@zenalexa/unicli 0.217.0 → 0.218.0

package/dist/engine/session/query.js

@@ -0,0 +1,299 @@
+import { createReadStream } from "node:fs";
+import { readdir, stat } from "node:fs/promises";
+import { createInterface } from "node:readline";
+import { runTracePath, RunStoreError } from "./store.js";
+export async function listRunSummaries(store) {
+    const entries = await readdir(store.rootDir, { withFileTypes: true }).catch(() => []);
+    const summaries = await Promise.all(entries
+        .filter((entry) => entry.isDirectory())
+        .map(async (entry) => await summarizeRunId(store, entry.name)));
+    return summaries
+        .filter((summary) => summary !== null)
+        .sort((a, b) => (b.updated_at ?? "").localeCompare(a.updated_at ?? ""));
+}
+export async function summarizeRunId(store, runId) {
+    let tracePath;
+    try {
+        tracePath = runTracePath(store, runId);
+    }
+    catch (err) {
+        if (err instanceof RunStoreError && err.code === "invalid_run_id") {
+            return null;
+        }
+        throw err;
+    }
+    const traceStat = await stat(tracePath).catch(() => null);
+    if (!traceStat)
+        return null;
+    try {
+        return await summarizeRunTraceFile(tracePath, {
+            runId,
+            updatedAt: traceStat.mtime.toISOString(),
+        });
+    }
+    catch (err) {
+        return {
+            run_id: runId,
+            status: "unreadable",
+            events: 0,
+            evidence_count: 0,
+            evidence_by_type: {},
+            updated_at: traceStat.mtime.toISOString(),
+            error_code: err instanceof RunStoreError ? err.code : "io_error",
+        };
+    }
+}
+export function summarizeRunEvents(events, options = {}) {
+    const scan = {
+        first: events[0],
+        evidenceByType: createEvidenceByTypeCounts(),
+        events: events.length,
+    };
+    for (const event of events) {
+        if (!scan.started && event.name === "run.started") {
+            scan.started = event;
+        }
+        if (event.name === "run.completed" || event.name === "run.failed") {
+            scan.terminal = event;
+        }
+        if (event.name === "permission.runtime_denied") {
+            scan.runtimePermissionDenied = event;
+        }
+        recordEvidence(scan, event);
+    }
+    return summarizeRunEventScan(scan, options);
+}
+async function summarizeRunTraceFile(tracePath, options = {}) {
+    const scan = {
+        evidenceByType: createEvidenceByTypeCounts(),
+        events: 0,
+    };
+    const input = createReadStream(tracePath, { encoding: "utf-8" });
+    const lines = createInterface({
+        input,
+        crlfDelay: Infinity,
+    });
+    let lineNumber = 0;
+    try {
+        for await (const lineText of lines) {
+            lineNumber += 1;
+            if (lineText.trim().length === 0)
+                continue;
+            let event;
+            try {
+                event = JSON.parse(lineText);
+            }
+            catch {
+                throw new RunStoreError("malformed_jsonl", `malformed run trace JSONL at line ${lineNumber}`, tracePath, lineNumber);
+            }
+            scan.events += 1;
+            scan.first ??= event;
+            if (!scan.started && event.name === "run.started") {
+                scan.started = event;
+            }
+            if (event.name === "run.completed" || event.name === "run.failed") {
+                scan.terminal = event;
+            }
+            if (event.name === "permission.runtime_denied") {
+                scan.runtimePermissionDenied = event;
+            }
+            recordEvidence(scan, event);
+        }
+    }
+    catch (err) {
+        if (err instanceof RunStoreError)
+            throw err;
+        const message = err instanceof Error ? err.message : String(err);
+        throw new RunStoreError("io_error", `failed to read run events: ${message}`, tracePath);
+    }
+    finally {
+        lines.close();
+        await closeRunTraceInput(input);
+    }
+    return summarizeRunEventScan(scan, options);
+}
+async function closeRunTraceInput(input) {
+    if (input.closed)
+        return;
+    await new Promise((resolve) => {
+        const done = () => {
+            input.off("close", done);
+            input.off("error", done);
+            resolve();
+        };
+        input.once("close", done);
+        input.once("error", done);
+        if (input.closed) {
+            done();
+            return;
+        }
+        input.destroy();
+    });
+}
