agent-bober 0.17.1 → 0.18.0

package/dist/medical/types.d.ts

@@ -0,0 +1,175 @@
+/**
+ * Medical team shared data types (Phase 6, Sprint 1).
+ *
+ * Defines the type surface for the medical-sop pipeline.
+ * No execution logic lives here — real enforcement lands in S2/S3/S6.
+ */
+/** Discriminated union returned by GuardrailSet.evaluate. */
+export type GuardrailVerdict = {
+    kind: "allow";
+} | {
+    kind: "short-circuit";
+    rule: string;
+    cannedResponse: string;
+} | {
+    kind: "refuse";
+    rule: string;
+    reason: string;
+};
+/** Context passed to GuardrailSet.evaluate. Real fields land in S3. */
+export interface GuardrailContext {
+}
+/** Interface for a rule set that guards medical prompts before LLM call. */
+export interface GuardrailSet {
+    evaluate(prompt: string, ctx: GuardrailContext): GuardrailVerdict;
+    readonly rulesetVersion: string;
+}
+/** Literature citation shape — source URL + title for a retrieved MedlinePlus passage (S7). */
+export interface Citation {
+    title: string;
+    url: string;
+    source: "medlineplus";
+}
+/** Shape of the medical engine answer. Real population lands in S2/S6. */
+export interface MedicalAnswer {
+    body: string;
+    abstained: boolean;
+    citations: Citation[];
+    disclaimerFooter: string;
+    shortCircuit: boolean;
+}
+/**
+ * Persisted consent record stored at .bober/medical/consent.json.
+ * All timestamps are injected ISO 8601 strings — never wall-clock reads.
+ */
+export interface ConsentRecord {
+    consentVersion: string;
+    /** ISO 8601; INJECTED parameter — never Date.now(). */
+    acceptedAtIso: string;
+    rulesetVersion: string;
+    disclaimerVersion: string;
+}
+/** Discriminated audit event type. IDs/enums only — no prompt text or health values. */
+export type AuditEvent = "consent" | "short-circuit" | "refuse" | "answer" | "abstain" | "ingest";
+/** Critic gate outcome on the grounded synthesis path. IDs/enums only — NEVER text. Sprint 3. */
+export type CriticVerdict = "approve" | "reject-abstained" | "error-abstained";
+/**
+ * Audit entry appended to .bober/medical/audit-<date>.jsonl.
+ * ONLY IDs/enums allowed — NEVER prompt text or health values.
+ */
+export interface AuditEntry {
+    /** ISO 8601; INJECTED parameter — never Date.now(). */
+    tIso: string;
+    event: AuditEvent;
+    /** Optional ruleset version (populated when a guardrail runs). */
+    rulesetVersion?: string;
+    /** Optional patternset version (populated in S3 by RedFlagDetector). */
+    patternsetVersion?: string;
+    /** Optional rule ID triggering the event (IDs only — never text). */
+    ruleId?: string;
+    /** Critic gate outcome on the grounded path. IDs/enums only — NEVER text. Sprint 3. */
+    criticVerdict?: CriticVerdict;
+}
+/**
+ * A single time-stamped health metric observation.
+ * All timestamps are ISO 8601 INJECTED parameters — the store never reads the clock.
+ * id is derived deterministically from (metric|tStart|source|value) via SHA-256.
+ */
+export interface HealthObservation {
+    /** Deterministic SHA-256 of metric|tStart|source|value; derivable, so optional on input. */
+    id?: string;
+    metric: string;
+    value: number;
+    unit: string;
+    /** ISO 8601; INJECTED parameter — never Date.now(). */
+    tStart: string;
+    tEnd?: string;
+    /** e.g. "apple-health" | "whoop" */
+    source: string;
+}
+/**
+ * A laboratory test result with reference range.
+ * id is optional on input (derived from biomarker|collectedAtIso|value via SHA-256).
