ai-obs-cli 0.0.0-stage → 0.5.0

package/dist/paths.js

@@ -0,0 +1,73 @@
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+/** Resolves the collector home: explicit arg, then AI_OBS_HOME, then ~/.ai-obs. */
+export function resolveHome(home) {
+    return home ?? process.env.AI_OBS_HOME ?? join(homedir(), '.ai-obs');
+}
+/** Local collector files (BRIEF §5.1). AI_OBS_HOME overrides the base dir (tests, sandboxes). */
+export function aiObsPaths(home = resolveHome()) {
+    const state = join(home, 'state');
+    return {
+        root: home,
+        /** config v3: machine_id and one entry per server with its token (mode 0600) */
+        config: join(home, 'config.json'),
+        /** 0.2 – 0.4 per-repository token choice: no longer read; renamed to projects.json.v2 by the migration */
+        legacyProjects: join(home, 'projects.json'),
+        /** random local secret for path-based project keys (mode 0600; never sent) */
+        projectSecret: join(home, 'project-secret'),
+        /** per-session cursors (state/<harness>/<session>.json), delivery + collector-config caches */
+        state,
+        /** cached GET /api/v1/collector-config, one file per server: <host>.json (':' → '_') */
+        collectorConfigDir: join(state, 'collector-config'),
+        /** cwd → plain project key, written by the worker, read by the hook */
+        projectKeyCache: join(state, 'project-keys.json'),
+        /** cwd → dot-file lookup (.ai-obs.json / .ai-obs.local.json), written by the worker, read by the hook */
+        dotFileCache: join(state, 'dot-files.json'),
+        /** latest ingest warning per project key (team_not_member / team_unknown) */
+        warnings: join(state, 'warnings.json'),
+        /** SessionStart nudge markers, one file per session id */
+        nudged: join(state, 'nudged'),
+        /** size-cap drop counters */
+        dropped: join(state, 'dropped.json'),
+        /** per-server delivery state (keyed by host): last attempt / success / backoff / blocked / repositories */
+        delivery: join(state, 'delivery.json'),
+        /** event queue, capped ~50 MB / 30 days; root *.ndjson = pre-upgrade stream (frozen, never sent) */
+        queue: join(home, 'queue'),
+        /** project streams p/s-<id>/ keyed by (project key, server endpoint, team) */
+        queueProjects: join(home, 'queue', 'p'),
+        /** unresolved streams u/s-<id>/ (git timed out at capture) */
+        queueUnresolved: join(home, 'queue', 'u'),
+        /** batches the server refused as a whole (HTTP 400), kept locally for inspection */
+        deadLetter: join(home, 'queue', 'dead'),
+        /** pre-upgrade root segments moved here by 0.2 – 0.4 (never sent; left as is) */
+        deadPreUpgrade: join(home, 'queue', 'dead', 'pre-upgrade'),
+        /** hook invocations waiting for the detached worker */
+        jobs: join(home, 'jobs'),
+        /** collector log (errors from hooks and the worker go here, never to the harness) */
+        logDir: join(home, 'log'),
+        logFile: join(home, 'log', 'collector.log'),
+        /** stable copy of the collector that installed hooks point to */
+        app: join(home, 'app'),
+        /** held by the single worker / flush process */
+        workerLock: join(home, 'worker.lock'),
+        /** held while turn summaries are written (worker summary phase after its flush, or `ai-obs flush`; ADR-0027) */
