cli-jaw 2.2.16 → 2.2.17

package/dist/src/core/event-scope.js

@@ -0,0 +1,100 @@
+// ─── Scoped SSE delivery rule (072 §1.3a) ────────────
+// A browser tab bound to one chat session connects with `?scope=`, and the route
+// filters on strict equality against `data.scope`. That filter alone is not enough,
+// because `broadcast()` stamps the ambient session scope onto EVERY event published
+// inside a session's async context (core/bus.ts). Instance-wide events published
+// during an agent turn — a heartbeat, a settings reload — therefore carry that
+// session's scope and would vanish from every other tab.
+//
+// So delivery asks two questions in order: is this event instance-wide (deliver to
+// everyone regardless of the scope it happens to carry), and otherwise does its scope
+// match the connection. The judgement is "does one session own this event", not "is it
+// topology". An event wrongly marked instance-wide is just noise in a tab; an event
+// wrongly marked session-owned disappears.
+import { DELIVERY_KEY_GLOBAL, DELIVERY_KEY_NONE, isPublicSseTopic } from './event-bus.js';
+// Instance-wide events. Every tab needs these regardless of which session's async
+// context happened to publish them.
+export const INSTANCE_WIDE_EVENTS = new Set([
+    // The session list itself — a tab must see sessions appear and disappear.
+    'session_created',
+    'session_list',
+    // Instance configuration and inventory.
+    'settings_change',
+    'agent_added',
+    'agent_updated',
+    'agent_deleted',
+    // Instance-wide subsystems with no session dimension.
+    'memory_status',
+    'heartbeat_pending',
+    'bgtask_update',
+    'alert_escalation',
+    'schedule_wakeup',
+    'schedule_wakeup_failed',
+    // A global switch is published outside any session context, so it carries no scope
+    // and a strict filter would drop it from every scoped tab — leaving each of them
+    // showing a stale idea of which session is active.
+    'session_switched',
+]);
+// `system_notice` is a mixed bag: some notices describe one session's turn and some
+// describe the instance. Classifying the whole type either way is wrong, so the code
+// decides. An unrecognised code is treated as instance-wide, which is the safe error:
+// an extra notice is noise, a missing one is invisible.
+//
+// The code is not sufficient on its own. `auto_compact_refresh` is published both by a
+// session's own turn AND by the instance-wide reset in session-ops, and only the first
+// carries a scope. A notice with no scope has no session to belong to, so it is
+// delivered everywhere rather than nowhere.
+const SESSION_OWNED_NOTICE_CODES = new Set([
+    'compact_suggest',
+    'auto_compact_refresh',
+]);
+function isSessionOwnedNotice(data) {
+    const code = data["code"];
+    return typeof code === 'string'
+        && SESSION_OWNED_NOTICE_CODES.has(code)
+        && typeof data["scope"] === 'string';
+}
+// Goal state is a single instance-wide file with no session field (goal/store.ts).
+// A goal finished in one tab must clear the cockpit in every tab, so goal events are
+// delivered everywhere even though a turn in one session produced them.
+export function isInstanceWideEvent(event) {
+    return INSTANCE_WIDE_EVENTS.has(event) || event.startsWith('goal_');
+}
+export function shouldDeliverToScope(entry, scopeFilter) {
+    // No filter means "everything", which is what manager and worker connections rely on.
+    if (!scopeFilter)
+        return true;
+    if (entry.event === 'system_notice') {
+        return isSessionOwnedNotice(entry.data)
+            ? entry.data["scope"] === scopeFilter
+            : true;
+    }
+    if (isInstanceWideEvent(entry.event))
+        return true;
+    return entry.data["scope"] === scopeFilter;
+}
+/**
+ * The delivery class of an event, for the replay-gap watermarks in the bus.
+ *
+ * It answers the same questions as delivery, in the same order, because a gap check that
+ * classified events differently from the filter would report losses that never happened
+ * and miss ones that did. The route drops non-public topics before it looks at scope, so
+ * that comes first here too: an event no subscriber can see costs nobody anything when it
+ * ages out.
+ */
+export function deliveryKeyForEntry(entry) {
+    if (!isPublicSseTopic(entry.topic))
+        return DELIVERY_KEY_NONE;
+    if (entry.event === 'system_notice') {
+        // A compact suggestion belongs to the session that raised it; every other notice
+        // is for the whole instance.
+        return isSessionOwnedNotice(entry.data)
+            ? String(entry.data["scope"])
+            : DELIVERY_KEY_GLOBAL;
+    }
+    if (isInstanceWideEvent(entry.event))
+        return DELIVERY_KEY_GLOBAL;
+    const scope = entry.data["scope"];
+    return typeof scope === 'string' && scope ? scope : DELIVERY_KEY_GLOBAL;
+}
+//# sourceMappingURL=event-scope.js.map