+ */
+export interface LabResult {
+    id?: string;
+    biomarker: string;
+    value: number;
+    unit: string;
+    /** ISO 8601; INJECTED parameter — never Date.now(). */
+    collectedAtIso: string;
+    referenceLow?: number;
+    referenceHigh?: number;
+}
+/** A stored baseline value for a metric used to compute delta/trend. */
+export interface Baseline {
+    metric: string;
+    value: number;
+    unit: string;
+}
+/**
+ * Closed whitelist of numeric primitives (ADR-3).
+ * Adding a computation requires extending this union (a code review event), not a model decision.
+ */
+export type NumericPrimitive = "mean" | "min" | "max" | "latest" | "delta" | "slope" | "percentile" | "zscore";
+/**
+ * Result of a NumericsQueryLayer.getMetric() call.
+ * value is null when sampleCount === 0 (empty window), cross-unit refusal, or zscore n<2.
+ * sampleCount === 0 signals upstream abstention.
+ */
+export interface NumericResult {
+    primitive: NumericPrimitive;
+    /** null when sampleCount === 0 OR cross-unit refusal OR zscore n<2 */
+    value: number | null;
+    unit: string;
+    /** 0 => upstream abstention */
+    sampleCount: number;
+}
+/** Time window for querying a metric. */
+export interface MetricWindow {
+    metric: string;
+    fromIso: string;
+    toIso: string;
+    /** Expected unit (used for abstain result labelling when window is empty). */
+    unit?: string;
+}
+/** Trend summary for a lab biomarker series. */
+export interface LabTrend {
+    biomarker: string;
+    sampleCount: number;
+    /** Latest value; null when sampleCount === 0 (abstain). */
+    latestValue: number | null;
+    /** Latest unit; empty string when sampleCount === 0. */
+    latestUnit: string;
+    /** ISO 8601 timestamp of the most recent result; null when sampleCount === 0. */
+    latestCollectedAt: string | null;
+    /** Simple least-squares slope over (t,value); null when sampleCount < 2. */
+    slope: number | null;
+}
+/**
+ * Result returned by IngestionAdapter.ingest / IngestionNormalizer.importFile.
+ * recordsParsed: total numeric <Record> elements seen.
+ * newRows: NEW rows actually inserted (dedup-aware via INSERT OR IGNORE).
+ */
+export interface IngestionResult {
+    recordsParsed: number;
+    newRows: number;
+}
+/**
+ * Async sink that receives bounded observation batches from an adapter.
+ * writeBatch is awaited by the adapter to apply backpressure before the next batch.
+ */
+export interface ObservationSink {
+    writeBatch(obs: HealthObservation[], labs: LabResult[]): Promise<void>;
+}
+/**
+ * Interface for a streaming health data import adapter.
+ * canHandle selects the adapter; ingest streams the file into the sink.
+ * Adding a new adapter (Whoop, CSV, …) only requires a new class — ADR-4 registry.
+ */
+export interface IngestionAdapter {
+    readonly kind: string;
+    canHandle(filePath: string): boolean;
+    ingest(filePath: string, sink: ObservationSink): Promise<IngestionResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/medical/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/medical/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,6DAA6D;AAC7D,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAIrD,uEAAuE;AAEvE,MAAM,WAAW,gBAAgB;CAEhC;AAED,4EAA4E;AAC5E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAAC;IAClE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAID,+FAA+F;AAC/F,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;CACvB;AAID;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAID,wFAAwF;AACxF,MAAM,MAAM,UAAU,GAClB,SAAS,GACT,eAAe,GACf,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,QAAQ,CAAC;AAEb,iGAAiG;AACjG,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,kBAAkB,GAAG,iBAAiB,CAAC;AAE/E;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;IAClB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAID;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,4FAA4F;IAC5F,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wEAAwE;AACxE,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAID;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,KAAK,GACL,KAAK,GACL,QAAQ,GACR,OAAO,GACP,OAAO,GACP,YAAY,GACZ,QAAQ,CAAC;AAEb;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,sEAAsE;IACtE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,yCAAyC;AACzC,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,gDAAgD;AAChD,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,4EAA4E;IAC5E,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAID;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,GAAG,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxE;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC3E"}

package/dist/medical/types.js

@@ -0,0 +1,8 @@
+/**
+ * Medical team shared data types (Phase 6, Sprint 1).