+        summariesLock: join(home, 'summaries.lock'),
+        /** digests due for summarising, staged/<harness>/<ulid>.json (local only, mode 0600; ADR-0027) */
+        stagedSummaries: join(state, 'summaries', 'staged'),
+    };
+}
+/** Per-server collector-config cache file: `<host>.json` with ':' → '_' (a host is never a path). */
+export function collectorConfigPath(paths, host) {
+    if (!/^[a-z0-9.\-\[\]:]{1,255}$/.test(host))
+        throw new Error(`invalid host: ${JSON.stringify(host)}`);
+    return join(paths.collectorConfigDir, `${host.replace(/[:[\]]/g, '_')}.json`);
+}
+/** Nudge marker of one session; null unless the id is a plain token (no path tricks). */
+export function nudgeMarkerPath(paths, sessionId) {
+    return typeof sessionId === 'string' && /^[A-Za-z0-9-]{1,100}$/.test(sessionId) ? join(paths.nudged, sessionId) : null;
+}
+/** Directory for one harness's session state. */
+export function harnessStateDir(paths, harness) {
+    return join(paths.state, harness);
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,mFAAmF;AACnF,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,OAAO,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AACvE,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,UAAU,CAAC,IAAI,GAAW,WAAW,EAAE;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO;QACL,IAAI,EAAE,IAAI;QACV,gFAAgF;QAChF,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QACjC,0GAA0G;QAC1G,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;QAC3C,8EAA8E;QAC9E,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAC3C,+FAA+F;QAC/F,KAAK;QACL,wFAAwF;QACxF,kBAAkB,EAAE,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC;QACnD,uEAAuE;QACvE,eAAe,EAAE,IAAI,CAAC,KAAK,EAAE,mBAAmB,CAAC;QACjD,yGAAyG;QACzG,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC;QAC3C,6EAA6E;QAC7E,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC;QACtC,0DAA0D;QAC1D,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC7B,6BAA6B;QAC7B,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC;QACpC,2GAA2G;QAC3G,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC;QACtC,oGAAoG;QACpG,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QAC1B,8EAA8E;QAC9E,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC;QACvC,8DAA8D;QAC9D,eAAe,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC;QACzC,oFAAoF;QACpF,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC;QACvC,iFAAiF;QACjF,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC;QAC1D,uDAAuD;QACvD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACxB,qFAAqF;QACrF,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QACzB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,eAAe,CAAC;QAC3C,iEAAiE;QACjE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QACtB,gDAAgD;QAChD,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QACrC,gHAAgH;QAChH,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAC3C,kGAAkG;QAClG,eAAe,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC;KAC3C,CAAC;AACb,CAAC;AAID,qGAAqG;AACrG,MAAM,UAAU,mBAAmB,CAAC,KAA6C,EAAE,IAAY;IAC7F,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtG,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;AAChF,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAC,KAAiC,EAAE,SAAkB;IACnF,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzH,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,eAAe,CAAC,KAAiB,EAAE,OAAe;IAChE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC"}

