avorelo 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (258) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +56 -0
  3. package/bin/avorelo +9 -0
  4. package/package.json +135 -0
  5. package/scripts/README.md +40 -0
  6. package/scripts/cco-dashboard.js +252 -0
  7. package/scripts/cco-status.js +430 -0
  8. package/scripts/lib/activation/account-state.js +37 -0
  9. package/scripts/lib/activation/activation-runner.js +546 -0
  10. package/scripts/lib/activation/activation-self-healing.js +480 -0
  11. package/scripts/lib/activation/activation-state.js +83 -0
  12. package/scripts/lib/activation/activation-summary.js +191 -0
  13. package/scripts/lib/activation/adapters/claude-code.js +77 -0
  14. package/scripts/lib/activation/adapters/codex-cli.js +52 -0
  15. package/scripts/lib/activation/adapters/cursor.js +37 -0
  16. package/scripts/lib/activation/adapters/github-agent.js +39 -0
  17. package/scripts/lib/activation/adapters/terminal.js +42 -0
  18. package/scripts/lib/activation/adapters/vscode.js +39 -0
  19. package/scripts/lib/activation/adapters/windsurf.js +37 -0
  20. package/scripts/lib/activation/ai-surface-detector.js +151 -0
  21. package/scripts/lib/activation/connect-account.js +145 -0
  22. package/scripts/lib/activation/detect-environment.js +75 -0
  23. package/scripts/lib/activation/detect-hosts.js +62 -0
  24. package/scripts/lib/activation/format-activation-output.js +109 -0
  25. package/scripts/lib/activation/next-action.js +43 -0
  26. package/scripts/lib/activation/repair-engine.js +219 -0
  27. package/scripts/lib/activation-distribution-readiness.js +507 -0
  28. package/scripts/lib/adapter-conformance.js +176 -0
  29. package/scripts/lib/adapter-readiness.js +417 -0
  30. package/scripts/lib/adapter-safety-boundaries.js +335 -0
  31. package/scripts/lib/adapter-technical-readiness-gate.js +205 -0
  32. package/scripts/lib/agent-access-governance.js +455 -0
  33. package/scripts/lib/agent-enforcement.js +765 -0
  34. package/scripts/lib/agent-policy-profile.js +210 -0
  35. package/scripts/lib/agent-security/action-evaluator.js +507 -0
  36. package/scripts/lib/agent-security/adapter-registry.js +98 -0
  37. package/scripts/lib/agent-security/auto-policy.js +139 -0
  38. package/scripts/lib/agent-security/bounded-scan.js +93 -0
  39. package/scripts/lib/agent-security/enforcement-adapter.js +174 -0
  40. package/scripts/lib/agent-security/enforcement-engine.js +1129 -0
  41. package/scripts/lib/agent-security/file-write-adapter.js +183 -0
  42. package/scripts/lib/agent-security/file-write-rules.js +178 -0
  43. package/scripts/lib/agent-security/index.js +3342 -0
  44. package/scripts/lib/agent-security/instruction-risk.js +181 -0
  45. package/scripts/lib/agent-security/mcp-action-adapter.js +185 -0
  46. package/scripts/lib/agent-security/mcp-action-rules.js +184 -0
  47. package/scripts/lib/agent-security/package-action-adapter.js +175 -0
  48. package/scripts/lib/agent-security/package-action-rules.js +233 -0
  49. package/scripts/lib/agent-security/performance.js +148 -0
  50. package/scripts/lib/agent-security/permission-minimizer.js +403 -0
  51. package/scripts/lib/agent-security/scan-cache.js +74 -0
  52. package/scripts/lib/agent-security/source-trust.js +146 -0
  53. package/scripts/lib/ai-install-prompt.js +288 -0
  54. package/scripts/lib/ai-workspace-hygiene.js +1499 -0
  55. package/scripts/lib/alpha-activation.js +520 -0
  56. package/scripts/lib/alpha-feedback.js +263 -0
  57. package/scripts/lib/alpha-readiness-gate.js +332 -0
  58. package/scripts/lib/anti-gaming.js +169 -0
  59. package/scripts/lib/artifact-health.js +431 -0
  60. package/scripts/lib/attribution.js +180 -0
  61. package/scripts/lib/audit.js +289 -0
  62. package/scripts/lib/avorelo-skill-registry.js +810 -0