+ *
+ * Defines the type surface for the medical-sop pipeline.
+ * No execution logic lives here — real enforcement lands in S2/S3/S6.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/medical/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/medical/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/medical/whoop/whoop-client.d.ts

@@ -0,0 +1,114 @@
+/**
+ * WhoopClient — the SECOND ESLint-excepted network file (ADR-1, sibling to medline-source.ts).
+ * All WHOOP HTTP access lives here and NOWHERE ELSE under src/medical.
+ *
+ * assertAllowed("device-connection") is called BEFORE any fetch attempt — runtime
+ * defense-in-depth backing the static ESLint boundary (mirrors medline-source.ts).
+ *
+ * bober: single OAuth2 refresh_token grant + v2 paginated GET; add webhook/push support
+ *        only if WHOOP public API exposes a server-push option (currently pull-only, ADR-1).
+ */
+import type { EgressGuard } from "../egress.js";
+import type { WhoopTokenStore } from "./whoop-token.js";
+/** The four WHOOP data collections available via v2 endpoints. */
+export type WhoopCollection = "recovery" | "sleep" | "cycle" | "workout";
+/** ISO-8601 time window for a paginated fetch request. */
+export type SyncWindow = {
+    startIso: string;
+    endIso: string;
+};
+/** A single WHOOP record as normalised for downstream processing. */
+export type WhoopRecord = {
+    id: string;
+    tStartIso: string;
+    tEndIso?: string;
+    metrics: Record<string, number>;
+};
+/** One page of WHOOP records; nextCursor undefined means this is the last page. */
+export type WhoopPage = {
+    records: WhoopRecord[];
+    nextCursor?: string;
+};
+/**
+ * Injectable transport type — extended vs. the MedlineSource FetchLike to add:
+ *   - `init` arg: method, headers, body for POST refresh grant + authorised GET
+ *   - `headers.get(name)`: needed for 429 X-RateLimit-Reset header reading
+ *
+ * Tests pass a duck-typed fake returning fixture data; production defaults to global fetch.
+ */
+export type FetchLike = (url: string, init?: {
+    method?: string;
+    headers?: Record<string, string>;
+    body?: string;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    headers: {
+        get(name: string): string | null;
+    };
+    json(): Promise<unknown>;
+}>;
+/**
+ * Authenticated WHOOP v2 API client.
+ *
+ * This is the SECOND ESLint-excepted network file (ADR-1). All WHOOP HTTP
+ * access — the OAuth2 refresh_token grant and all v2 paginated GETs — lives
+ * HERE and nowhere else under src/medical.
+ *
+ * Design invariants:
+ * - ensureAccessToken and fetchPage BOTH start with assertAllowed("device-connection").
+ *   With the axis off, both methods throw before any fetchImpl call (sc-2-4).
+ * - 401 triggers exactly ONE refresh+retry; a second 401 throws (no infinite loop).
+ * - 429 reads the X-RateLimit-Reset header (seconds), awaits the INJECTED waiter,
+ *   then retries; the waiter is injectable so tests never actually sleep (sc-2-7).
+ * - Timestamps are never derived from Date.now(); nowIso is injected for testability.
+ *
+ * bober: single-process access token cache (in-memory); swap for a shared cache
+ *        (Redis / SQLite) if multi-process token sharing is needed.
+ */
+export declare class WhoopClient {
+    private readonly egress;
+    private readonly tokenStore;
+    private readonly fetchImpl;
+    private readonly waiter;
+    private readonly nowIso;
+    private cached?;
+    constructor(egress: EgressGuard, tokenStore: WhoopTokenStore, fetchImpl?: FetchLike, waiter?: (ms: number) => Promise<void>, nowIso?: () => string);
+    /**
+     * Returns a valid WHOOP access token, refreshing if the cached token is expired.
+     *
+     * Order:
+     * 1. assertAllowed("device-connection") — throws if axis is off (sc-2-4).
+     * 2. If cached and unexpired, return cached access token.