package/dist/pk-cache.js

@@ -0,0 +1,110 @@
+import { readFileSync, statSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { readJsonFile, writeJsonAtomic } from './fsutil.js';
+/** Entries kept in state/project-keys.json (least recently resolved dropped first). */
+export const PK_CACHE_MAX = 500;
+/** A cache hit younger than this is not rewritten (the worker resolves on every job). */
+const REFRESH_MS = 60_000;
+/** The cache; empty when missing or unreadable. Never throws. */
+export function readPkCache(paths) {
+    const raw = readJsonFile(paths.projectKeyCache);
+    const out = Object.create(null);
+    if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
+        return out;
+    for (const [cwd, v] of Object.entries(raw)) {
+        const e = v;
+        if (e && typeof e.pk === 'string' && e.pk && typeof e.at === 'number' && Number.isFinite(e.at)) {
+            out[cwd] = { pk: e.pk, at: e.at, ...(typeof e.stamp === 'string' ? { stamp: e.stamp } : {}) };
+        }
+    }
+    return out;
+}
+/** Records a resolution (LRU, 0600, atomic). Never throws: the cache is an optimisation only. */
+export function rememberPk(paths, cwd, pk, now = Date.now()) {
+    try {
+        const cache = readPkCache(paths);
+        const hit = cache[cwd];
+        const stamp = repoStamp(cwd);
+        if (hit && hit.pk === pk && hit.stamp === stamp && now - hit.at >= 0 && now - hit.at < REFRESH_MS)
+            return;
+        cache[cwd] = { pk, at: now, stamp };
+        const kept = Object.entries(cache)
+            .sort((a, b) => b[1].at - a[1].at)
+            .slice(0, PK_CACHE_MAX);
+        writeJsonAtomic(paths.projectKeyCache, Object.fromEntries(kept), 0o600);
+    }
+    catch {
+        /* read-only home */
+    }
+}
+/** Distinct keys resolved at or after `sinceMs` (a timestamp), most recent first. */
+export function recentKeys(paths, sinceMs) {
+    const seen = new Set();
+    for (const [, e] of Object.entries(readPkCache(paths)).sort((a, b) => b[1].at - a[1].at)) {
+        if (e.at >= sinceMs)
+            seen.add(e.pk);
+    }
+    return [...seen];
+}
+/**
+ * The cached key of `cwd` when it still describes the same repository: the entry's stamp equals the
+ * current repoStamp (no re-clone, no `git remote set-url`, no `git init` since). Null otherwise: the
+ * caller resolves again (the hook trusts nothing older, §4.2).
+ */
+export function cachedPk(cache, cwd) {
+    const hit = cache[cwd];
+    return hit?.stamp !== undefined && hit.stamp !== 'unknown' && hit.stamp === repoStamp(cwd) ? hit.pk : null;
+}
+/**
+ * What identifies the repository a directory belongs to, from a few `stat`s and no git: the git config
+ * file that holds its remotes (path, mtime, inode), found by walking up to the nearest `.git` (a linked
+ * worktree's `.git` file is followed to the common directory); `none` outside a repository. Any change
+ * of the remote rewrites that file, a re-clone replaces it. Never throws.
+ */
+export function repoStamp(cwd) {
+    try {
+        let dir = resolve(cwd);
+        for (let depth = 0; depth < 128; depth++) {
+            const dotgit = join(dir, '.git');
+            let st = null;
+            try {
+                st = statSync(dotgit);
+            }
+            catch {
+                st = null;
+            }
+            if (st) {
+                let gitdir = dotgit;
+                if (!st.isDirectory()) {
+                    const m = /^gitdir:\s*(.+)$/m.exec(readFileSync(dotgit, 'utf8'));
+                    if (!m?.[1])
+                        return `file:${dotgit}:${st.mtimeMs}:${st.ino}`;
+                    gitdir = resolve(dir, m[1].trim());
+                    try {
+                        gitdir = resolve(gitdir, readFileSync(join(gitdir, 'commondir'), 'utf8').trim());
+                    }
+                    catch {
+                        /* a submodule or a plain gitdir file: its own config */
+                    }
+                }
+                const cfg = join(gitdir, 'config');
+                try {
+                    const c = statSync(cfg);
+                    return `${cfg}:${c.mtimeMs}:${c.ino}`;
+                }
+                catch {
+                    return `${cfg}:missing`;
+                }
+            }
+            const parent = dirname(dir);
+            if (parent === dir)
+                break;
+            dir = parent;
+        }
+    }
+    catch {
+        return 'unknown';
+    }
+    return 'none';
+}
+//# sourceMappingURL=pk-cache.js.map