+function summarizeRunEventScan(scan, options = {}) {
+    const first = scan.first;
+    const metadata = first?.metadata;
+    const terminal = scan.terminal;
+    const started = scan.started;
+    const lease = metadata?.browser_lease;
+    const runtimeDenied = runtimePermissionDeniedSummary(scan.runtimePermissionDenied);
+    const summary = {
+        run_id: options.runId ?? metadata?.run_id ?? first?.run_id ?? "unknown",
+        command: metadata?.command,
+        status: runStatus(scan.events, terminal),
+        events: scan.events,
+        evidence_count: Object.values(scan.evidenceByType).reduce((sum, count) => sum + count, 0),
+        evidence_by_type: sortedEvidenceByType(scan.evidenceByType),
+        ...(started ? { started_at: started.timestamp } : {}),
+        ...(terminal ? { finished_at: terminal.timestamp } : {}),
+        ...(options.updatedAt ? { updated_at: options.updatedAt } : {}),
+        ...(metadata?.transport_surface
+            ? { transport_surface: metadata.transport_surface }
+            : {}),
+        ...(metadata?.target_surface
+            ? { target_surface: String(metadata.target_surface) }
+            : {}),
+        ...(runtimeDenied ? { runtime_permission_denied: runtimeDenied } : {}),
+        ...browserLeaseSummary(lease),
+    };
+    const durationMs = runDurationMs(summary.started_at, summary.finished_at);
+    return durationMs === undefined
+        ? summary
+        : { ...summary, duration_ms: durationMs };
+}
+function recordEvidence(scan, event) {
+    if (event.name !== "evidence.captured")
+        return;
+    const evidenceType = typeof event.data?.evidence_type === "string"
+        ? event.data.evidence_type
+        : "unknown";
+    scan.evidenceByType[evidenceType] =
+        (scan.evidenceByType[evidenceType] ?? 0) + 1;
+}
+function createEvidenceByTypeCounts() {
+    return Object.create(null);
+}
+function sortedEvidenceByType(evidenceByType) {
+    return Object.fromEntries(Object.entries(evidenceByType).sort(([left], [right]) => left.localeCompare(right)));
+}
+function runtimePermissionDeniedSummary(event) {
+    if (!event)
+        return undefined;
+    const code = stringDataField(event, "code");
+    const action = stringDataField(event, "action");
+    const step = numberDataField(event, "step");
+    const ruleId = stringDataField(event, "rule_id");
+    const resourceBuckets = stringArrayDataField(event, "resource_buckets");
+    const retryable = booleanDataField(event, "retryable");
+    const summary = {};
+    let hasValue = false;
+    if (code) {
+        summary.code = code;
+        hasValue = true;
+    }
+    if (action) {
+        summary.action = action;
+        hasValue = true;
+    }
+    if (step !== undefined) {
+        summary.step = step;
+        hasValue = true;
+    }
+    if (ruleId) {
+        summary.rule_id = ruleId;
+        hasValue = true;
+    }
+    if (resourceBuckets) {
+        summary.resource_buckets = resourceBuckets;
+        hasValue = true;
+    }
+    if (retryable !== undefined) {
+        summary.retryable = retryable;
+        hasValue = true;
+    }
+    return hasValue ? summary : undefined;
+}
+function stringDataField(event, field) {
+    const value = event.data?.[field];
+    return typeof value === "string" ? value : undefined;
+}
+function numberDataField(event, field) {
+    const value = event.data?.[field];
+    return typeof value === "number" && Number.isFinite(value)
+        ? value
+        : undefined;
+}
+function booleanDataField(event, field) {
+    const value = event.data?.[field];
+    return typeof value === "boolean" ? value : undefined;
+}
+function stringArrayDataField(event, field) {
+    const value = event.data?.[field];
+    if (!Array.isArray(value))
+        return undefined;
+    const values = value.filter((entry) => {
+        return typeof entry === "string";
+    });
+    return values.length > 0 ? values : undefined;
+}
+export function projectRunEvents(events, options = {}) {
+    return events.map((event) => {
+        const { internal, secret: _secret, ...publicEvent } = event;
+        if (!options.includeInternal || internal === undefined) {
+            return publicEvent;
+        }
+        return { ...publicEvent, internal };
+    });
+}
+function runStatus(eventCount, terminal) {
+    if (eventCount === 0)
+        return "empty";
+    if (terminal?.name === "run.completed")
+        return "completed";
+    if (terminal?.name === "run.failed")
+        return "failed";
+    return "running";
+}