+     * 3. Read refresh token from tokenStore; throw "authorize-first" if absent.
+     * 4. POST refresh_token grant to WHOOP_TOKEN_URL via fetchImpl.
+     * 5. Persist rotated tokens via tokenStore.writeTokens.
+     * 6. Cache and return the new access token.
+     *
+     * On 401/invalid_grant from the token endpoint, throws a clear "re-authorize" error.
+     */
+    ensureAccessToken(): Promise<string>;
+    /** Performs the OAuth2 refresh_token grant and caches the new tokens. */
+    private _doRefresh;
+    /**
+     * Fetch one page of WHOOP v2 data for the given collection and time window.
+     *
+     * Order:
+     * 1. assertAllowed("device-connection") — throws if axis is off (sc-2-4).
+     * 2. ensureAccessToken — gets/refreshes the Bearer token.
+     * 3. GET WHOOP_API_BASE + COLLECTION_PATHS[collection] with query params.
+     * 4. On 401: call ensureAccessToken (force refresh) and retry EXACTLY ONCE.
+     * 5. On 429: read X-RateLimit-Reset header (seconds), await waiter, retry.
+     * 6. Parse JSON into WhoopPage.
+     *
+     * Throws on non-recoverable errors (5xx, second 401, network failure, etc.).
+     *
+     * @param collection - The WHOOP data collection to fetch.
+     * @param window     - The ISO-8601 time window for filtering records.
+     * @param cursor     - Pagination cursor from the previous page's nextCursor.
+     */
+    fetchPage(collection: WhoopCollection, window: SyncWindow, cursor?: string): Promise<WhoopPage>;
+    /** Inner GET with single 401-refresh-retry and single 429-Reset-wait. */
+    private _doFetch;
+}
+//# sourceMappingURL=whoop-client.d.ts.map

package/dist/medical/whoop/whoop-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoop-client.d.ts","sourceRoot":"","sources":["../../../src/medical/whoop/whoop-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAe,MAAM,kBAAkB,CAAC;AAIrE,kEAAkE;AAClE,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AAEzE,0DAA0D;AAC1D,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,qEAAqE;AACrE,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC,CAAC;AAEF,mFAAmF;AACnF,MAAM,MAAM,SAAS,GAAG;IAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IACL,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,KACE,OAAO,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC9C,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1B,CAAC,CAAC;AA8EH;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,WAAW;IAIpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAG3B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAG1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAIvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAdzB,OAAO,CAAC,MAAM,CAAC,CAAgD;gBAG5C,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,eAAe,EAG3B,SAAS,GAAE,SAA8B,EAGzC,MAAM,GAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CACF,EAGlC,MAAM,GAAE,MAAM,MAAuC;IAKxE;;;;;;;;;;;;OAYG;IACG,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC;IAW1C,yEAAyE;YAC3D,UAAU;IAwDxB;;;;;;;;;;;;;;;;OAgBG;IACG,SAAS,CACb,UAAU,EAAE,eAAe,EAC3B,MAAM,EAAE,UAAU,EAClB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,SAAS,CAAC;IAOrB,yEAAyE;YAC3D,QAAQ;CAiDvB"}

package/dist/medical/whoop/whoop-client.js

@@ -0,0 +1,226 @@
+// ── Module constants ─────────────────────────────────────────────────
+const WHOOP_API_BASE = "https://api.prod.whoop.com";
+const WHOOP_TOKEN_URL = "https://api.prod.whoop.com/oauth/oauth2/token";
+/** Maps each WhoopCollection to its WHOOP v2 API path. */
+const COLLECTION_PATHS = {
+    recovery: "/v2/recovery",
+    sleep: "/v2/activity/sleep",
+    cycle: "/v2/cycle",
+    workout: "/v2/activity/workout",
+};
+// ── Response parsers ─────────────────────────────────────────────────
+/**
+ * Parse a WHOOP v2 paginated response body into a WhoopPage.
+ * Returns empty records on any structural mismatch (fail-safe read).