  63. package/scripts/lib/batch-jobs.js +71 -0
  64. package/scripts/lib/brain-pack.js +578 -0
  65. package/scripts/lib/brand-boundary.js +424 -0
  66. package/scripts/lib/brand.js +74 -0
  67. package/scripts/lib/browser-capability.js +1048 -0
  68. package/scripts/lib/browser-proof-preflight.js +321 -0
  69. package/scripts/lib/cache-readiness.js +187 -0
  70. package/scripts/lib/canonical-reentry.js +162 -0
  71. package/scripts/lib/capability-packs.js +314 -0
  72. package/scripts/lib/capability-recommender.js +512 -0
  73. package/scripts/lib/capability-registry.js +1059 -0
  74. package/scripts/lib/carry-forward-surfacing.js +194 -0
  75. package/scripts/lib/ccusage-adapter.js +188 -0
  76. package/scripts/lib/company-loop.js +1149 -0
  77. package/scripts/lib/config.js +637 -0
  78. package/scripts/lib/context-acquisition-plan.js +287 -0
  79. package/scripts/lib/context-budget-guard.js +170 -0
  80. package/scripts/lib/context-budget-scanner.js +257 -0
  81. package/scripts/lib/context-optimizer.js +715 -0
  82. package/scripts/lib/context-reduction-plan.js +178 -0
  83. package/scripts/lib/context-safety.js +88 -0
  84. package/scripts/lib/context-savings-engine.js +158 -0
  85. package/scripts/lib/cost-evidence.js +254 -0
  86. package/scripts/lib/cross-host-install-plan.js +308 -0
  87. package/scripts/lib/cross-host-install-readiness.js +237 -0
  88. package/scripts/lib/cross-host-value-flow.js +268 -0
  89. package/scripts/lib/dashboard.js +900 -0
  90. package/scripts/lib/design-partner-feedback.js +346 -0
  91. package/scripts/lib/entitlements.js +100 -0
  92. package/scripts/lib/execution-packet.js +559 -0
  93. package/scripts/lib/experimentation-events.js +547 -0
  94. package/scripts/lib/external-capability-compliance.js +107 -0
  95. package/scripts/lib/external-user-simulation.js +166 -0
  96. package/scripts/lib/failure-recovery-readiness.js +81 -0
  97. package/scripts/lib/failure-recovery.js +419 -0
  98. package/scripts/lib/feedback-intelligence.js +537 -0
  99. package/scripts/lib/feedback-signals.js +205 -0
  100. package/scripts/lib/file-integrity.js +68 -0
  101. package/scripts/lib/fsx.js +127 -0
  102. package/scripts/lib/full-readiness-gate.js +451 -0
  103. package/scripts/lib/guidance-builder.js +174 -0
  104. package/scripts/lib/hook-apply.js +1019 -0
  105. package/scripts/lib/hook-baseline.js +310 -0
  106. package/scripts/lib/hook-config-preview.js +275 -0
  107. package/scripts/lib/hook-contracts.js +290 -0
  108. package/scripts/lib/hook-safety-boundary-readiness.js +80 -0
  109. package/scripts/lib/host-capability-matrix.js +351 -0
  110. package/scripts/lib/host-support-context.js +254 -0
  111. package/scripts/lib/http-hook-action.js +538 -0
  112. package/scripts/lib/install-ai-readiness.js +84 -0
  113. package/scripts/lib/install-intake-risk.js +1037 -0
  114. package/scripts/lib/install-journey-intelligence.js +329 -0
  115. package/scripts/lib/intervention-guidance.js +57 -0
  116. package/scripts/lib/known-limitations.js +115 -0
  117. package/scripts/lib/l8-path-truth.js +146 -0
  118. package/scripts/lib/launch-hardening-gate.js +436 -0
  119. package/scripts/lib/launch-readiness.js +628 -0
  120. package/scripts/lib/learning-memory.js +686 -0
  121. package/scripts/lib/lifecycle-hooks.js +802 -0
  122. package/scripts/lib/local-package-smoke.js +423 -0
  123. package/scripts/lib/local-pricing.js +299 -0
  124. package/scripts/lib/mcp-enforcement.js +311 -0
  125. package/scripts/lib/mcp-least-privilege-policy.js +303 -0
  126. package/scripts/lib/mcp-tool-inventory.js +388 -0
  127. package/scripts/lib/mcp-tool-risk.js +0 -0
  128. package/scripts/lib/memory.js +335 -0
  129. package/scripts/lib/metrics.js +699 -0