+function browserLeaseSummary(lease) {
+    if (!lease)
+        return {};
+    return {
+        browser_session_id: lease.browser_session_id,
+        browser_workspace_id: lease.browser_workspace_id,
+        ...(lease.target
+            ? {
+                browser_target_kind: lease.target.kind,
+                ...(lease.target.target_id
+                    ? { browser_target_id: lease.target.target_id }
+                    : {}),
+                ...(typeof lease.target.tab_id === "number"
+                    ? { browser_tab_id: lease.target.tab_id }
+                    : {}),
+                ...(typeof lease.target.window_id === "number"
+                    ? { browser_window_id: lease.target.window_id }
+                    : {}),
+            }
+            : {}),
+        ...(lease.auth
+            ? {
+                browser_auth_state: lease.auth.state,
+                ...(typeof lease.auth.cookie_count === "number"
+                    ? { browser_cookie_count: lease.auth.cookie_count }
+                    : {}),
+            }
+            : {}),
+        lease_owner: lease.lease_owner,
+        lease_scope: lease.scope,
+    };
+}
+function runDurationMs(started, finished) {
+    if (!started || !finished)
+        return undefined;
+    const startMs = Date.parse(started);
+    const finishMs = Date.parse(finished);
+    if (!Number.isFinite(startMs) || !Number.isFinite(finishMs)) {
+        return undefined;
+    }
+    return Math.max(0, finishMs - startMs);
+}
+//# sourceMappingURL=query.js.map

package/dist/engine/session/query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.js","sourceRoot":"","sources":["../../../src/engine/session/query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAmB,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAiB,aAAa,EAAE,MAAM,YAAY,CAAC;AA8CxE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAe;IACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CACzE,GAAG,EAAE,CAAC,EAAE,CACT,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,OAAO;SACJ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;SACtC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CACjE,CAAC;IAEF,OAAO,SAAS;SACb,MAAM,CAAC,CAAC,OAAO,EAAyB,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC;SAC5D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAe,EACf,KAAY;IAEZ,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,IAAI,CAAC;QACH,OAAO,MAAM,qBAAqB,CAAC,SAAS,EAAE;YAC5C,KAAK;YACL,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,CAAC;YACT,cAAc,EAAE,CAAC;YACjB,gBAAgB,EAAE,EAAE;YACpB,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE;YACzC,UAAU,EAAE,GAAG,YAAY,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;SACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAkB,EAClB,UAAiD,EAAE;IAEnD,MAAM,IAAI,GAAiB;QACzB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAChB,cAAc,EAAE,0BAA0B,EAAE;QAC5C,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;YAC/C,IAAI,CAAC,uBAAuB,GAAG,KAAK,CAAC;QACvC,CAAC;QACD,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAWD,KAAK,UAAU,qBAAqB,CAClC,SAAiB,EACjB,UAAiD,EAAE;IAEnD,MAAM,IAAI,GAAiB;QACzB,cAAc,EAAE,0BAA0B,EAAE;QAC5C,MAAM,EAAE,CAAC;KACV,CAAC;IACF,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,KAAK;QACL,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IACH,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YACnC,UAAU,IAAI,CAAC,CAAC;YAChB,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAC3C,IAAI,KAAe,CAAC;YACpB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAa,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,aAAa,CACrB,iBAAiB,EACjB,qCAAqC,UAAU,EAAE,EACjD,SAAS,EACT,UAAU,CACX,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAClD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACvB,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAClE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YACxB,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;gBAC/C,IAAI,CAAC,uBAAuB,GAAG,KAAK,CAAC;YACvC,CAAC;YACD,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa;YAAE,MAAM,GAAG,CAAC;QAC5C,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,aAAa,CACrB,UAAU,EACV,8BAA8B,OAAO,EAAE,EACvC,SAAS,CACV,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,KAAiB;IACjD,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO;IACzB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAkB,EAClB,UAAiD,EAAE;IAEnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,KAAK,GAAG,QAAQ,EAAE,aAAa,CAAC;IACtC,MAAM,aAAa,GAAG,8BAA8B,CAClD,IAAI,CAAC,uBAAuB,CAC7B,CAAC;IACF,MAAM,OAAO,GAAe;QAC1B,