agy-worker-mcp 0.3.1

package/dist/events/detect.js

@@ -0,0 +1,183 @@
+import { ENVIRONMENT_BLOCK_SIGNATURES, GATE_DENIAL_MARKER, HOOK_DENIAL_PREFIX, } from '../contract/types.js';
+/**
+ * Detect the two ways a job gets stuck (see docs/permissions.md).
+ *
+ * Both are invisible in the obvious places: agy exits 0 and reports
+ * `status: "SUCCESS"` for a hook denial *and* for a sandboxed network block
+ * (see docs/permissions.md). Skipping this module means reporting failed work as success.
+ */
+function commandOf(toolInfo) {
+    const cmd = toolInfo?.parameters?.CommandLine;
+    return typeof cmd === 'string' ? cmd : null;
+}
+/**
+ * Class 1 — a structured refusal.
+ *
+ * Signal: `step_type === 'tool' && state === 'ERROR'`, message in
+ * `tool_info.error.message`. stderr stays empty and the exit code stays 0, so
+ * this event is the only trace.
+ */
+export function detectClass1(step) {
+    const su = step.step_update;
+    if (su.step_type !== 'tool' || su.state !== 'ERROR')
+        return null;
+    const message = su.tool_info?.error?.message ?? '';
+    const tool = su.tool_name ?? su.tool_info?.name ?? 'unknown';
+    const command = commandOf(su.tool_info);
+    const required_rule = extractRequiredRule(message);
+    const gatePayload = parseGateDenial(message);
+    let source = 'unknown';
+    if (message.startsWith(HOOK_DENIAL_PREFIX)) {
+        source = 'gate';
+    }
+    else if (su.tool_info?.error !== undefined) {
+        source = 'agy';
+    }
+    return {
+        class: 1,
+        tool,
+        command,
+        required_rule,
+        policy: gatePayload?.policy ?? null,
+        source,
+        message,
+        step_idx: su.step_index ?? null,
+    };
+}
+/** The only tool agy's OS sandbox wraps; every other tool runs outside it. */
+const SANDBOXED_TOOL = 'run_command';
+/**
+ * Class 2 — a silent environment block.
+ *
+ * Signal: an ordinary successful `run_command` step whose `tool_info.output`
+ * matches one of `ENVIRONMENT_BLOCK_SIGNATURES`. There is no error event at all.
+ * This is the more dangerous class: an hour-long job can fail to install
+ * anything and still return SUCCESS.
+ *
+ * Only `run_command` is scanned: the sandbox wraps the shell and nothing else,
+ * and the output of `grep_search`/`view_file` over a source tree that merely
+ * *contains* the words "Operation not permitted" is not a block (measured
+ * 2026-09-03: a job grepping this very repository produced three false
+ * blockers that way).
+ */
+export function detectClass2(step) {
+    const su = step.step_update;
+    if (su.step_type !== 'tool')
+        return null;
+    const tool = su.tool_name ?? su.tool_info?.name ?? 'unknown';
+    if (tool !== SANDBOXED_TOOL)
+        return null;
+    const output = su.tool_info?.output;
+    if (typeof output !== 'string' || output.length === 0)
+        return null;
+    const signature = matchEnvironmentSignature(output);
+    if (signature === null)
+        return null;
+    const command = commandOf(su.tool_info);
+    // The match is case-insensitive, so locate the excerpt the same way.
+    const idx = output.toLowerCase().indexOf(signature.toLowerCase());
+    const CONTEXT = 60;
+    const start = Math.max(0, idx - CONTEXT);
+    const end = Math.min(output.length, idx + signature.length + CONTEXT);
+    const excerpt = output.slice(start, end).replace(/\s+/g, ' ').trim();
+    return {
+        class: 2,
+        tool,
+        command,
+        signature,
+        excerpt,
+        step_idx: su.step_index ?? null,
+    };
+}
+/** Run both detectors over a whole event stream. */
+export function scanDenials(events) {
+    const permission_denials = [];
+    const environment_blocks = [];
+    for (const e of events) {
+        if (e.event !== 'step_update')
+            continue;
+        const c1 = detectClass1(e);
+        if (c1 !== null)
+            permission_denials.push(c1);
+        const c2 = detectClass2(e);
+        if (c2 !== null)
+            environment_blocks.push(c2);
+    }
+    return { permission_denials, environment_blocks };
+}
+/**
+ * Pull the machine payload our gate embedded after `GATE_DENIAL_MARKER`.
+ * Null when the refusal did not come from us.
+ *
+ * Format authored by the gate: `<guidance> [agy-worker-denial:{"...json..."}]`.
+ * The payload runs from right after the marker up to the closing `]` that wraps
+ * it, so a trailing `]` (if present) is stripped before parsing.
+ */
+export function parseGateDenial(message) {
+    const markerIdx = message.indexOf(GATE_DENIAL_MARKER);
+    if (markerIdx === -1)
+        return null;
+    let rest = message.slice(markerIdx + GATE_DENIAL_MARKER.length).trim();
+    if (rest.endsWith(']'))
+        rest = rest.slice(0, -1).trim();
+    try {
+        const payload = JSON.parse(rest);
+        if (typeof payload === 'object' && payload !== null) {
+            return payload;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+// Greedy so a rule that itself contains parens — e.g. "command(echo x)" — keeps
+// its own closing paren; only the outermost "(required rule: ...)" wrapper ends
+// at the final ')' in the message.
+const REQUIRED_RULE_PROSE = /\(required rule:\s*(.+)\)\s*$/;
+/**
+ * Best-effort `required_rule` from a denial message.
+ *
+ * Prefers the embedded payload; falls back to the `(required rule: ...)` prose
+ * form that appears in the measured transcript. The caller pastes the result
+ * straight into the next `agy_start`'s `permissions.allow`, which is the whole
+ * recovery loop (see docs/permissions.md).
+ */
+export function extractRequiredRule(message) {
+    const gate = parseGateDenial(message);
+    if (gate !== null && typeof gate.required_rule === 'string' && gate.required_rule.length > 0) {
+        return gate.required_rule;
+    }
+    const match = message.match(REQUIRED_RULE_PROSE);
+    const rule = match?.[1];
+    return rule !== undefined ? rule.trim() : null;
+}
+/**
+ * Which signature, if any, a tool output contains. Case-insensitive: the same
+ * seatbelt refusal surfaces as `Operation not permitted` from coreutils
+ * (`mkdir: build: Operation not permitted`) and as `operation not permitted`
+ * from zsh's own redirection error (`zsh:1: operation not permitted: note.txt`,
+ * measured on agy 1.1.24), and as `sh: out.txt: Operation not permitted` — all
+ * single-line or final-line. The canonical (capitalised) signature is returned.
+ *
+ * 0.3.0 PR5: Only inspects the last 5 non-empty lines of the output.
+ * A real sandbox/network refusal is the failing command's final message;
+ * a signature buried mid-output inside a test report is not.
+ */
+export function matchEnvironmentSignature(output) {
+    const lines = output.split('\n');
+    const nonEmpty = [];
+    for (let i = lines.length - 1; i >= 0 && nonEmpty.length < 5; i--) {
+        const line = lines[i];
+        if (line !== undefined && line.trim().length > 0) {
+            nonEmpty.push(line);
+        }
+    }
+    const tail = nonEmpty.reverse().join('\n').toLowerCase();
+    for (const sig of ENVIRONMENT_BLOCK_SIGNATURES) {
+        if (tail.includes(sig.toLowerCase()))
+            return sig;
+    }
+    return null;
+}
+//# sourceMappingURL=detect.js.map