+ */
+function parseWhoopPage(raw) {
+    if (!raw || typeof raw !== "object")
+        return { records: [] };
+    const body = raw;
+    const records = [];
+    const dataArr = body["records"];
+    if (Array.isArray(dataArr)) {
+        for (const item of dataArr) {
+            if (!item || typeof item !== "object")
+                continue;
+            const r = item;
+            const id = typeof r["id"] === "number" ? String(r["id"]) : (typeof r["id"] === "string" ? r["id"] : "");
+            const tStartIso = typeof r["start"] === "string" ? r["start"] : "";
+            const tEndIso = typeof r["end"] === "string" ? r["end"] : undefined;
+            const score = r["score"];
+            const metrics = {};
+            if (score && typeof score === "object") {
+                for (const [k, v] of Object.entries(score)) {
+                    if (typeof v === "number")
+                        metrics[k] = v;
+                }
+            }
+            if (id)
+                records.push({ id, tStartIso, tEndIso, metrics });
+        }
+    }
+    const nextCursor = typeof body["next_token"] === "string" ? body["next_token"] : undefined;
+    return { records, nextCursor };
+}
+/**
+ * Parse a WHOOP OAuth token response body.
+ * Returns null on any structural mismatch.
+ */
+function parseTokenResponse(raw) {
+    if (!raw || typeof raw !== "object")
+        return null;
+    const r = raw;
+    const accessToken = r["access_token"];
+    const refreshToken = r["refresh_token"];
+    const expiresIn = r["expires_in"];
+    if (typeof accessToken !== "string" ||
+        typeof refreshToken !== "string" ||
+        typeof expiresIn !== "number") {
+        return null;
+    }
+    return { accessToken, refreshToken, expiresIn };
+}
+// ── WhoopClient ──────────────────────────────────────────────────────
+/**
+ * Authenticated WHOOP v2 API client.
+ *
+ * This is the SECOND ESLint-excepted network file (ADR-1). All WHOOP HTTP
+ * access — the OAuth2 refresh_token grant and all v2 paginated GETs — lives
+ * HERE and nowhere else under src/medical.
+ *
+ * Design invariants:
+ * - ensureAccessToken and fetchPage BOTH start with assertAllowed("device-connection").
+ *   With the axis off, both methods throw before any fetchImpl call (sc-2-4).
+ * - 401 triggers exactly ONE refresh+retry; a second 401 throws (no infinite loop).
+ * - 429 reads the X-RateLimit-Reset header (seconds), awaits the INJECTED waiter,
+ *   then retries; the waiter is injectable so tests never actually sleep (sc-2-7).
+ * - Timestamps are never derived from Date.now(); nowIso is injected for testability.
+ *
+ * bober: single-process access token cache (in-memory); swap for a shared cache
+ *        (Redis / SQLite) if multi-process token sharing is needed.
+ */
+export class WhoopClient {
+    egress;
+    tokenStore;
+    fetchImpl;
+    waiter;
+    nowIso;
+    cached;
+    constructor(egress, tokenStore, 
+    // bober: global fetch is the default ONLY in this file (ESLint exception);
+    //        tests inject a FetchLike returning fixture data so CI stays offline.
+    fetchImpl = fetch, 
+    // bober: waiter defaults to real setTimeout; tests inject a no-wait recording waiter
+    //        so 429-Reset handling is assertable without sleeping (Pattern 3).
+    waiter = (ms) => new Promise((resolve) => setTimeout(resolve, ms)), 
+    // bober: nowIso is injected for token expiry comparisons; tests pass a fixed string;
+    //        production callers pass new Date().toISOString() — never Date.now() internally.
+    nowIso = () => new Date().toISOString()) {
+        this.egress = egress;
+        this.tokenStore = tokenStore;
+        this.fetchImpl = fetchImpl;
+        this.waiter = waiter;
+        this.nowIso = nowIso;
+    }
+    // ── ensureAccessToken ─────────────────────────────────────────────
+    /**
+     * Returns a valid WHOOP access token, refreshing if the cached token is expired.
+     *
+     * Order:
+     * 1. assertAllowed("device-connection") — throws if axis is off (sc-2-4).