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ,EAAE,MAAM,IAAI,KAAK,EAAE,MAAM,IAAI,SAAS;QACvE,OAAO,EAAE,QAAQ,EAAE,OAAO;QAC1B,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;QACxC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CACvD,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,EAC3B,CAAC,CACF;QACD,gBAAgB,EAAE,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC;QAC3D,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,QAAQ,EAAE,iBAAiB;YAC7B,CAAC,CAAC,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE;YACnD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,EAAE,cAAc;YAC1B,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,mBAAmB,CAAC,KAAK,CAAC;KAC9B,CAAC;IACF,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1E,OAAO,UAAU,KAAK,SAAS;QAC7B,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc,CAAC,IAAkB,EAAE,KAAe;IACzD,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO;IAC/C,MAAM,YAAY,GAChB,OAAO,KAAK,CAAC,IAAI,EAAE,aAAa,KAAK,QAAQ;QAC3C,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa;QAC1B,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC;QAC/B,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,0BAA0B;IACjC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2B,CAAC;AACvD,CAAC;AAED,SAAS,oBAAoB,CAC3B,cAAsC;IAEtC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CACtD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAC1B,CACF,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,KAAgB;IAEhB,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,OAAO,GAAsC,EAAE,CAAC;IACtD,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;QACpB,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QACxB,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;QACpB,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC;QACzB,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,CAAC,gBAAgB,GAAG,eAAe,CAAC;QAC3C,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;QAC9B,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,OAAO,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CAAC,KAAe,EAAE,KAAa;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,KAAe,EAAE,KAAa;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAe,EAAE,KAAa;IACtD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAe,EACf,KAAa;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE;QACrD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,MAAkB,EAClB,UAAyC,EAAE;IAE3C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1B,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,GAAG,KAAK,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACvD,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,OAAO,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAoB,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,UAAkB,EAAE,QAAmB;IACxD,IAAI,UAAU,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACrC,IAAI,QAAQ,EAAE,IAAI,KAAK,eAAe;QAAE,OAAO,WAAW,CAAC;IAC3D,IAAI,QAAQ,EAAE,IAAI,KAAK,YAAY;QAAE,OAAO,QAAQ,CAAC;IACrD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAA2B;IACtD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO;QACL,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,GAAG,CAAC,KAAK,CAAC,MAAM;YACd,CAAC,CAAC;gBACE,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;gBACtC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS;oBACxB,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE;oBAC/C,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ;oBACzC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;oBACzC,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ;oBAC5C,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE;oBAC/C,CAAC,CAAC,EAAE,CAAC;aACR;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,IAAI;YACZ,CAAC,CAAC;gBACE,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;gBACpC,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,QAAQ;oBAC7C,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE;oBACnD,CAAC,CAAC,EAAE,CAAC;aACR;YACH,CAAC,CAAC,EAAE,CAAC;QACP,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,KAAK;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAAgB,EAChB,QAAiB;IAEjB,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC;AACzC,CAAC"}

package/dist/engine/session/replay.d.ts

@@ -0,0 +1,35 @@
+import type { BrowserSessionLease } from "../browser/session-lease.js";
+import type { ArgSource } from "../args.js";
+import { type RunSummary } from "./query.js";
+import type { RunEvent, RunId } from "./types.js";
+export interface RunReplayPlan {
+    run_id: RunId;
+    replayable: boolean;
+    reason?: string;
+    command?: string;