package/dist/events/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../src/events/detect.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,sBAAsB,CAAA;AAW7B;;;;;;GAMG;AAEH,SAAS,SAAS,CAAC,QAAiC;IAClD,MAAM,GAAG,GAAG,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAA;IAC7C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAwB;IACnD,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAA;IAC3B,IAAI,EAAE,CAAC,SAAS,KAAK,MAAM,IAAI,EAAE,CAAC,KAAK,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IAEhE,MAAM,OAAO,GAAG,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,IAAI,EAAE,CAAA;IAClD,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,IAAI,SAAS,CAAA;IAC5D,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;IACvC,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAClD,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IAE5C,IAAI,MAAM,GAA2B,SAAS,CAAA;IAC9C,IAAI,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,MAAM,CAAA;IACjB,CAAC;SAAM,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,GAAG,KAAK,CAAA;IAChB,CAAC;IAED,OAAO;QACL,KAAK,EAAE,CAAC;QACR,IAAI;QACJ,OAAO;QACP,aAAa;QACb,MAAM,EAAE,WAAW,EAAE,MAAM,IAAI,IAAI;QACnC,MAAM;QACN,OAAO;QACP,QAAQ,EAAE,EAAE,CAAC,UAAU,IAAI,IAAI;KAChC,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,cAAc,GAAG,aAAa,CAAA;AAEpC;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,IAAwB;IACnD,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAA;IAC3B,IAAI,EAAE,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IACxC,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,IAAI,SAAS,CAAA;IAC5D,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,IAAI,CAAA;IAExC,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,CAAA;IACnC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAElE,MAAM,SAAS,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAA;IACnD,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAEnC,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;IAEvC,qEAAqE;IACrE,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAA;IACjE,MAAM,OAAO,GAAG,EAAE,CAAA;IAClB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,CAAA;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,GAAG,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IAEpE,OAAO;QACL,KAAK,EAAE,CAAC;QACR,IAAI;QACJ,OAAO;QACP,SAAS;QACT,OAAO;QACP,QAAQ,EAAE,EAAE,CAAC,UAAU,IAAI,IAAI;KAChC,CAAA;AACH,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,WAAW,CAAC,MAAkB;IAC5C,MAAM,kBAAkB,GAAmB,EAAE,CAAA;IAC7C,MAAM,kBAAkB,GAAmB,EAAE,CAAA;IAE7C,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,KAAK,KAAK,aAAa;YAAE,SAAQ;QACvC,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;QAC1B,IAAI,EAAE,KAAK,IAAI;YAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC5C,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;QAC1B,IAAI,EAAE,KAAK,IAAI;YAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAA;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACrD,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAEjC,IAAI,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;IACtE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAEvD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAA;QAC3C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO,OAA4B,CAAA;QACrC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,mCAAmC;AACnC,MAAM,mBAAmB,GAAG,+BAA+B,CAAA;AAE3D;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACrC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7F,OAAO,IAAI,CAAC,aAAa,CAAA;IAC3B,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;IAChD,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAA;IACvB,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAChD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;IACxD,KAAK,MAAM,GAAG,IAAI,4BAA4B,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,GAAG,CAAA;IAClD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/events/normalize.d.ts