+     * 2. If cached and unexpired, return cached access token.
+     * 3. Read refresh token from tokenStore; throw "authorize-first" if absent.
+     * 4. POST refresh_token grant to WHOOP_TOKEN_URL via fetchImpl.
+     * 5. Persist rotated tokens via tokenStore.writeTokens.
+     * 6. Cache and return the new access token.
+     *
+     * On 401/invalid_grant from the token endpoint, throws a clear "re-authorize" error.
+     */
+    async ensureAccessToken() {
+        this.egress.assertAllowed("device-connection"); // MUST be first (sc-2-4)
+        // Return cached token if still valid
+        if (this.cached && this.cached.expiresAtIso > this.nowIso()) {
+            return this.cached.accessToken;
+        }
+        return this._doRefresh();
+    }
+    /** Performs the OAuth2 refresh_token grant and caches the new tokens. */
+    async _doRefresh() {
+        const refreshToken = await this.tokenStore.readRefreshToken();
+        if (!refreshToken) {
+            throw new Error("WHOOP not yet authorised — run `bober medical whoop authorize` first.");
+        }
+        const { clientId, clientSecret } = this.tokenStore.clientCredentials();
+        // Build form body manually — URLSearchParams is not declared in the ESLint globals config.
+        const body = [
+            `grant_type=refresh_token`,
+            `refresh_token=${encodeURIComponent(refreshToken)}`,
+            `client_id=${encodeURIComponent(clientId)}`,
+            `client_secret=${encodeURIComponent(clientSecret)}`,
+            `scope=offline`,
+        ].join("&");
+        const res = await this.fetchImpl(WHOOP_TOKEN_URL, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body,
+        });
+        if (!res.ok || res.status === 401) {
+            throw new Error("WHOOP token refresh failed (401/invalid_grant) — re-authorize with " +
+                "`bober medical whoop authorize`.");
+        }
+        const raw = await res.json();
+        const parsed = parseTokenResponse(raw);
+        if (!parsed) {
+            throw new Error("WHOOP token endpoint returned an unexpected response shape.");
+        }
+        // Compute expiry ISO from expires_in (seconds); use injected nowIso as baseline
+        const expiresAtMs = new Date(this.nowIso()).getTime() + parsed.expiresIn * 1000;
+        const expiresAtIso = new Date(expiresAtMs).toISOString();
+        const tokens = {
+            accessToken: parsed.accessToken,
+            refreshToken: parsed.refreshToken,
+            expiresAtIso,
+        };
+        await this.tokenStore.writeTokens(tokens);
+        this.cached = { accessToken: parsed.accessToken, expiresAtIso };
+        return parsed.accessToken;
+    }
+    // ── fetchPage ─────────────────────────────────────────────────────
+    /**
+     * Fetch one page of WHOOP v2 data for the given collection and time window.
+     *
+     * Order:
+     * 1. assertAllowed("device-connection") — throws if axis is off (sc-2-4).
+     * 2. ensureAccessToken — gets/refreshes the Bearer token.
+     * 3. GET WHOOP_API_BASE + COLLECTION_PATHS[collection] with query params.
+     * 4. On 401: call ensureAccessToken (force refresh) and retry EXACTLY ONCE.
+     * 5. On 429: read X-RateLimit-Reset header (seconds), await waiter, retry.
+     * 6. Parse JSON into WhoopPage.
+     *
+     * Throws on non-recoverable errors (5xx, second 401, network failure, etc.).
+     *
+     * @param collection - The WHOOP data collection to fetch.
+     * @param window     - The ISO-8601 time window for filtering records.
+     * @param cursor     - Pagination cursor from the previous page's nextCursor.
+     */
+    async fetchPage(collection, window, cursor) {
+        this.egress.assertAllowed("device-connection"); // MUST be first (sc-2-4)
+        const accessToken = await this.ensureAccessToken();
+        return this._doFetch(collection, window, cursor, accessToken, false);
+    }
+    /** Inner GET with single 401-refresh-retry and single 429-Reset-wait. */
+    async _doFetch(collection, window, cursor, accessToken, isRetry) {
+        const path = COLLECTION_PATHS[collection];
+        // Build query string manually — URLSearchParams is not declared in the ESLint globals config.