+    site?: string;
+    cmd?: string;
+    args_hash?: string;
+    recorded_args_hash?: string;
+    args_hash_matches?: boolean;
+    argument_keys?: string[];
+    permission_profile?: string;
+    approved?: boolean;
+    source?: string;
+    transport_surface?: string;
+    target_surface?: string;
+    browser_lease?: BrowserSessionLease;
+    source_event_sequence?: number;
+    original_summary: RunSummary;
+}
+export interface RunReplayInvocation {
+    site: string;
+    cmd: string;
+    args: Record<string, unknown>;
+    source: ArgSource;
+    permissionProfile?: string;
+    approved?: boolean;
+}
+export declare function extractRunReplayPlan(events: RunEvent[], runId: RunId): RunReplayPlan;
+export declare function extractRunReplayInvocation(events: RunEvent[], runId: RunId): RunReplayInvocation | null;
+//# sourceMappingURL=replay.d.ts.map

package/dist/engine/session/replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.d.ts","sourceRoot":"","sources":["../../../src/engine/session/replay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAoB,MAAM,YAAY,CAAC;AAEpE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,KAAK,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,EAAE,UAAU,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,SAAS,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAuDD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,QAAQ,EAAE,EAClB,KAAK,EAAE,KAAK,GACX,aAAa,CAwFf;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,QAAQ,EAAE,EAClB,KAAK,EAAE,KAAK,GACX,mBAAmB,GAAG,IAAI,CAwB5B"}

package/dist/engine/session/replay.js

@@ -0,0 +1,144 @@
+import { hashRunArgs } from "./args.js";
+import { summarizeRunEvents } from "./query.js";
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function replaySecretFromEvent(event) {
+    if (!isRecord(event.secret))
+        return undefined;
+    const replay = event.secret.replay;
+    if (!isRecord(replay))
+        return undefined;
+    return replay;
+}
+function replaySource(value) {
+    return value === "shell" ||
+        value === "file" ||
+        value === "stdin" ||
+        value === "mixed" ||
+        value === "mcp" ||
+        value === "acp" ||
+        value === "internal"
+        ? value
+        : "internal";
+}
+function metadataFromEvents(events) {
+    return (events.find((event) => event.name === "tool.call.started")?.metadata ??
+        events.find((event) => event.name === "run.started")?.metadata ??
+        events[0]?.metadata);
+}
+function commandFromMetadata(metadata) {
+    if (!metadata)
+        return {};
+    return {
+        command: metadata.command,
+        site: metadata.site,
+        cmd: metadata.cmd,
+    };
+}
+export function extractRunReplayPlan(events, runId) {
+    const originalSummary = summarizeRunEvents(events, { runId });
+    const metadata = metadataFromEvents(events);
+    const base = {
+        run_id: runId,
+        replayable: false,
+        original_summary: originalSummary,
+        ...commandFromMetadata(metadata),
+        ...(metadata?.args_hash ? { args_hash: metadata.args_hash } : {}),
+        ...(metadata?.permission_profile
+            ? { permission_profile: metadata.permission_profile }
+            : {}),
+        ...(metadata?.transport_surface
+            ? { transport_surface: metadata.transport_surface }
+            : {}),
+        ...(metadata?.target_surface
+            ? { target_surface: String(metadata.target_surface) }
+            : {}),
+        ...(metadata?.browser_lease
+            ? { browser_lease: metadata.browser_lease }
+            : {}),
+    };
+    if (events.length === 0) {
+        return { ...base, reason: "run trace has no events" };
+    }
+    if (!metadata) {
+        return { ...base, reason: "run trace has no command metadata" };
+    }
+    const replayEvent = events.find((event) => replaySecretFromEvent(event));
+    if (!replayEvent) {
+        return {
+            ...base,
+            reason: "run trace was recorded before replay payloads were available; rerun with --record to capture exact args",
+        };
+    }
+    const replay = replaySecretFromEvent(replayEvent);
+    if (!replay) {
+        return { ...base, reason: "run trace replay payload is malformed" };
+    }
+    if (typeof replay.site !== "string" || typeof replay.cmd !== "string") {
+        return {
+            ...base,
+            reason: "run trace replay payload is missing site or command",
+            source_event_sequence: replayEvent.sequence,
+        };
+    }
+    if (!isRecord(replay.args)) {