@@ -0,0 +1,30 @@
+import type { AgyEvent, NormalizedEvent } from '../contract/types.js';
+import type { ParsedLine } from './parse.js';
+/**
+ * Turn raw `step_update` traffic into a short human-readable trail.
+ *
+ * Keep: phase transitions, command start/end, errors and warnings, check
+ * PASS/FAIL, artifact creation, and the tail of the final response.
+ * Drop: repeated token deltas, blank text, and duplicates of the previous line.
+ *
+ * Normalization happens on read, in memory. Nothing is persisted — the raw
+ * NDJSON stays the only stored form.
+ */
+export interface NormalizeOptions {
+    /** Truncate each line to this many characters. */
+    maxLineChars?: number;
+    /** Collapse consecutive `agent_message` lines into one. */
+    collapseDeltas?: boolean;
+}
+/** Null when the event carries nothing worth a line. */
+export declare function normalizeEvent(event: AgyEvent, opts?: NormalizeOptions): NormalizedEvent | null;
+/** Batch form; also surfaces malformed lines as `kind: 'raw'`, severity `warning`. */
+export declare function normalizeParsed(parsed: ParsedLine[], opts?: NormalizeOptions): NormalizedEvent[];
+/** Render one normalized event as a single display line. */
+export declare function formatNormalized(e: NormalizedEvent): string;
+/**
+ * The last `maxLines` display lines, obeying a byte budget.
+ * This is what `agy_wait` returns as `log_tail`.
+ */
+export declare function tailSummary(events: NormalizedEvent[], maxLines: number, maxBytes?: number): string[];
+//# sourceMappingURL=normalize.d.ts.map

package/dist/events/normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../src/events/normalize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAe,eAAe,EAAkB,MAAM,sBAAsB,CAAA;AAElG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,2DAA2D;IAC3D,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAuCD,wDAAwD;AACxD,wBAAgB,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,eAAe,GAAG,IAAI,CA0G/F;AAED,sFAAsF;AACtF,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,eAAe,EAAE,CAgChG;AAED,4DAA4D;AAC5D,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,eAAe,GAAG,MAAM,CAI3D;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAYpG"}