package/dist/pk-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pk-cache.js","sourceRoot":"","sources":["../src/pk-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG5D,uFAAuF;AACvF,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAChC,yFAAyF;AACzF,MAAM,UAAU,GAAG,MAAM,CAAC;AAU1B,iEAAiE;AACjE,MAAM,UAAU,WAAW,CAAC,KAAY;IACtC,MAAM,GAAG,GAAG,YAAY,CAAU,KAAK,CAAC,eAAe,CAAC,CAAC;IACzD,MAAM,GAAG,GAAY,MAAM,CAAC,MAAM,CAAC,IAAI,CAAY,CAAC;IACpD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAC9E,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,GAAG,CAA2D,CAAC;QACtE,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/F,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChG,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,UAAU,CAAC,KAAY,EAAE,GAAW,EAAE,EAAU,EAAE,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IACxF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,IAAI,GAAG,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,EAAE,GAAG,UAAU;YAAE,OAAO;QAC1G,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAC/B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACjC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QAC1B,eAAe,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,UAAU,CAAC,KAAY,EAAE,OAAe;IACtD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACzF,IAAI,CAAC,CAAC,EAAE,IAAI,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc,EAAE,GAAW;IAClD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,GAAG,EAAE,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7G,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACvB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACjC,IAAI,EAAE,GAAuC,IAAI,CAAC;YAClD,IAAI,CAAC;gBACH,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,EAAE,GAAG,IAAI,CAAC;YACZ,CAAC;YACD,IAAI,EAAE,EAAE,CAAC;gBACP,IAAI,MAAM,GAAG,MAAM,CAAC;gBACpB,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;oBACtB,MAAM,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;oBACjE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;wBAAE,OAAO,QAAQ,MAAM,IAAI,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;oBAC7D,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBACnC,IAAI,CAAC;wBACH,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBACnF,CAAC;oBAAC,MAAM,CAAC;wBACP,wDAAwD;oBAC1D,CAAC;gBACH,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;oBACxB,OAAO,GAAG,GAAG,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,GAAG,GAAG,UAAU,CAAC;gBAC1B,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,MAAM;YAC1B,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/prices.js

@@ -0,0 +1,45 @@
+const p = (model, input, output, cacheRead, cacheWrite) => ({ model, input, output, cacheRead, cacheWrite });
+/**
+ * Copy of DEFAULT_MODEL_PRICES in packages/db/src/prices.ts (USD/Mtok); test/prices.test.ts keeps them equal.
+ * Operator-edited rows are not visible locally, so `ai-obs live` shows "≈ at default list prices" (ADR-0027).
+ */
+export const DEFAULT_MODEL_PRICES = [
+    p('claude-fable-5-1', 10, 50, 0.25, 12.5),
+    p('claude-fable-5', 10, 50, 1, 12.5),
+    p('claude-opus-5-5', 4, 20, 0.2, 5),
+    p('claude-opus-5', 5, 25, 0.5, 6.25),
+    p('claude-opus-4-8', 5, 25, 0.5, 6.25),
+    p('claude-opus-4-7', 5, 25, 0.5, 6.25),
+    p('claude-opus-4-6', 5, 25, 0.5, 6.25),
+    p('claude-sonnet-5-5', 2, 10, 0.2, 2.5),
+    p('claude-sonnet-5', 2, 10, 0.2, 2.5),
+    p('claude-sonnet-4-6', 3, 15, 0.3, 3.75),
+    p('claude-haiku-4-5', 1, 5, 0.1, 1.25),
+    p('gpt-5.5', 5, 30, 0.5, 0),
+    p('gpt-5.4', 2.5, 15, 0.25, 0),
+    p('gpt-5.4-mini', 0.75, 4.5, 0.075, 0),
+];
+const BY_MODEL = new Map(DEFAULT_MODEL_PRICES.map((r) => [r.model, r]));
+/**
+ * ≈ cost, same formula as db estimateCostUsd (prices.ts); reasoning is part of output, not billed again.
+ * Exact model match. `usd` is null when every model is unknown (and there is usage), `partial` when some are.
+ */
+export function estimateUsageCost(usage) {
+    let usd = 0;
+    let known = 0;
+    const unknown = new Set();
+    for (const u of usage) {
+        const price = BY_MODEL.get(u.model);
+        if (!price) {
+            unknown.add(u.model);
+            continue;
+        }
+        known++;
+        usd += (u.input * price.input + u.output * price.output + u.cache_read * price.cacheRead + u.cache_write * price.cacheWrite) / 1_000_000;
+    }
+    const unknownModels = [...unknown].sort();
+    if (usage.length && !known)
+        return { usd: null, partial: false, unknownModels };
+    return { usd, partial: unknownModels.length > 0, unknownModels };
+}
+//# sourceMappingURL=prices.js.map