  130. package/scripts/lib/micro-proof.js +133 -0
  131. package/scripts/lib/next-run-context.js +436 -0
  132. package/scripts/lib/operating-value.js +1648 -0
  133. package/scripts/lib/optimization-v3.js +122 -0
  134. package/scripts/lib/orchestration/adapters/_shared.js +49 -0
  135. package/scripts/lib/orchestration/adapters/aider.js +18 -0
  136. package/scripts/lib/orchestration/adapters/claude-code.js +35 -0
  137. package/scripts/lib/orchestration/adapters/codex.js +35 -0
  138. package/scripts/lib/orchestration/adapters/gemini-cli.js +18 -0
  139. package/scripts/lib/orchestration/adapters/git.js +25 -0
  140. package/scripts/lib/orchestration/adapters/index.js +31 -0
  141. package/scripts/lib/orchestration/adapters/lm-studio.js +18 -0
  142. package/scripts/lib/orchestration/adapters/ollama.js +18 -0
  143. package/scripts/lib/orchestration/adapters/opencode.js +18 -0
  144. package/scripts/lib/orchestration/adapters/openrouter.js +18 -0
  145. package/scripts/lib/orchestration/adapters/test-runner.js +25 -0
  146. package/scripts/lib/orchestration/cli.js +438 -0
  147. package/scripts/lib/orchestration/execution-manager.js +279 -0
  148. package/scripts/lib/orchestration/handoff.js +314 -0
  149. package/scripts/lib/orchestration/index.js +456 -0
  150. package/scripts/lib/orchestration/inventory.js +47 -0
  151. package/scripts/lib/orchestration/model-discovery.js +498 -0
  152. package/scripts/lib/orchestration/model-profiler.js +170 -0
  153. package/scripts/lib/orchestration/model-profiles.js +252 -0
  154. package/scripts/lib/orchestration/model-refresh-policy.js +72 -0
  155. package/scripts/lib/orchestration/proof-writer.js +349 -0
  156. package/scripts/lib/orchestration/provider-discovery/aider.js +49 -0
  157. package/scripts/lib/orchestration/provider-discovery/claude-code.js +56 -0
  158. package/scripts/lib/orchestration/provider-discovery/codex.js +49 -0
  159. package/scripts/lib/orchestration/provider-discovery/common.js +186 -0
  160. package/scripts/lib/orchestration/provider-discovery/gemini.js +106 -0
  161. package/scripts/lib/orchestration/provider-discovery/lm-studio.js +118 -0
  162. package/scripts/lib/orchestration/provider-discovery/models-dev.js +12 -0
  163. package/scripts/lib/orchestration/provider-discovery/ollama.js +100 -0
  164. package/scripts/lib/orchestration/provider-discovery/opencode.js +47 -0
  165. package/scripts/lib/orchestration/provider-discovery/openrouter.js +44 -0
  166. package/scripts/lib/orchestration/risk-classifier.js +130 -0
  167. package/scripts/lib/orchestration/routing-policy.js +486 -0
  168. package/scripts/lib/orchestration/settings.js +112 -0
  169. package/scripts/lib/orchestration/state.js +165 -0
  170. package/scripts/lib/orchestration/verification-manager.js +138 -0
  171. package/scripts/lib/output-profiles.js +146 -0
  172. package/scripts/lib/package-content-audit.js +368 -0
  173. package/scripts/lib/package-runtime.js +278 -0
  174. package/scripts/lib/plan-surface.js +53 -0
  175. package/scripts/lib/plans.js +2318 -0
  176. package/scripts/lib/policy-provider.js +27 -0
  177. package/scripts/lib/prelaunch-activation-readiness.js +409 -0
  178. package/scripts/lib/prelaunch-evidence-store.js +816 -0
  179. package/scripts/lib/prelaunch-intelligence.js +869 -0
  180. package/scripts/lib/pricing-experiment.js +118 -0
  181. package/scripts/lib/pro-moment-events.js +77 -0
  182. package/scripts/lib/pro-moment-state.js +227 -0
  183. package/scripts/lib/pro-moments.js +1216 -0
  184. package/scripts/lib/product-learning-events.js +629 -0
  185. package/scripts/lib/project-profile.js +555 -0
  186. package/scripts/lib/prompt-compiler.js +280 -0
  187. package/scripts/lib/prompt-lint.js +32 -0
  188. package/scripts/lib/prompt-suggestions.js +52 -0