+        return {
+            ...base,
+            reason: "run trace replay payload is missing resolved args",
+            source_event_sequence: replayEvent.sequence,
+        };
+    }
+    const recordedArgsHash = typeof replay.args_hash === "string" ? replay.args_hash : undefined;
+    const computedArgsHash = hashRunArgs(replay.args);
+    const argsHashMatches = recordedArgsHash
+        ? recordedArgsHash === computedArgsHash &&
+            (!metadata.args_hash || metadata.args_hash === computedArgsHash)
+        : !metadata.args_hash || metadata.args_hash === computedArgsHash;
+    return {
+        ...base,
+        replayable: argsHashMatches,
+        ...(argsHashMatches
+            ? {}
+            : {
+                reason: "run trace replay args do not match the recorded args hash",
+            }),
+        command: `${replay.site}.${replay.cmd}`,
+        site: replay.site,
+        cmd: replay.cmd,
+        args_hash: computedArgsHash,
+        ...(recordedArgsHash ? { recorded_args_hash: recordedArgsHash } : {}),
+        args_hash_matches: argsHashMatches,
+        argument_keys: Object.keys(replay.args).sort(),
+        source: typeof replay.source === "string" ? replay.source : undefined,
+        permission_profile: typeof replay.permission_profile === "string"
+            ? replay.permission_profile
+            : metadata.permission_profile,
+        approved: replay.approved === true,
+        source_event_sequence: replayEvent.sequence,
+    };
+}
+export function extractRunReplayInvocation(events, runId) {
+    const plan = extractRunReplayPlan(events, runId);
+    if (!plan.replayable)
+        return null;
+    const replayEvent = events.find((event) => replaySecretFromEvent(event));
+    const replay = replayEvent ? replaySecretFromEvent(replayEvent) : undefined;
+    if (!replay ||
+        typeof replay.site !== "string" ||
+        typeof replay.cmd !== "string" ||
+        !isRecord(replay.args)) {
+        return null;
+    }
+    return {
+        site: replay.site,
+        cmd: replay.cmd,
+        args: replay.args,
+        source: replaySource(replay.source),
+        permissionProfile: typeof replay.permission_profile === "string"
+            ? replay.permission_profile
+            : undefined,
+        approved: replay.approved === true,
+    };
+}
+//# sourceMappingURL=replay.js.map

package/dist/engine/session/replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.js","sourceRoot":"","sources":["../../../src/engine/session/replay.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAmB,MAAM,YAAY,CAAC;AA4CjE,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAe;IAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,KAAK,OAAO;QACtB,KAAK,KAAK,MAAM;QAChB,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,KAAK;QACf,KAAK,KAAK,KAAK;QACf,KAAK,KAAK,UAAU;QACpB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,UAAU,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAkB;IAC5C,OAAO,CACL,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC,EAAE,QAAQ;QACpE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,QAAQ;QAC9D,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CACpB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA2B;IAE3B,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,EAAE,QAAQ,CAAC,GAAG;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAkB,EAClB,KAAY;IAEZ,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAkB;QAC1B,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,KAAK;QACjB,gBAAgB,EAAE,eAAe;QACjC,GAAG,mBAAmB,CAAC,QAAQ,CAAC;QAChC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,QAAQ,EAAE,kBAAkB;YAC9B,CAAC,CAAC,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,EAAE,iBAAiB;YAC7B,CAAC,CAAC,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE;YACnD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,EAAE,cAAc;YAC1B,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,EAAE,aAAa;YACzB,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EACJ,yGAAyG;SAC5G,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACtE,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,qDAAqD;YAC7D,qBAAqB,EAAE,WAAW,CAAC,QAAQ;SAC5C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,mDAAmD;YAC3D,qBAAqB,EAAE,WAAW,CAAC,QAAQ;SAC5C,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GACpB,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,gBAAgB;QACtC,CAAC,CAAC,gBAAgB,KAAK,gBAAgB;YACrC,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,gBAAgB,CAAC;QAClE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