package/dist/events/normalize.js

@@ -0,0 +1,158 @@
+import { matchEnvironmentSignature } from './detect.js';
+const DEFAULT_MAX_CHARS = 200;
+function collapseWhitespace(text) {
+    return text.replace(/\s+/g, ' ').trim();
+}
+/** Head truncation: keep the start, ellipsis at the end. */
+function truncateHead(text, maxChars) {
+    const collapsed = collapseWhitespace(text);
+    if (collapsed.length <= maxChars)
+        return collapsed;
+    if (maxChars <= 1)
+        return collapsed.slice(0, maxChars);
+    return collapsed.slice(0, maxChars - 1) + '…';
+}
+/** Tail truncation: keep the end (the part that matters for a final response). */
+function truncateTail(text, maxChars) {
+    const collapsed = collapseWhitespace(text);
+    if (collapsed.length <= maxChars)
+        return collapsed;
+    if (maxChars <= 1)
+        return collapsed.slice(collapsed.length - maxChars);
+    return '…' + collapsed.slice(collapsed.length - (maxChars - 1));
+}
+function commandOf(toolInfo) {
+    const cmd = toolInfo?.parameters?.CommandLine;
+    return typeof cmd === 'string' ? cmd : undefined;
+}
+function make(kind, severity, stepIdx, text, extra) {
+    return { kind, severity, step_idx: stepIdx, text, ...extra };
+}
+/** Null when the event carries nothing worth a line. */
+export function normalizeEvent(event, opts) {
+    const maxChars = opts?.maxLineChars ?? DEFAULT_MAX_CHARS;
+    if (event.event === 'init') {
+        const i = event.init;
+        return make('session_start', 'info', null, truncateHead(`session started model=${i.model} cwd=${i.cwd}`, maxChars));
+    }
+    if (event.event === 'result') {
+        const r = event.result;
+        if (r.status === 'SUCCESS') {
+            return make('final_response', 'info', null, truncateTail(r.response ?? '', maxChars), {
+                duration_seconds: r.duration_seconds,
+            });
+        }
+        const text = r.error ?? r.response ?? 'turn ended with an error';
+        return make('final_response', 'error', null, truncateTail(text, maxChars), {
+            duration_seconds: r.duration_seconds,
+        });
+    }
+    // step_update
+    const su = event.step_update;
+    const stepIdx = su.step_index ?? null;
+    const command = commandOf(su.tool_info);
+    if (su.step_type === 'tool') {
+        if (su.state === 'ERROR') {
+            const msg = su.tool_info?.error?.message ?? 'tool call failed';
+            return make('tool_error', 'error', stepIdx, truncateHead(`${su.tool_name ?? 'tool'} failed: ${msg}`, maxChars), { tool: su.tool_name, command, duration_seconds: su.duration_seconds });
+        }
+        if (su.state === 'ACTIVE') {
+            return make('command_start', 'info', stepIdx, truncateHead(`${su.tool_name ?? 'tool'} started${command ? `: ${command}` : ''}`, maxChars), { tool: su.tool_name, command });
+        }
+        if (su.state === 'DONE') {
+            const output = su.tool_info?.output;
+            // Same scope as `detectClass2`: only the shell runs inside the sandbox.
+            const sig = su.tool_name === 'run_command' && typeof output === 'string' ? matchEnvironmentSignature(output) : null;
+            if (sig !== null) {
+                return make('environment_block', 'warning', stepIdx, truncateHead(`${su.tool_name ?? 'tool'} output looks blocked by the environment (${sig})`, maxChars), { tool: su.tool_name, command, duration_seconds: su.duration_seconds });
+            }
+            return make('command_end', 'info', stepIdx, truncateHead(`${su.tool_name ?? 'tool'} finished${command ? `: ${command}` : ''}`, maxChars), { tool: su.tool_name, command, duration_seconds: su.duration_seconds });
+        }
+        return null;
+    }
+    if (su.step_type === 'user_input') {
+        if (su.state === 'DONE') {
+            return make('phase', 'info', stepIdx, 'turn started');
+        }
+        return null;
+    }
+    if (su.step_type === 'system_message') {
+        const text = su.text_delta;
+        if (!text || text.trim() === '')
+            return null;
+        return make('system', 'info', stepIdx, truncateHead(text, maxChars));
+    }
+    if (su.step_type === 'agent_response') {
+        if (su.state === 'ERROR') {
+            return make('tool_error', 'error', stepIdx, 'agent response ended in error');
+        }
+        // Streamed token deltas are dropped on purpose — the tail of the final
+        // response is already captured once, from the `result` event.
+        return null;
+    }
+    // Unrecognized step_type: still surface an error state, drop everything else.
+    if (su.state === 'ERROR') {
+        return make('tool_error', 'error', stepIdx, `step ${stepIdx ?? '?'} ended in error`);
+    }
+    return null;
+}
+/** Batch form; also surfaces malformed lines as `kind: 'raw'`, severity `warning`. */
+export function normalizeParsed(parsed, opts) {
+    const maxChars = opts?.maxLineChars ?? DEFAULT_MAX_CHARS;
+    const out = [];
+    let prevKey = null;
+    for (const p of parsed) {
+        let ne;
+        if (!p.ok) {
+            ne = make('raw', 'warning', null, truncateHead(`malformed line: ${p.error}`, maxChars), {
+                offset: p.offset,
+            });
+        }
+        else if ('unknown' in p) {
+            ne = make('raw', 'info', null, truncateHead(`unknown event: ${p.raw}`, maxChars), {
+                offset: p.offset,
+            });
+        }
+        else {
+            ne = normalizeEvent(p.event, opts);
+            if (ne !== null && p.offset !== undefined)
+                ne = { ...ne, offset: p.offset };
+        }
+        if (ne === null)
+            continue;
+        if (ne.text.trim() === '')
+            continue;
+        const key = `${ne.kind}|${ne.step_idx}|${ne.text}`;
+        if (key === prevKey)
+            continue; // duplicate of the immediately preceding line
+        out.push(ne);
+        prevKey = key;
+    }
+    return out;
+}
+/** Render one normalized event as a single display line. */
+export function formatNormalized(e) {
+    const prefix = e.severity === 'error' ? '[ERROR]' : e.severity === 'warning' ? '[WARN]' : '';
+    const stepPart = e.step_idx !== null ? `#${e.step_idx}` : '';
+    return [prefix, stepPart, e.text].filter((s) => s.length > 0).join(' ');
+}
+/**
+ * The last `maxLines` display lines, obeying a byte budget.
+ * This is what `agy_wait` returns as `log_tail`.
+ */
+export function tailSummary(events, maxLines, maxBytes) {
+    if (maxLines <= 0)
+        return [];
+    const lines = events.slice(-maxLines).map(formatNormalized);
+    if (maxBytes === undefined)
+        return lines;
+    let total = lines.reduce((acc, l) => acc + Buffer.byteLength(l, 'utf8') + 1, 0);
+    while (lines.length > 0 && total > maxBytes) {
+        const removed = lines.shift();
+        if (removed === undefined)
+            break;
+        total -= Buffer.byteLength(removed, 'utf8') + 1;
+    }
+    return lines;
+}
+//# sourceMappingURL=normalize.js.map

