' | 'cancelled';
+    message?: string;
+}
+/** A tool execution inside a tentacle (start/end, with duration on end). */
+export interface BrainAgentToolEvent extends BrainEventBase {
+    type: 'agent_tool';
+    agentId: string;
+    toolCallId: string;
+    tool: string;
+    status: 'started' | 'completed' | 'failed';
+    summary?: string;
+    durationMs?: number;
+}
+/** A tentacle finished (ok, error, cancelled or timeout). */
+export interface BrainAgentEndedEvent extends BrainEventBase {
+    type: 'agent_ended';
+    agentId: string;
+    reason: string;
+    ok: boolean;
+    durationMs: number;
+}
 /**
  * An assistant message has begun streaming.
  *
@@ -346,7 +384,7 @@ export interface BrainKrakenMetricsEvent extends BrainEventBase {
     metrics: KrakenMetricsPayload;
 }
 /** Discriminated union of every event the brain can emit. */
-export type BrainEvent = BrainAgentStartEvent | BrainAgentEndEvent | BrainMessageStartEvent | BrainMessageDeltaEvent | BrainMessageEndEvent | BrainThinkingDeltaEvent | BrainToolExecutionStartEvent | BrainToolExecutionUpdateEvent | BrainToolExecutionEndEvent | BrainQueueUpdateEvent | BrainSessionCompactedEvent | BrainErrorEvent | BrainMemberCostEvent | BrainCouncilModeEvent | BrainTaskUpdateEvent | BrainTaskSnapshotEvent | BrainContextMetricsEvent | BrainKrakenProgressEvent | BrainKrakenMetricsEvent;
+export type BrainEvent = BrainAgentStartEvent | BrainAgentEndEvent | BrainAgentSpawnedEvent | BrainAgentStatusEvent | BrainAgentToolEvent | BrainAgentEndedEvent | BrainMessageStartEvent | BrainMessageDeltaEvent | BrainMessageEndEvent | BrainThinkingDeltaEvent | BrainToolExecutionStartEvent | BrainToolExecutionUpdateEvent | BrainToolExecutionEndEvent | BrainQueueUpdateEvent | BrainSessionCompactedEvent | BrainErrorEvent | BrainMemberCostEvent | BrainCouncilModeEvent | BrainTaskUpdateEvent | BrainTaskSnapshotEvent | BrainContextMetricsEvent | BrainKrakenProgressEvent | BrainKrakenMetricsEvent;
 /**
  * Map from a {@link BrainEventType} discriminator to its concrete event type.
  * Lets callers say `BrainEventOf<'agent_start'>` instead of repeating the