,gBAAgB,CAAC;IAEnE,OAAO;QACL,GAAG,IAAI;QACP,UAAU,EAAE,eAAe;QAC3B,GAAG,CAAC,eAAe;YACjB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,MAAM,EAAE,2DAA2D;aACpE,CAAC;QACN,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE;QACvC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,SAAS,EAAE,gBAAgB;QAC3B,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,iBAAiB,EAAE,eAAe;QAClC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;QAC9C,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACrE,kBAAkB,EAChB,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ;YAC3C,CAAC,CAAC,MAAM,CAAC,kBAAkB;YAC3B,CAAC,CAAC,QAAQ,CAAC,kBAAkB;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,IAAI;QAClC,qBAAqB,EAAE,WAAW,CAAC,QAAQ;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAkB,EAClB,KAAY;IAEZ,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IACE,CAAC,MAAM;QACP,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;QAC9B,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EACtB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QACnC,iBAAiB,EACf,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ;YAC3C,CAAC,CAAC,MAAM,CAAC,kBAAkB;YAC3B,CAAC,CAAC,SAAS;QACf,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,IAAI;KACnC,CAAC;AACJ,CAAC"}

package/dist/engine/session/run-loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-loop.d.ts","sourceRoot":"","sources":["../../../src/engine/session/run-loop.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAQvE,OAAO,EAGL,KAAK,QAAQ,EAEd,MAAM,YAAY,CAAC;AACpB,OAAO,EAWL,KAAK,KAAK,EAEX,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AAED,wBAAgB,qBAAqB,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAGhE;AAgKD,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,UAAU,EACf,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,gBAAgB,CAAC,CAyD3B"}
+{"version":3,"file":"run-loop.d.ts","sourceRoot":"","sources":["../../../src/engine/session/run-loop.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AASvE,OAAO,EAGL,KAAK,QAAQ,EAEd,MAAM,YAAY,CAAC;AACpB,OAAO,EAaL,KAAK,KAAK,EAEX,MAAM,aAAa,CAAC;AAIrB,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AAED,wBAAgB,qBAAqB,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAGhE;AAwMD,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,UAAU,EACf,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,gBAAgB,CAAC,CAoE3B"}

package/dist/engine/session/run-loop.js

@@ -1,28 +1,16 @@
-import { createHash } from "node:crypto";
 import { execute } from "../kernel/execute.js";
-import { evaluateOperationPolicy, InvalidPermissionProfileError, resolveOperationAdapterPath, resolveOperationTargetSurface, } from "../operation-policy.js";
+import { InvalidPermissionProfileError, resolveOperationAdapterPath, resolveOperationTargetSurface, } from "../operation-policy.js";
+import { evaluateOperationPolicyWithApprovals } from "../permission-runtime.js";
+import { PermissionRulesConfigError } from "../permission-rules.js";
 import { appendRunEvent, createRunStore, RunStoreError, } from "./store.js";
-import { createPermissionEvaluatedEvent, createEvidenceCapturedEvent, createRunCompletedEvent, createRunEventSequence, createRunFailedEvent, createRunStartedEvent, createToolCallCompletedEvent, createToolCallFailedEvent, createToolCallStartedEvent, } from "./events.js";
+import { createEnvironmentSnapshotEvent, createPermissionEvaluatedEvent, createEvidenceCapturedEvent, createRuntimePermissionDeniedEvent, createRunCompletedEvent, createRunEventSequence, createRunFailedEvent, createRunStartedEvent, createToolCallCompletedEvent, createToolCallFailedEvent, createToolCallStartedEvent, } from "./events.js";
+import { hashRunArgs } from "./args.js";
+import { environmentSnapshotData } from "./environment.js";
 export function isRunRecordingEnabled(enabled) {
     if (enabled !== undefined)
         return enabled;
     return process.env.UNICLI_RECORD_RUN === "1";
 }
-function stableJson(value) {
-    if (Array.isArray(value)) {
-        return `[${value.map(stableJson).join(",")}]`;
-    }
-    if (value && typeof value === "object") {
-        return `{${Object.keys(value)
-            .sort()
-            .map((key) => `${JSON.stringify(key)}:${stableJson(value[key])}`)
-            .join(",")}}`;
-    }
-    return JSON.stringify(value);
-}
-function hashArgs(args) {
-    return `sha256:${createHash("sha256").update(stableJson(args)).digest("hex")}`;
-}
 function rawPermissionProfile(inv) {
     const raw = inv.permissionProfile ?? process.env.UNICLI_PERMISSION_PROFILE;