package/dist/events/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../../src/events/normalize.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAA;AAoBvD,MAAM,iBAAiB,GAAG,GAAG,CAAA;AAE7B,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;AACzC,CAAC;AAED,4DAA4D;AAC5D,SAAS,YAAY,CAAC,IAAY,EAAE,QAAgB;IAClD,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;IAC1C,IAAI,SAAS,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,SAAS,CAAA;IAClD,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IACtD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,GAAG,GAAG,CAAA;AAC/C,CAAC;AAED,kFAAkF;AAClF,SAAS,YAAY,CAAC,IAAY,EAAE,QAAgB;IAClD,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;IAC1C,IAAI,SAAS,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,SAAS,CAAA;IAClD,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAA;IACtE,OAAO,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,QAAiC;IAClD,MAAM,GAAG,GAAG,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAA;IAC7C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AAClD,CAAC;AAED,SAAS,IAAI,CACX,IAAoB,EACpB,QAAqC,EACrC,OAAsB,EACtB,IAAY,EACZ,KAAgC;IAEhC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,CAAA;AAC9D,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,cAAc,CAAC,KAAe,EAAE,IAAuB;IACrE,MAAM,QAAQ,GAAG,IAAI,EAAE,YAAY,IAAI,iBAAiB,CAAA;IAExD,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAA;QACpB,OAAO,IAAI,CACT,eAAe,EACf,MAAM,EACN,IAAI,EACJ,YAAY,CAAC,yBAAyB,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CACxE,CAAA;IACH,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAA;QACtB,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACpF,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;aACrC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,IAAI,0BAA0B,CAAA;QAChE,OAAO,IAAI,CAAC,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE;YACzE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;SACrC,CAAC,CAAA;IACJ,CAAC;IAED,cAAc;IACd,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAA;IAC5B,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,IAAI,IAAI,CAAA;IACrC,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;IAEvC,IAAI,EAAE,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC5B,IAAI,EAAE,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,IAAI,kBAAkB,CAAA;YAC9D,OAAO,IAAI,CACT,YAAY,EACZ,OAAO,EACP,OAAO,EACP,YAAY,CAAC,GAAG,EAAE,CAAC,SAAS,IAAI,MAAM,YAAY,GAAG,EAAE,EAAE,QAAQ,CAAC,EAClE,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,EAAE,CACvE,CAAA;QACH,CAAC;QACD,IAAI,EAAE,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,IAAI,CACT,eAAe,EACf,MAAM,EACN,OAAO,EACP,YAAY,CAAC,GAAG,EAAE,CAAC,SAAS,IAAI,MAAM,WAAW,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAC3F,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,CAChC,CAAA;QACH,CAAC;QACD,IAAI,EAAE,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,CAAA;YACnC,wEAAwE;YACxE,MAAM,GAAG,GACP,EAAE,CAAC,SAAS,KAAK,aAAa,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACzG,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,OAAO,IAAI,CACT,mBAAmB,EACnB,SAAS,EACT,OAAO,EACP,YAAY,CACV,GAAG,EAAE,CAAC,SAAS,IAAI,MAAM,6CAA6C,GAAG,GAAG,EAC5E,QAAQ,CACT,EACD,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,EAAE,CACvE,CAAA;YACH,CAAC;YACD,OAAO,IAAI,CACT,aAAa,EACb,MAAM,EACN,OAAO,EACP,YAAY,CAAC,GAAG,EAAE,CAAC,SAAS,IAAI,MAAM,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAC5F,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,EAAE,CACvE,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,EAAE,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;QAClC,IAAI,EAAE,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,CAAA;QACvD,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,EAAE,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAA;QAC1B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,IAAI,CAAA;QAC5C,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;IACtE,CAAC;IAED,IAAI,EAAE,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACtC,IAAI,EAAE,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,+BAA+B,CAAC,CAAA;QAC9E,CAAC;QACD,uEAAuE;QACvE,8DAA8D;QAC9D,OAAO,IAAI,CAAA;IACb,CAAC;IAED,8EAA8E;IAC9E,IAAI,EAAE,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,OAAO,IAAI,GAAG,iBAAiB,CAAC,CAAA;IACtF,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,eAAe,CAAC,MAAoB,EAAE,IAAuB;IAC3E,MAAM,QAAQ,GAAG,IAAI,EAAE,YAAY,IAAI,iBAAiB,CAAA;IACxD,MAAM,GAAG,GAAsB,EAAE,CAAA;IACjC,IAAI,OAAO,GAAkB,IAAI,CAAA;IAEjC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,EAA0B,CAAA;QAE9B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACtF,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAA;QACJ,CAAC;aAAM,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YAC1B,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,EAAE;gBAChF,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YAClC,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;gBAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;QAC7E,CAAC;QAED,IAAI,EAAE,KAAK,IAAI;YAAE,SAAQ;QACzB,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAQ;QAEnC,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,CAAA;QAClD,IAAI,GAAG,KAAK,OAAO;YAAE,SAAQ,CAAC,8CAA8C;QAE5E,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACZ,OAAO,GAAG,GAAG,CAAA;IACf,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,gBAAgB,CAAC,CAAkB;IACjD,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5F,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5D,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAyB,EAAE,QAAgB,EAAE,QAAiB;IACxF,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,EAAE,CAAA;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC3D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAExC,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/E,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;QAC7B,IAAI,OAAO,KAAK,SAAS;YAAE,MAAK;QAChC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/events/parse.d.ts