+        const qs = `start=${encodeURIComponent(window.startIso)}&end=${encodeURIComponent(window.endIso)}` +
+            (cursor !== undefined ? `&nextToken=${encodeURIComponent(cursor)}` : "");
+        const url = `${WHOOP_API_BASE}${path}?${qs}`;
+        const res = await this.fetchImpl(url, {
+            method: "GET",
+            headers: { Authorization: `Bearer ${accessToken}` },
+        });
+        if (res.status === 401) {
+            if (isRetry) {
+                throw new Error("WHOOP returned 401 after token refresh — re-authorize with " +
+                    "`bober medical whoop authorize`.");
+            }
+            // Force a fresh token and retry exactly once
+            this.cached = undefined;
+            const freshToken = await this._doRefresh();
+            return this._doFetch(collection, window, cursor, freshToken, true);
+        }
+        if (res.status === 429) {
+            const resetHeader = res.headers.get("X-RateLimit-Reset");
+            const resetSeconds = resetHeader !== null ? Number(resetHeader) : 60;
+            await this.waiter(resetSeconds * 1000);
+            // Retry after waiting — use same access token (rate limit, not auth failure)
+            return this._doFetch(collection, window, cursor, accessToken, isRetry);
+        }
+        if (!res.ok) {
+            throw new Error(`WHOOP API error: HTTP ${res.status} fetching ${collection}`);
+        }
+        const raw = await res.json();
+        return parseWhoopPage(raw);
+    }
+}
+//# sourceMappingURL=whoop-client.js.map

package/dist/medical/whoop/whoop-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoop-client.js","sourceRoot":"","sources":["../../../src/medical/whoop/whoop-client.ts"],"names":[],"mappings":"AAqDA,wEAAwE;AAExE,MAAM,cAAc,GAAG,4BAA4B,CAAC;AACpD,MAAM,eAAe,GAAG,+CAA+C,CAAC;AAExE,0DAA0D;AAC1D,MAAM,gBAAgB,GAAoC;IACxD,QAAQ,EAAE,cAAc;IACxB,KAAK,EAAE,oBAAoB;IAC3B,KAAK,EAAE,WAAW;IAClB,OAAO,EAAE,sBAAsB;CAChC,CAAC;AAEF,wEAAwE;AAExE;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAE5D,MAAM,IAAI,GAAG,GAA8B,CAAC;IAE5C,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAChD,MAAM,CAAC,GAAG,IAA+B,CAAC;YAC1C,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxG,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;YACzB,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;oBACtE,IAAI,OAAO,CAAC,KAAK,QAAQ;wBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;YACD,IAAI,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GACd,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1E,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAY;IAKtC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,WAAW,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC;IAClC,IACE,OAAO,WAAW,KAAK,QAAQ;QAC/B,OAAO,YAAY,KAAK,QAAQ;QAChC,OAAO,SAAS,KAAK,QAAQ,EAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AAClD,CAAC;AAED,wEAAwE;AAExE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,WAAW;IAIH;IACA;IAGA;IAGA;IAIA;IAdX,MAAM,CAAiD;IAE/D,YACmB,MAAmB,EACnB,UAA2B;IAC5C,2EAA2E;IAC3E,8EAA8E;IAC7D,YAAuB,KAAkB;IAC1D,qFAAqF;IACrF,2EAA2E;IAC1D,SAAwC,CAAC,EAAE,EAAE,EAAE,CAC9D,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACnD,qFAAqF;IACrF,yFAAyF;IACxE,SAAuB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAXrD,WAAM,GAAN,MAAM,CAAa;QACnB,eAAU,GAAV,UAAU,CAAiB;QAG3B,cAAS,GAAT,SAAS,CAAgC;QAGzC,WAAM,GAAN,MAAM,CAC4B;QAGlC,WAAM,GAAN,MAAM,CAA+C;IACrE,CAAC;IAEJ,qEAAqE;IAErE;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,iBAAiB;QACrB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC,yBAAyB;QAEzE,qCAAqC;QACrC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QACjC,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAED,yEAAyE;IACjE,KAAK,CAAC,UAAU;QACtB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