  189. package/scripts/lib/proof-canonical.js +398 -0
  190. package/scripts/lib/proof-drilldown.js +383 -0
  191. package/scripts/lib/proof-events.js +342 -0
  192. package/scripts/lib/proof-history.js +243 -0
  193. package/scripts/lib/proof-metrics.js +296 -0
  194. package/scripts/lib/proof-outcome-evidence.js +134 -0
  195. package/scripts/lib/proof-receipt.js +335 -0
  196. package/scripts/lib/proof-record.js +461 -0
  197. package/scripts/lib/public-activation-distribution-gate.js +258 -0
  198. package/scripts/lib/public-cli.js +3891 -0
  199. package/scripts/lib/public-distribution-truth.js +211 -0
  200. package/scripts/lib/public-install-claim-checker.js +294 -0
  201. package/scripts/lib/publish-provenance-readiness.js +283 -0
  202. package/scripts/lib/readiness-delta.js +218 -0
  203. package/scripts/lib/readiness-evidence-closure.js +196 -0
  204. package/scripts/lib/reentry-memory-capture.js +241 -0
  205. package/scripts/lib/reentry-memory-retrieval.js +302 -0
  206. package/scripts/lib/reentry-memory-status.js +146 -0
  207. package/scripts/lib/reentry-memory-store.js +178 -0
  208. package/scripts/lib/reentry-state.js +66 -0
  209. package/scripts/lib/release-candidate-bundle.js +166 -0
  210. package/scripts/lib/remediation.js +81 -0
  211. package/scripts/lib/repo-map.js +391 -0
  212. package/scripts/lib/run-improvements-lifecycle.js +330 -0
  213. package/scripts/lib/run-improvements.js +789 -0
  214. package/scripts/lib/runtime-decision-policy.js +387 -0
  215. package/scripts/lib/safe-path-engine.js +705 -0
  216. package/scripts/lib/safe-run-controller.js +887 -0
  217. package/scripts/lib/score.js +262 -0
  218. package/scripts/lib/seamless-enforcement.js +329 -0
  219. package/scripts/lib/seamless-outcome.js +689 -0
  220. package/scripts/lib/seamless-reality-gate.js +5043 -0
  221. package/scripts/lib/security-risk-classifier.js +511 -0
  222. package/scripts/lib/security-scan.js +384 -0
  223. package/scripts/lib/session-context-optimizer.js +1211 -0
  224. package/scripts/lib/session-timing.js +315 -0
  225. package/scripts/lib/skill-hygiene.js +805 -0
  226. package/scripts/lib/skill-packs.js +161 -0
  227. package/scripts/lib/skills-operating-layer.js +580 -0
  228. package/scripts/lib/smart-work-routing.js +768 -0
  229. package/scripts/lib/source-catalog.js +700 -0
  230. package/scripts/lib/status-value-summary.js +32 -0
  231. package/scripts/lib/support-bundle.js +578 -0
  232. package/scripts/lib/task-continuation.js +440 -0
  233. package/scripts/lib/test-helpers.js +15 -0
  234. package/scripts/lib/tier.js +38 -0
  235. package/scripts/lib/token-context-quality-gate.js +370 -0
  236. package/scripts/lib/token-cost-capture.js +187 -0
  237. package/scripts/lib/token-cost-intelligence.js +358 -0
  238. package/scripts/lib/token-efficiency-evidence.js +213 -0
  239. package/scripts/lib/token-evidence.js +699 -0
  240. package/scripts/lib/tokenish.js +17 -0
  241. package/scripts/lib/tool-output-sandbox.js +304 -0
  242. package/scripts/lib/trust-audit.js +136 -0
  243. package/scripts/lib/unified-events.js +396 -0
  244. package/scripts/lib/upgrade-interruption-recovery.js +407 -0
  245. package/scripts/lib/usage-ledger.js +201 -0
  246. package/scripts/lib/value-ledger.js +130 -0
  247. package/scripts/lib/value-proof-calibration.js +531 -0
  248. package/scripts/lib/visual-qa.js +231 -0
  249. package/scripts/lib/voice-alpha.js +29 -0
  250. package/scripts/lib/work-aware-orchestration.js +976 -0
  251. package/scripts/lib/work-control-receipts.js +577 -0
  252. package/scripts/lib/work-ledger.js +1123 -0
  253. package/scripts/lib/work-panel-preview.js +352 -0
  254. package/scripts/lib/workflow-discipline.js +280 -0
  255. package/scripts/lib/workflow-signals.js +419 -0