@@ -0,0 +1,41 @@
+import type { AgyEvent, AgyInitEvent, AgyResultEvent, AgyStepUpdateEvent, AgyUnknownEvent } from '../contract/types.js';
+/**
+ * A parsed line. A malformed line is preserved as `ok: false` rather than dropped:
+ * losing bytes silently makes a truncated or interleaved stream indistinguishable
+ * from a clean one, and the malformed count feeds the broker's warnings.
+ */
+export type ParsedLine = {
+    ok: true;
+    event: AgyEvent;
+    raw: string;
+    offset?: number;
+} | {
+    ok: true;
+    event: AgyUnknownEvent;
+    raw: string;
+    offset?: number;
+    unknown: true;
+} | {
+    ok: false;
+    raw: string;
+    error: string;
+    offset?: number;
+};
+export declare function parseEventLine(raw: string, offset?: number): ParsedLine;
+export declare function parseEventLines(lines: string[], startOffset?: number): ParsedLine[];
+/** Narrowing helpers. The envelope key always equals the `event` value. */
+export declare function isInit(e: AgyEvent | AgyUnknownEvent): e is AgyInitEvent;
+export declare function isStepUpdate(e: AgyEvent | AgyUnknownEvent): e is AgyStepUpdateEvent;
+export declare function isResult(e: AgyEvent | AgyUnknownEvent): e is AgyResultEvent;
+/** All well-formed events out of a parse batch. */
+export declare function okEvents(parsed: ParsedLine[]): AgyEvent[];
+/**
+ * `conversation_id` from the first line of an events file, or null.
+ *
+ * Cheap by design — the gate calls it once per candidate job on every tool call.
+ * It is available before any tool runs because `init` is always line 1 (§4).
+ */
+export declare function extractConversationId(eventsPath: string): string | null;
+/** The last `result` event, i.e. the final turn's self-report. */
+export declare function lastResult(events: AgyEvent[]): AgyResultEvent | null;
+//# sourceMappingURL=parse.d.ts.map