package/dist/prices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prices.js","sourceRoot":"","sources":["../src/prices.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,GAAG,CAAC,KAAa,EAAE,KAAa,EAAE,MAAc,EAAE,SAAiB,EAAE,UAAkB,EAAc,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;AAEjK;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA0B;IACzD,CAAC,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC;IACzC,CAAC,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC;IACpC,CAAC,CAAC,iBAAiB,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC;IACpC,CAAC,CAAC,iBAAiB,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC;IACtC,CAAC,CAAC,iBAAiB,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC;IACtC,CAAC,CAAC,iBAAiB,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC;IACtC,CAAC,CAAC,mBAAmB,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC;IACvC,CAAC,CAAC,iBAAiB,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC;IACrC,CAAC,CAAC,mBAAmB,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC;IACxC,CAAC,CAAC,kBAAkB,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC;IACtC,CAAC,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;CACvC,CAAC;AAEF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAExE;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAA4B;IAC5D,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,KAAK,EAAE,CAAC;QACR,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC;IAC3I,CAAC;IACD,MAAM,aAAa,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAChF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,aAAa,EAAE,CAAC;AACnE,CAAC"}

package/dist/project-key.js

@@ -0,0 +1,144 @@
+import { createHash, createHmac, randomBytes } from 'node:crypto';
+import { linkSync, readFileSync, realpathSync, rmSync, writeFileSync } from 'node:fs';
+import { basename, dirname, isAbsolute, resolve as resolvePath } from 'node:path';
+import { ensureDir } from './fsutil.js';
+import { gitRemoteUrlResult, gitRepoRootResult } from './git.js';
+const sha256 = (s) => createHash('sha256').update(s).digest('hex');
+const hmac = (key, s) => createHmac('sha256', key).update(s).digest('hex');
+/**
+ * Normalizes a git remote to `host/path`: strips protocol, credentials / `user@`, port, `.git` and
+ * trailing slashes; lowercases the host. Returns null for local remotes (paths, file://), which
+ * would leak a file path.
+ *
+ *   git@github.com:Acme/billing.git         → github.com/Acme/billing
+ *   https://u:p@GitHub.com:443/acme/x.git/  → github.com/acme/x
+ */
+export function normalizeRemote(remote) {
+    let s = remote.trim();
+    if (!s)
+        return null;
+    let host;
+    let path;
+    const urlMatch = /^([a-z][a-z0-9+.-]*):\/\/(.*)$/i.exec(s);
+    if (urlMatch) {
+        const scheme = (urlMatch[1] ?? '').toLowerCase();
+        if (scheme === 'file')
+            return null;
+        s = urlMatch[2] ?? '';
+        const slash = s.indexOf('/');
+        const authority = slash < 0 ? s : s.slice(0, slash);
+        path = slash < 0 ? '' : s.slice(slash + 1);
+        host = authority.slice(authority.lastIndexOf('@') + 1);
+        // ssh://git@host:org/repo (scp-ish inside a URL): a non-numeric "port" is really the path start.
+        const colon = host.lastIndexOf(':');
+        if (colon >= 0 && !host.startsWith('[')) {
+            const port = host.slice(colon + 1);
+            if (port && !/^\d+$/.test(port))
+                path = `${port}/${path}`;
+            host = host.slice(0, colon);
+        }
+    }
+    else {
+        // scp-like: [user@]host:path — but not a Windows drive (C:\…) or a plain local path.
+        const scp = /^(?:[^@/\\]+@)?([^:/\\\s]+):(?!\/\/)(.+)$/.exec(s);
+        if (!scp || /^[a-z]$/i.test(scp[1] ?? ''))
+            return null;
+        host = scp[1] ?? '';
+        path = scp[2] ?? '';