  256. package/scripts/lib/workspace-map.js +281 -0
  257. package/scripts/lib/workspace-registry.js +1367 -0
  258. package/scripts/lib/workspace-resolver.js +480 -0
@@ -0,0 +1,396 @@
1
+ "use strict";
2
+
3
+ const fs = require("fs");
4
+ const path = require("path");
5
+ const crypto = require("crypto");
6
+ const { nowIso } = require("./fsx");
7
+ const { normalizeAttribution, inferValueUnit } = require("./attribution");
8
+ const { numberOrNull } = require("./cost-evidence");
9
+
10
+ const OUTBOX_REL = ".claude/cco/cloud/outbox/events.jsonl";
11
+ const OUTCOME_EVENTS_REL = ".claude/cco/events/outcome-events.jsonl";
12
+ const OUTCOME_EXPORTS_REL = ".claude/cco/exports";
13
+
14
+ function ensureDirFor(filePath) {
15
+ fs.mkdirSync(path.dirname(filePath), { recursive: true });
16
+ }
17
+
18
+ function parseJsonl(absPath) {
19
+ if (!fs.existsSync(absPath)) return [];
20
+ return fs
21
+ .readFileSync(absPath, "utf8")
22
+ .split("\n")
23
+ .filter(Boolean)
24
+ .map((ln) => {
25
+ try {
26
+ return JSON.parse(ln);
27
+ } catch {
28
+ return null;
29
+ }
30
+ })
31
+ .filter(Boolean);
32
+ }
33
+
34
+ function appendJsonl(absPath, rows) {
35
+ ensureDirFor(absPath);
36
+ const lines = (rows || []).map((row) => JSON.stringify(row)).join("\n");
37
+ if (!lines) return;
38
+ fs.appendFileSync(absPath, lines + "\n", "utf8");
39
+ }
40
+
41
+ function confidenceFromReasonCodes(reasonCodes) {
42
+ const sec = (reasonCodes || []).filter((x) => String(x).startsWith("SEC_")).length;
43
+ if (sec >= 2) return "high";
44
+ if (sec === 1) return "medium";
45
+ return "low";
46
+ }
47
+
48
+ function confidenceScore(reasonCodes) {
49
+ const sec = (reasonCodes || []).filter((x) => String(x).startsWith("SEC_")).length;
50
+ if (sec >= 2) return 0.92;
51
+ if (sec === 1) return 0.75;
52
+ if ((reasonCodes || []).includes("LOOP_REPEATED_TOOL")) return 0.81;
53
+ if ((reasonCodes || []).includes("CTX_LARGE_OUTPUT")) return 0.72;
54
+ return 0.58;
55
+ }
56
+
57
+ function inferCategory(metric) {
58
+ const codes = metric.reasonCodes || [];
59
+ const event = String(metric.event || "");
60
+
61
+ if (codes.some((c) => String(c).startsWith("SEC_"))) return "risky_skill_flagged";
62
+ if (codes.includes("LOOP_REPEATED_TOOL") || codes.includes("FAIL_RETRY_GUARD")) return "loop_detected";
63
+ if (codes.includes("CTX_LARGE_OUTPUT") || codes.includes("CTX_SCAN_SKIPPED_UNCHANGED")) return "output_trimmed";
64
+ if (codes.includes("SEC_REMEDIATION_JOB_CREATED")) return "patch_suggested";
65
+ if (codes.includes("PERM_FATIGUE_CONSOLIDATED")) return "permission_consolidated";
66
+ if (codes.includes("SEC_TRUST_UNKNOWN_HIGH") || codes.includes("SEC_TRUST_AUDIT") || event === "WorktreeCreate" || event === "WorktreeRemove") {
67
+ return "trust_alert";
68
+ }
69
+ if (event === "CloudSync" || event === "SessionEnd" || event === "TaskCompleted") return "pricing_signal";
70
+ if (String(metric.event || "").toLowerCase().includes("intel")) return "intel_signal";
71
+ return "waste_prevented";
72
+ }
73
+
74
+ function measuredValue(metric, category) {
75
+ const meta = metric.meta || {};
76
+ if (typeof meta.measured_value === "number") return meta.measured_value;
77
+ if (category === "output_trimmed") {
78
+ const bytes = Number(meta.bytes || 0);
79
+ return Number.isFinite(bytes) && bytes > 0 ? bytes : null;
80
+ }
81
+ if (category === "loop_detected") return (metric.reasonCodes || []).includes("LOOP_REPEATED_TOOL") ? 1 : null;
82
+ if (category === "risky_skill_flagged") return (metric.reasonCodes || []).some((x) => String(x).startsWith("SEC_")) ? 1 : null;
83
+ if (category === "patch_suggested") return (metric.reasonCodes || []).includes("SEC_REMEDIATION_JOB_CREATED") ? 1 : null;
84
+ if (category === "pricing_signal") return Number(meta.syncedEvents || 0) || null;