package/dist/events/parse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../../src/events/parse.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAG7B;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAE,GACjF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAM9D,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CA6BvE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,WAAW,SAAI,GAAG,UAAU,EAAE,CAQ9E;AAED,2EAA2E;AAC3E,wBAAgB,MAAM,CAAC,CAAC,EAAE,QAAQ,GAAG,eAAe,GAAG,CAAC,IAAI,YAAY,CAEvE;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,QAAQ,GAAG,eAAe,GAAG,CAAC,IAAI,kBAAkB,CAEnF;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,QAAQ,GAAG,eAAe,GAAG,CAAC,IAAI,cAAc,CAE3E;AAED,mDAAmD;AACnD,wBAAgB,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAQzD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOvE;AAED,kEAAkE;AAClE,wBAAgB,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,cAAc,GAAG,IAAI,CAMpE"}

package/dist/events/parse.js

@@ -0,0 +1,89 @@
+import { readFirstLine } from './cursor.js';
+function isRecord(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+export function parseEventLine(raw, offset) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { ok: false, raw, error: `invalid JSON: ${message}`, offset };
+    }
+    if (!isRecord(parsed)) {
+        return { ok: false, raw, error: 'not a JSON object', offset };
+    }
+    const eventName = parsed.event;
+    if (typeof eventName !== 'string' || eventName.length === 0) {
+        return { ok: false, raw, error: 'missing "event" field', offset };
+    }
+    if (eventName === 'init' && typeof parsed.conversation_id === 'string' && isRecord(parsed.init)) {
+        return { ok: true, event: parsed, raw, offset };
+    }
+    if (eventName === 'step_update' && isRecord(parsed.step_update)) {
+        return { ok: true, event: parsed, raw, offset };
+    }
+    if (eventName === 'result' && isRecord(parsed.result)) {
+        return { ok: true, event: parsed, raw, offset };
+    }
+    return { ok: true, event: parsed, raw, offset, unknown: true };
+}
+export function parseEventLines(lines, startOffset = 0) {
+    const out = [];
+    let offset = startOffset;
+    for (const line of lines) {
+        out.push(parseEventLine(line, offset));
+        offset += Buffer.byteLength(line, 'utf8') + 1;
+    }
+    return out;
+}
+/** Narrowing helpers. The envelope key always equals the `event` value. */
+export function isInit(e) {
+    return e.event === 'init';
+}
+export function isStepUpdate(e) {
+    return e.event === 'step_update';
+}
+export function isResult(e) {
+    return e.event === 'result';
+}
+/** All well-formed events out of a parse batch. */
+export function okEvents(parsed) {
+    const out = [];
+    for (const p of parsed) {
+        if (!p.ok)
+            continue;
+        if ('unknown' in p)
+            continue;
+        out.push(p.event);
+    }
+    return out;
+}
+/**
+ * `conversation_id` from the first line of an events file, or null.
+ *
+ * Cheap by design — the gate calls it once per candidate job on every tool call.
+ * It is available before any tool runs because `init` is always line 1 (§4).
+ */
+export function extractConversationId(eventsPath) {
+    const first = readFirstLine(eventsPath);
+    if (first === null)
+        return null;
+    const parsed = parseEventLine(first);
+    if (!parsed.ok)
+        return null;
+    if (isInit(parsed.event))
+        return parsed.event.conversation_id;
+    return null;
+}
+/** The last `result` event, i.e. the final turn's self-report. */
+export function lastResult(events) {
+    for (let i = events.length - 1; i >= 0; i--) {
+        const e = events[i];
+        if (e !== undefined && isResult(e))
+            return e;
+    }
+    return null;
+}
+//# sourceMappingURL=parse.js.map