;QAC9D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;QAEvE,2FAA2F;QAC3F,MAAM,IAAI,GAAG;YACX,0BAA0B;YAC1B,iBAAiB,kBAAkB,CAAC,YAAY,CAAC,EAAE;YACnD,aAAa,kBAAkB,CAAC,QAAQ,CAAC,EAAE;YAC3C,iBAAiB,kBAAkB,CAAC,YAAY,CAAC,EAAE;YACnD,eAAe;SAChB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,qEAAqE;gBACnE,kCAAkC,CACrC,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QAED,gFAAgF;QAChF,MAAM,WAAW,GACf,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QAC9D,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QAEzD,MAAM,MAAM,GAAgB;YAC1B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,YAAY;SACb,CAAC;QACF,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,CAAC;QAChE,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,qEAAqE;IAErE;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,SAAS,CACb,UAA2B,EAC3B,MAAkB,EAClB,MAAe;QAEf,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC,yBAAyB;QAEzE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,yEAAyE;IACjE,KAAK,CAAC,QAAQ,CACpB,UAA2B,EAC3B,MAAkB,EAClB,MAA0B,EAC1B,WAAmB,EACnB,OAAgB;QAEhB,MAAM,IAAI,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC1C,8FAA8F;QAC9F,MAAM,EAAE,GACN,SAAS,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YACvF,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,GAAG,cAAc,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;QAE7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;SACpD,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,6DAA6D;oBAC3D,kCAAkC,CACrC,CAAC;YACJ,CAAC;YACD,6CAA6C;YAC7C,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACzD,MAAM,YAAY,GAAG,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;YACvC,6EAA6E;YAC7E,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,yBAAyB,GAAG,CAAC,MAAM,aAAa,UAAU,EAAE,CAC7D,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;CACF"}

package/dist/medical/whoop/whoop-sync.d.ts

@@ -0,0 +1,25 @@
+/** WhoopSyncAdapter — network sync of WHOOP v2 records into the ObservationSink (ADR-1). NO network import. */
+import type { ObservationSink, IngestionResult } from "../types.js";
+import type { WhoopClient, SyncWindow } from "./whoop-client.js";
+/**
+ * Adapts WhoopClient pagination into the ObservationSink interface (ADR-1).
+ *
+ * NOT an IngestionAdapter — its entry point is sync(window, sink), not ingest(filePath, sink).
+ * All HTTP is confined to WhoopClient (injected dependency).
+ *
+ * On any fetchPage throw, the error PROPAGATES (fail-closed).
+ * Prior batches are already committed via per-batch better-sqlite3 transactions (ADR-4).
+ * A failed sync is recovered by re-running — idempotent dedup via INSERT OR IGNORE.
+ */
+export declare class WhoopSyncAdapter {
+    private readonly client;
+    readonly source = "whoop";
+    constructor(client: WhoopClient);
+    /**
+     * Sync all four WHOOP collections over the given window into the sink.
+     * Pages each collection following nextCursor until the last page (undefined cursor).
+     * Returns IngestionResult { recordsParsed, newRows }.
+     */
+    sync(window: SyncWindow, sink: ObservationSink): Promise<IngestionResult>;
+}
+//# sourceMappingURL=whoop-sync.d.ts.map

package/dist/medical/whoop/whoop-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoop-sync.d.ts","sourceRoot":"","sources":["../../../src/medical/whoop/whoop-sync.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAC/G,OAAO,KAAK,EAAE,eAAe,EAAqB,eAAe,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,KAAK,EAAE,WAAW,EAAgC,UAAU,EAAE,MAAM,mBAAmB,CAAC;AA6D/F;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IAGf,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,QAAQ,CAAC,MAAM,WAAW;gBAEG,MAAM,EAAE,WAAW;IAEhD;;;;OAIG;IACG,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;CAqBhF"}