85
+ return null;
86
+ }
87
+
88
+ function counterfactualValue(metric, category) {
89
+ const meta = metric.meta || {};
90
+ if (typeof meta.estimated_counterfactual_value === "number") return meta.estimated_counterfactual_value;
91
+ if (category === "loop_detected") {
92
+ if ((metric.reasonCodes || []).includes("LOOP_REPEATED_TOOL")) return 3;
93
+ if ((metric.reasonCodes || []).includes("FAIL_RETRY_GUARD")) return 2;
94
+ }
95
+ if (category === "output_trimmed") {
96
+ const bytes = Number(meta.bytes || 0);
97
+ return Number.isFinite(bytes) && bytes > 0 ? Math.round(bytes * 0.65) : null;
98
+ }
99
+ if (category === "risky_skill_flagged") return (metric.reasonCodes || []).some((x) => String(x).startsWith("SEC_")) ? 1 : null;
100
+ if (category === "patch_suggested") return (metric.reasonCodes || []).includes("SEC_REMEDIATION_JOB_CREATED") ? 1 : null;
101
+ return null;
102
+ }
103
+
104
+ function stableId(parts) {
105
+ const joined = parts.map((x) => String(x || "")).join("|");
106
+ const hex = crypto.createHash("sha256").update(joined).digest("hex");
107
+ return `evt_${hex.slice(0, 16)}`;
108
+ }
109
+
110
+ function buildOutcomeEvent(params) {
111
+ const metric = params?.metric || {};
112
+ const platform = params?.platform || "claude";
113
+ const projectId = params?.projectId || metric?.meta?.projectId || "unknown-project";
114
+ const userId = params?.userId || metric?.meta?.userId || process.env.CCO_USER_ID || "local-user";
115
+ const repoId = params?.repoId || metric?.meta?.repoId || projectId;
116
+ const category = inferCategory(metric);
117
+ const reasonCode = (metric.reasonCodes && metric.reasonCodes[0]) || "UNKNOWN_REASON";
118
+
119
+ const measured = measuredValue(metric, category);
120
+ const counterfactual = counterfactualValue(metric, category);
121
+ const attribution = normalizeAttribution(metric);
122
+ const valueUnit = inferValueUnit({ ...metric, category }, attribution, measured, counterfactual);
123
+
124
+ return {
125
+ event_id: stableId([metric.ts || nowIso(), metric.sessionId || "unknown", metric.event || "UnknownEvent", metric.tool || "", metric.action || "", reasonCode]),
126
+ session_id: metric.sessionId || "unknown",
127
+ repo_id: repoId,
128
+ project_id: projectId,
129
+ user_id: userId,
130
+ timestamp: metric.ts || nowIso(),
131
+ category,
132
+ reason_code: reasonCode,
133
+ measured_value: measured,
134
+ estimated_counterfactual_value: counterfactual,
135
+ confidence_score: confidenceScore(metric.reasonCodes || []),
136
+ platform,
137
+ event_name: metric.event || "UnknownEvent",
138
+ action: metric.action || null,
139
+ tool: metric.tool || null,
140
+ value_unit: valueUnit,
141
+ attribution,
142
+ metadata: metric.meta || {},
143
+ };
144
+ }
145
+
146
+ function appendOutcomeEvents(cwd, events) {
147
+ const abs = path.join(cwd, OUTCOME_EVENTS_REL);
148
+ appendJsonl(abs, events || []);
149
+ return abs;
150
+ }
151
+
152
+ function readOutcomeEvents(cwd) {
153
+ const abs = path.join(cwd, OUTCOME_EVENTS_REL);
154
+ return parseJsonl(abs);
155
+ }
156
+
157
+ function aggregateOutcomeEvents(events, options = {}) {
158
+ const list = Array.isArray(events) ? events : [];
159
+ const now = Date.now();
160
+ const days = Number(options.days || 7);
161
+ const cutoff = now - days * 24 * 60 * 60 * 1000;
162
+ const weekly = list.filter((e) => {
163
+ const ts = Date.parse(e.timestamp || 0);
164
+ return Number.isFinite(ts) && ts >= cutoff;
165
+ });
166
+
167
+ const byCategory = {
168
+ waste_prevented: 0,
169
+ loop_detected: 0,
170
+ output_trimmed: 0,
171
+ risky_skill_flagged: 0,
172
+ patch_suggested: 0,
173
+ permission_consolidated: 0,
174
+ trust_alert: 0,
175
+ pricing_signal: 0,
176
+ intel_signal: 0,
177
+ other: 0,
178
+ };