package/dist/events/parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.js","sourceRoot":"","sources":["../../src/events/parse.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAY3C,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AACjE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,MAAe;IACzD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,OAAO,EAAE,EAAE,MAAM,EAAE,CAAA;IACtE,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC/D,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAA;IAC9B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAA;IACnE,CAAC;IAED,IAAI,SAAS,KAAK,MAAM,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAChG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAiC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;IAC5E,CAAC;IACD,IAAI,SAAS,KAAK,aAAa,IAAI,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAuC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;IAClF,CAAC;IACD,IAAI,SAAS,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAmC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;IAC9E,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAyB,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AACnF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAe,EAAE,WAAW,GAAG,CAAC;IAC9D,MAAM,GAAG,GAAiB,EAAE,CAAA;IAC5B,IAAI,MAAM,GAAG,WAAW,CAAA;IACxB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;QACtC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,MAAM,CAAC,CAA6B;IAClD,OAAO,CAAC,CAAC,KAAK,KAAK,MAAM,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAA6B;IACxD,OAAO,CAAC,CAAC,KAAK,KAAK,aAAa,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,CAA6B;IACpD,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAA;AAC7B,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,QAAQ,CAAC,MAAoB;IAC3C,MAAM,GAAG,GAAe,EAAE,CAAA;IAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,SAAQ;QACnB,IAAI,SAAS,IAAI,CAAC;YAAE,SAAQ;QAC5B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACnB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;IACvC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAA;IAC3B,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,eAAe,CAAA;IAC7D,OAAO,IAAI,CAAA;AACb,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,UAAU,CAAC,MAAkB;IAC3C,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,CAAC,KAAK,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/gate/bind.d.ts

@@ -0,0 +1,28 @@
+import type { EffectivePolicy, JobRow } from '../contract/types.js';
+import type { Store } from '../store/db.js';
+export interface BoundJob {
+    job: JobRow;
+    policy: EffectivePolicy;
+    conversationId: string;
+}
+/**
+ * Null means "not one of ours" — a user's own interactive agy session.
+ *
+ * ⚠ That case must produce `{"decision":"ask"}`, never `{}`. `{}` is a denial
+ * (§9) and would break every interactive session on the machine.
+ */
+export declare function bindConversation(store: Store, conversationId: string): BoundJob | null;
+/**
+ * Persist the mapping so later calls skip the file scan. Also fills in
+ * `sessions.conversation_id` when it was still NULL.
+ */
+export declare function recordBinding(store: Store, jobId: string, conversationId: string): void;
+/** Cached lookup for a conversation already bound in a previous hook invocation. */
+export declare function lookupBoundJob(store: Store, conversationId: string): JobRow | null;
+/**
+ * Load `jobs/<id>/policy.json`. Null when it is missing or unreadable.
+ *
+ * Defaults bypass_sandbox to false if missing (fail closed).
+ */
+export declare function loadJobPolicy(store: Store, jobId: string): EffectivePolicy | null;
+//# sourceMappingURL=bind.d.ts.map

package/dist/gate/bind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bind.d.ts","sourceRoot":"","sources":["../../src/gate/bind.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,EAAa,MAAM,sBAAsB,CAAA;AAC9E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AA0B3C,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,eAAe,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAqBtF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAQvF;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASlF;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CA2BjF"}