+    }
+    host = host.toLowerCase().replace(/\.$/, '');
+    path = path
+        .replace(/\\/g, '/')
+        .replace(/^\/+|\/+$/g, '')
+        .replace(/\.git$/i, '')
+        .replace(/\/+$/, '');
+    if (!host || !path || !/^[a-z0-9.-]+$/.test(host) || /\s/.test(path))
+        return null;
+    return `${host}/${path}`;
+}
+/** Default git budget of a key resolution outside the hook (worker, sender, `use`): latency does not matter there (C16). */
+export const RESOLVE_TIMEOUT_MS = 5000;
+/**
+ * The plain project key of a working directory (Q4, C2): the normalized git remote, else the git
+ * top-level (of the main checkout, for a linked worktree), else `realpath(cwd)` outside a repo
+ * (`path.resolve(cwd)` when the directory is gone). Local only, never sent as such (sendRef). Null only
+ * when git timed out. `bounded` (the hook) kills git at the deadline instead of waiting for it (C26).
+ * Never throws.
+ */
+export async function resolveProjectKey(cwd, opts = {}) {
+    const d = { until: Date.now() + (opts.timeoutMs ?? RESOLVE_TIMEOUT_MS), bounded: opts.bounded === true };
+    const [top, remote] = await Promise.all([gitRepoRootResult(cwd, d), gitRemoteUrlResult(cwd, d)]);
+    if (top.timedOut || remote.timedOut)
+        return null;
+    const normalized = remote.out ? normalizeRemote(remote.out) : null;
+    if (normalized)
+        return normalized;
+    if (top.out && isAbsolute(top.out))
+        return top.out;
+    try {
+        return realpathSync(cwd);
+    }
+    catch {
+        return resolvePath(cwd);
+    }
+}
+/** A key that is a local path (no usable remote): always sent as a keyed hash. */
+export function isPathKey(pk) {
+    return isAbsolute(pk);
+}
+/**
+ * Send-time project reference for the receiving token (C3, contract §5.5). Path key →
+ * `sha256:` + HMAC(local path secret, `path:` + path) (plain sha256 without a secret); hashed →
+ * `sha256:` + HMAC(deployment salt, key) (plain sha256 without a salt), no name; plain → the key and its
+ * last segment as name.
+ */
+export function sendRef(pk, o) {
+    if (isPathKey(pk)) {
+        const path = `path:${pk}`;
+        return { key: `sha256:${o.pathSecret ? hmac(o.pathSecret, path) : sha256(path)}` };
+    }
+    if (o.naming === 'hashed')
+        return { key: `sha256:${o.salt ? hmac(o.salt, pk) : sha256(pk)}` };
+    const name = basename(pk).slice(0, 200);
+    return name ? { key: pk, name } : { key: pk };
+}
+/** What `ctx.projectKey` returns at capture (plain naming); the sender overwrites it from the stream key. */
+export function localRef(pk, pathSecret) {
+    return sendRef(pk, { naming: 'plain', pathSecret });
+}
+/**
+ * The machine's path secret (32 random bytes, hex), created on first use. Creation is atomic (temp
+ * file + hard link), so concurrent workers agree on one value. Null when the file cannot be read or
+ * created (the caller then falls back to the unsalted key).
+ */
+export function loadPathSecret(file) {
+    const read = () => {
+        try {
+            const v = readFileSync(file, 'utf8').trim();
+            return /^[0-9a-f]{64}$/.test(v) ? v : null;
+        }
+        catch {
+            return null;
+        }
+    };
+    const existing = read();
+    if (existing)
+        return existing;
+    const tmp = `${file}.${process.pid}.${randomBytes(4).toString('hex')}.tmp`;
+    try {
+        ensureDir(dirname(file));
+        writeFileSync(tmp, `${randomBytes(32).toString('hex')}\n`, { mode: 0o600 });
+        linkSync(tmp, file); // fails with EEXIST if another process won the race
+    }
+    catch {
+        /* lost the race, or read-only home */
+    }
+    try {
+        rmSync(tmp, { force: true });
+    }
+    catch {
+        /* nothing was written */
+    }
+    return read();
+}
+//# sourceMappingURL=project-key.js.map