179
+
180
+ let measuredTotal = 0;
181
+ let counterfactualTotal = 0;
182
+ let measuredCostTotal = 0;
183
+ let estimatedCostCounterfactualTotal = 0;
184
+ let tokenUsageTotal = 0;
185
+ const reasonCounts = {};
186
+
187
+ weekly.forEach((e) => {
188
+ if (byCategory[e.category] === undefined) byCategory.other += 1;
189
+ else byCategory[e.category] += 1;
190
+
191
+ const m = Number(e.measured_value);
192
+ if (Number.isFinite(m)) measuredTotal += m;
193
+ const c = Number(e.estimated_counterfactual_value);
194
+ if (Number.isFinite(c)) counterfactualTotal += c;
195
+
196
+ const metadata = e.metadata || {};
197
+ const cost = numberOrNull(e.attribution?.cost ?? metadata.totalCost);
198
+ const tokens = numberOrNull(e.attribution?.tokenUsage ?? metadata.totalTokens);
199
+ const isCurrency = String(e.value_unit || "") === "currency" || (cost !== null && cost > 0);
200
+
201
+ if (isCurrency && cost !== null && cost > 0) {
202
+ measuredCostTotal += cost;
203
+ if (Number.isFinite(c)) estimatedCostCounterfactualTotal += c;
204
+ }
205
+
206
+ if (tokens !== null && tokens > 0) tokenUsageTotal += tokens;
207
+
208
+ reasonCounts[e.reason_code] = (reasonCounts[e.reason_code] || 0) + 1;
209
+ });
210
+
211
+ const topReasonCodes = Object.keys(reasonCounts)
212
+ .sort((a, b) => reasonCounts[b] - reasonCounts[a])
213
+ .slice(0, 5);
214
+
215
+ const firstSession = list[0]?.session_id || "unknown";
216
+ const repoId = list[0]?.repo_id || "unknown-project";
217
+
218
+ const loopsPrevented = byCategory.loop_detected;
219
+ const contextPressureReduction = byCategory.output_trimmed;
220
+ const riskEventsPrevented = byCategory.risky_skill_flagged + byCategory.trust_alert;
221
+
222
+ const confidenceLabel = weekly.length >= 20 ? "high" : weekly.length >= 8 ? "medium" : "low";
223
+
224
+ return {
225
+ sessionSummary: {
226
+ sessionId: firstSession,
227
+ events: list.filter((x) => x.session_id === firstSession).length,
228
+ measuredValueTotal: measuredTotal,
229
+ estimatedCounterfactualTotal: counterfactualTotal,
230
+ measuredCostTotal: Math.round(measuredCostTotal * 100) / 100,
231
+ estimatedCostCounterfactualTotal: Math.round(estimatedCostCounterfactualTotal * 100) / 100,
232
+ tokenUsageTotal: Math.round(tokenUsageTotal),
233
+ legacyMixedUnitTotals: {
234
+ measuredValueTotal: measuredTotal,
235
+ estimatedCounterfactualTotal: counterfactualTotal,
236
+ },
237
+ costAwareTotals: {
238
+ measuredCostTotal: Math.round(measuredCostTotal * 100) / 100,
239
+ estimatedCostCounterfactualTotal: Math.round(estimatedCostCounterfactualTotal * 100) / 100,
240
+ tokenUsageTotal: Math.round(tokenUsageTotal),
241
+ },
242
+ topReasonCodes,
243
+ },
244
+ weeklyRepoSummary: {
245
+ repoId,
246
+ days,
247
+ events: weekly.length,
248
+ measuredValueTotal: measuredTotal,
249
+ estimatedCounterfactualTotal: counterfactualTotal,
250
+ measuredCostTotal: Math.round(measuredCostTotal * 100) / 100,
251
+ estimatedCostCounterfactualTotal: Math.round(estimatedCostCounterfactualTotal * 100) / 100,
252
+ tokenUsageTotal: Math.round(tokenUsageTotal),
253
+ legacyMixedUnitTotals: {
254
+ measuredValueTotal: measuredTotal,
255
+ estimatedCounterfactualTotal: counterfactualTotal,
256
+ },
257
+ costAwareTotals: {
258
+ measuredCostTotal: Math.round(measuredCostTotal * 100) / 100,
259
+ estimatedCostCounterfactualTotal: Math.round(estimatedCostCounterfactualTotal * 100) / 100,
260
+ tokenUsageTotal: Math.round(tokenUsageTotal),
261
+ },
262
+ byCategory,
263
+ },
264
+ savingsSummary: {
265
+ minutesSavedEstimate: Math.max(0, loopsPrevented * 3),
266
+ contextPressureReduction,
267
+ loopsPrevented,
268
+ confidenceLabel,
269
+ },
270
+ riskSummary: {
271
+ riskEventsPrevented,
272
+ highRiskEvents: byCategory.risky_skill_flagged,
273