     return raw && raw.trim().length > 0 ? raw.trim().toLowerCase() : "open";
@@ -43,13 +31,27 @@ function metadataForInvocation(inv, runId) {
         permission_profile: rawPermissionProfile(inv),
         transport_surface: inv.surface,
         target_surface: targetSurface,
-        args_hash: hashArgs(inv.bag.args),
+        args_hash: hashRunArgs(inv.bag.args),
         pipeline_steps: inv.command.pipeline?.length ?? 0,
     };
 }
-function evaluatePermissionForEvent(inv, metadata) {
+function replaySecretForInvocation(inv, metadata) {
+    return {
+        replay: {
+            schema_version: "1",
+            site: inv.adapter.name,
+            cmd: inv.cmdName,
+            args: inv.bag.args,
+            source: inv.bag.source,
+            permission_profile: metadata.permission_profile,
+            approved: inv.approved === true,
+            args_hash: metadata.args_hash,
+        },
+    };
+}
+async function evaluatePermissionForEvent(inv, metadata) {
     try {
-        const policy = evaluateOperationPolicy({
+        const policy = await evaluateOperationPolicyWithApprovals({
             site: inv.adapter.name,
             command: inv.cmdName,
             description: inv.command.description,
@@ -76,6 +78,22 @@ function evaluatePermissionForEvent(inv, metadata) {
                 error: { code: "invalid_input", message: err.message },
             };
         }
+        if (err instanceof PermissionRulesConfigError) {
+            return {
+                profile: metadata.permission_profile,
+                effect: "unknown_write",
+                risk: "high",
+                approval_required: true,
+                approved: false,
+                enforcement: "needs_approval",
+                reason: err.message,
+                error: {
+                    code: err.code,
+                    message: err.message,
+                    suggestion: err.suggestion,
+                },
+            };
+        }
         throw err;
     }
 }
@@ -132,6 +150,20 @@ function evidenceData(result, metadata) {
         has_error: result.error !== undefined,
     };
 }
+function runtimePermissionDeniedEvent(result, metadata, sequence) {
+    const diagnostic = result.diagnostics?.find((entry) => entry.kind === "runtime_permission_denied");
+    if (!diagnostic)
+        return undefined;
+    return createRuntimePermissionDeniedEvent(metadata, sequence, {
+        code: diagnostic.code,
+        adapter_path: metadata.adapter_path,
+        action: diagnostic.action,
+        step: diagnostic.step,
+        ...(diagnostic.rule_id ? { rule_id: diagnostic.rule_id } : {}),
+        resource_buckets: diagnostic.resource_buckets,
+        retryable: diagnostic.retryable,
+    }, diagnostic.resources ? { resources: diagnostic.resources } : undefined);
+}
 export async function executeWithRunRecording(inv, options = {}) {
     if (!isRunRecordingEnabled(options.enabled)) {
         return execute(inv);
@@ -141,12 +173,18 @@ export async function executeWithRunRecording(inv, options = {}) {
     const metadata = metadataForInvocation(inv, runId);
     const sequence = createRunEventSequence();
     const warnings = [];
+    const permissionData = await evaluatePermissionForEvent(inv, metadata);
     await appendAll(store, [
         createRunStartedEvent(metadata, sequence),
-        createToolCallStartedEvent(metadata, sequence),
-        createPermissionEvaluatedEvent(metadata, sequence, evaluatePermissionForEvent(inv, metadata)),
+        createEnvironmentSnapshotEvent(metadata, sequence, environmentSnapshotData(metadata)),
+        {
+            ...createToolCallStartedEvent(metadata, sequence),
+            secret: replaySecretForInvocation(inv, metadata),
+        },
+        createPermissionEvaluatedEvent(metadata, sequence, permissionData),
     ], warnings);
     const result = await execute(inv);
+    const runtimeDenied = runtimePermissionDeniedEvent(result, metadata, sequence);
     const terminalEvents = result.error === undefined
         ? [
             createToolCallCompletedEvent(metadata, sequence, successData(result)),
@@ -158,6 +196,7 @@ export async function executeWithRunRecording(inv, options = {}) {
             createRunCompletedEvent(metadata, sequence, successData(result)),
         ]
         : [
+            ...(runtimeDenied ? [runtimeDenied] : []),
             createToolCallFailedEvent(metadata, sequence, failureData(result, metadata)),
             createEvidenceCapturedEvent(metadata, sequence, {
                 evidence_type: "result-envelope",