package/dist/project-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-key.js","sourceRoot":"","sources":["../src/project-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAGjE,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE3F;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,IAAY,CAAC;IACjB,IAAI,IAAY,CAAC;IACjB,MAAM,QAAQ,GAAG,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACnC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACpD,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,iGAAiG;QACjG,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACnC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;YAC1D,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;SAAM,CAAC;QACN,qFAAqF;QACrF,MAAM,GAAG,GAAG,2CAA2C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpB,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,GAAG,IAAI;SACR,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;SACzB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,OAAO,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,4HAA4H;AAC5H,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAW,EAAE,IAAI,GAA8C,EAAE;IACvG,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;IACzG,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,IAAI,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,GAAG,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,EAAU,EAAE,CAAiF;IACnH,IAAI,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,QAAQ,EAAE,EAAE,CAAC;QAC1B,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;IAC9F,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;AAChD,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,QAAQ,CAAC,EAAU,EAAE,UAAyB;IAC5D,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC;IACxB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3E,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACzB,aAAa,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,oDAAoD;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IACD,OAAO,IAAI,EAAE,CAAC;AAChB,CAAC"}

package/dist/protocol-types.js

@@ -0,0 +1,30 @@
+/**
+ * Minimal copy of the ingest schema v1 (`@ai-obs/protocol`) for the collector. The collector has ZERO
+ * runtime dependencies, so it cannot import zod; test/protocol-conformance.test.ts type-checks these
+ * types against @ai-obs/protocol and validates builder output with its validateBatch().
+ */
+export const SCHEMA_VERSION = 1;
+export const MAX_BATCH_EVENTS = 500;
+export const MAX_BATCH_BYTES = 1_000_000;
+export const MAX_SUMMARY_LENGTH = 140;
+export const MAX_USAGE_NAME_LENGTH = 128;
+export const MAX_SKILLS_PER_EVENT = 100;
+export const MAX_MCP_SERVERS_PER_EVENT = 50;
+export const MAX_MCP_TOOLS_PER_SERVER = 100;
+/** MCP latency bucket upper bounds (ms); the last of the 5 buckets is open. */
+export const MCP_LATENCY_BUCKETS_MS = [1_000, 5_000, 30_000, 120_000];
+/** Incoming links a run event may carry (ADR-0020). */
+export const MAX_RUN_LINKS = 32;
+/** Upper bound of `stage_index`. */
+export const MAX_STAGE_INDEX = 10_000;
+/** The one ingest token prefix: person and service users (ADR-0029). */
+export const USER_TOKEN_PREFIX = 'aiobs_u_';
+/** Retired prefixes (company `aiobs_c_`, team `aiobs_t_`): never accepted, kept to name them in messages and maskToken. */
+export const RETIRED_TOKEN_PREFIXES = ['aiobs_c_', 'aiobs_t_'];
+/** Team slug (dot file `team`, `session_start.project.team`): 1–63 of a-z0-9-. */
+export const TEAM_SLUG_RE = /^[a-z0-9-]{1,63}$/;
+/** Recursion guard for the collector's own summarizer child process (BRIEF §5.6). */
+export const SUMMARIZING_ENV = 'AI_OBS_SUMMARIZING';
+/** Reported phases. `delegating` is never reported: it is counted in the child run instead. */
+export const PHASES = ['thinking', 'exploring', 'coding', 'documenting', 'testing', 'validating', 'other'];
+//# sourceMappingURL=protocol-types.js.map

package/dist/protocol-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-types.js","sourceRoot":"","sources":["../src/protocol-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAU,CAAC;AACzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AACpC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC;AACzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAC5C,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAC5C,+EAA+E;AAC/E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC;AAC/E,uDAAuD;AACvD,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAChC,oCAAoC;AACpC,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AACtC,wEAAwE;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAmB,CAAC;AACrD,2HAA2H;AAC3H,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,UAAU,EAAE,UAAU,CAAU,CAAC;AACxE,kFAAkF;AAClF,MAAM,CAAC,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAChD,qFAAqF;AACrF,MAAM,CAAC,MAAM,eAAe,GAAG,oBAA6B,CAAC;AAE7D,+FAA+F;AAC/F,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,CAAU,CAAC"}