+ remediationSuggested: byCategory.patch_suggested,
274
+ confidenceLabel,
275
+ },
276
+ };
277
+ }
278
+
279
+ function csvEscape(v) {
280
+ const s = String(v == null ? "" : v);
281
+ if (/[",\n]/.test(s)) return `"${s.replace(/"/g, '""')}"`;
282
+ return s;
283
+ }
284
+
285
+ function toCsv(events) {
286
+ const headers = [
287
+ "event_id",
288
+ "session_id",
289
+ "repo_id",
290
+ "project_id",
291
+ "user_id",
292
+ "timestamp",
293
+ "category",
294
+ "reason_code",
295
+ "measured_value",
296
+ "estimated_counterfactual_value",
297
+ "confidence_score",
298
+ "platform",
299
+ "event_name",
300
+ "action",
301
+ "tool",
302
+ ];
303
+ const lines = [headers.join(",")];
304
+ (events || []).forEach((e) => {
305
+ const row = headers.map((h) => csvEscape(e[h]));
306
+ lines.push(row.join(","));
307
+ });
308
+ return lines.join("\n") + "\n";
309
+ }
310
+
311
+ function exportOutcomeEvents(cwd, options = {}) {
312
+ const events = Array.isArray(options.events) ? options.events : readOutcomeEvents(cwd);
313
+ const ts = nowIso().replace(/[:.]/g, "-");
314
+ const jsonRel = path.posix.join(OUTCOME_EXPORTS_REL, `outcomes-${ts}.json`);
315
+ const csvRel = path.posix.join(OUTCOME_EXPORTS_REL, `outcomes-${ts}.csv`);
316
+
317
+ const jsonAbs = path.join(cwd, jsonRel);
318
+ const csvAbs = path.join(cwd, csvRel);
319
+ ensureDirFor(jsonAbs);
320
+ fs.writeFileSync(jsonAbs, JSON.stringify({
321
+ version: 2,
322
+ generatedAt: nowIso(),
323
+ count: events.length,
324
+ aggregation: aggregateOutcomeEvents(events, { days: Number(options.days || 7) }),
325
+ events,
326
+ }, null, 2), "utf8");
327
+
328
+ ensureDirFor(csvAbs);
329
+ fs.writeFileSync(csvAbs, toCsv(events), "utf8");
330
+
331
+ return { jsonRel, csvRel, count: events.length };
332
+ }
333
+
334
+ function buildUnifiedEventEnvelope(params) {
335
+ const metric = params?.metric || {};
336
+ const platform = params?.platform || "claude";
337
+ const projectId = params?.projectId || "unknown-project";
338
+
339
+ return {
340
+ version: 1,
341
+ platform,
342
+ eventName: metric.event || "UnknownEvent",
343
+ sessionId: metric.sessionId || "unknown",
344
+ repoId: projectId,
345
+ ts: metric.ts || nowIso(),
346
+ signals: {
347
+ tool: metric.tool || null,
348
+ action: metric.action || null,
349
+ meta: metric.meta || {},
350
+ },
351
+ reasonCodes: metric.reasonCodes || [],
352
+ confidence: confidenceFromReasonCodes(metric.reasonCodes || []),
353
+ };
354
+ }
355
+
356
+ function appendUnifiedEvents(cwd, envelopes) {
357
+ const abs = path.join(cwd, OUTBOX_REL);
358
+ appendJsonl(abs, envelopes || []);
359
+ return abs;
360
+ }
361
+
362
+ function buildUnifiedBenefitRecord(params) {
363
+ const weekly = params?.weekly || {};
364
+ const platform = params?.platform || "claude";
365
+ const savings = weekly.savingsFirstSummary || {};
366
+
367
+ return {
368
+ version: 1,
369
+ sourcePlatform: platform,
370
+ minutesSavedEstimate: Number(savings.estimatedMinutesSaved || 0),
371
+ riskEventsPrevented: Number(weekly.riskyIntercepts || 0),
372
+ contextPressureDelta: -1 * Number(savings.outputsTrimmed || weekly.largeOutputsStored || 0),
373
+ confidenceLabel: savings.confidenceLabel || (Number(weekly.sessions || 0) >= 5 ? "medium" : "low"),
374
+ };
375
+ }
376
+
377
+ function readOutbox(cwd) {
378
+ const abs = path.join(cwd, OUTBOX_REL);
379
+ return parseJsonl(abs);
380
+ }
381
+
382
+ module.exports = {
383
+ OUTBOX_REL,
384
+ OUTCOME_EVENTS_REL,
385
+ OUTCOME_EXPORTS_REL,
386
+ confidenceFromReasonCodes,
387
+ buildOutcomeEvent,
388
+ appendOutcomeEvents,
389
+ readOutcomeEvents,
390
+ aggregateOutcomeEvents,
391
+ exportOutcomeEvents,
392
+ buildUnifiedEventEnvelope,
393
+ buildUnifiedBenefitRecord,
394
+ appendUnifiedEvents,
395
+ readOutbox,
396
+ };