package/dist/src/core/event-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-scope.js","sourceRoot":"","sources":["../../../src/core/event-scope.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,iFAAiF;AACjF,oFAAoF;AACpF,oFAAoF;AACpF,iFAAiF;AACjF,+EAA+E;AAC/E,yDAAyD;AACzD,EAAE;AACF,mFAAmF;AACnF,sFAAsF;AACtF,uFAAuF;AACvF,oFAAoF;AACpF,2CAA2C;AAG3C,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAE1F,kFAAkF;AAClF,oCAAoC;AACpC,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAS;IACrE,0EAA0E;IAC1E,iBAAiB;IACjB,cAAc;IACd,wCAAwC;IACxC,iBAAiB;IACjB,aAAa;IACb,eAAe;IACf,eAAe;IACf,sDAAsD;IACtD,eAAe;IACf,mBAAmB;IACnB,eAAe;IACf,kBAAkB;IAClB,iBAAiB;IACjB,wBAAwB;IACxB,mFAAmF;IACnF,iFAAiF;IACjF,mDAAmD;IACnD,kBAAkB;CACrB,CAAC,CAAC;AAEH,oFAAoF;AACpF,qFAAqF;AACrF,sFAAsF;AACtF,wDAAwD;AACxD,EAAE;AACF,uFAAuF;AACvF,uFAAuF;AACvF,gFAAgF;AAChF,4CAA4C;AAC5C,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAS;IACpE,iBAAiB;IACjB,sBAAsB;CACzB,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAAC,IAA6B;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,OAAO,IAAI,KAAK,QAAQ;WACxB,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC;WACpC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;AAC7C,CAAC;AAED,mFAAmF;AACnF,qFAAqF;AACrF,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC7C,OAAO,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAe,EAAE,WAA+B;IACjF,sFAAsF;IACtF,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QAClC,OAAO,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC;YACnC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,WAAW;YACrC,CAAC,CAAC,IAAI,CAAC;IACf,CAAC;IACD,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,WAAW,CAAC;AAC/C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAe;IAC/C,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAC7D,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QAClC,iFAAiF;QACjF,6BAA6B;QAC7B,OAAO,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC;YACnC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC,CAAC,mBAAmB,CAAC;IAC9B,CAAC;IACD,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,mBAAmB,CAAC;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC;AAC5E,CAAC"}

package/dist/src/core/main-session.js

@@ -2,7 +2,8 @@ import { broadcast } from './bus.js';
 import { DEFAULT_CLI } from '../cli/registry.js';
 import { settings } from './config.js';
 import { db, clearMessages, clearMessagesScoped, getSession, updateSession } from './db.js';
-import { getActiveChatSession } from './chat-sessions.js';
+import { getActiveChatSession, getChatSessionRemoteKey } from './chat-sessions.js';
+import { scopeForChatSession } from '../orchestrator/scope.js';
 export function getCliModelAndEffort(cli, currentSettings = settings) {
     const ao = currentSettings["activeOverrides"]?.[cli] || {};
     const pc = currentSettings["perCli"]?.[cli] || {};
@@ -42,9 +43,26 @@ export function buildClearedSessionRow(currentSettings = settings, session = nul
         effort,
     };
 }
-export function writeMainSessionRow(row) {
+/**
+ * The `session` row is a single row for the whole instance, and the instance web owns
+ * what it holds (074). Callers that speak for the instance — a settings change, a CLI
+ * switch — write it unconditionally. Callers acting for one session pass false when
+ * that session is not the default one, so clearing a Slack thread cannot rewrite the
+ * CLI and model every other session reads.
+ *
+ * The decision is the caller's rather than this function's: it is also on the path of
+ * instance-wide writes, and refusing there would stop a second browser tab from
+ * updating the mirror after a legitimate change.
+ */
+export function writeMainSessionRow(row, ownsSingletonRow = true) {
+    if (!ownsSingletonRow)
+        return;
     updateSession.run(row.cli, row.sessionId, row.model, row.permissions, row.workingDir, row.effort);
 }
+/** True when the caller's session is the one that owns the shared row. */
+function currentSessionOwnsSingletonRow() {
+    return getActiveChatSession() === 'default';
+}
 export function syncMainSessionToSettings(prevCli = null) {
     const session = getSession();
     const row = buildSelectedSessionRow(settings, session, prevCli);
@@ -55,20 +73,29 @@ export function syncMainSessionToSettings(prevCli = null) {
     return row;
 }
 // Atomic: delete messages + update session in one transaction
-const clearMainTx = db.transaction((row) => {
+const clearMainTx = db.transaction((row, ownsSingletonRow) => {
     if (row.workingDir && row.workingDir !== '~') {
         clearMessagesScoped.run(row.workingDir, getActiveChatSession());
     }
     else {
         clearMessages.run(getActiveChatSession());
     }
-    writeMainSessionRow(row);
+    writeMainSessionRow(row, ownsSingletonRow);
 });
 export function clearMainSessionState() {
     const session = getSession();
     const row = buildClearedSessionRow(settings, session);
-    clearMainTx(row);
-    broadcast('clear', {});
+    // History is this session's to delete; the shared runtime selection is not.
+    const ownsSingletonRow = currentSessionOwnsSingletonRow();
+    // Capture the session BEFORE the transaction so the notice names exactly the history
+    // that was deleted. Without a scope on it, a scoped tab drops the event and keeps
+    // showing messages that no longer exist — including the tab whose history this was.
+    const clearedSessionId = getActiveChatSession();
+    clearMainTx(row, ownsSingletonRow);
+    broadcast('clear', {
+        scope: scopeForChatSession(clearedSessionId, getChatSessionRemoteKey(clearedSessionId) ?? undefined),
+        sessionId: clearedSessionId,
+    });
     return row;
 }
 /** Reset boss session ID (prevents stale --resume) but preserves message history. */
@@ -82,8 +109,14 @@ export function clearBossSessionOnly() {
 export function resetSessionPreservingHistory() {
     const session = getSession();
     const row = buildClearedSessionRow(settings, session);
-    writeMainSessionRow(row);
-    broadcast('session_reset', { cli: row.cli, model: row.model });
+    writeMainSessionRow(row, currentSessionOwnsSingletonRow());
+    const resetSessionId = getActiveChatSession();
+    broadcast('session_reset', {
+        cli: row.cli,
+        model: row.model,
+        scope: scopeForChatSession(resetSessionId, getChatSessionRemoteKey(resetSessionId) ?? undefined),
+        sessionId: resetSessionId,
+    });
     return row;
 }
 // ─── Pending bootstrap prompt (1-shot consumption, DB-backed) ───
@@ -96,10 +129,18 @@ import { getMemory, upsertMemory, deleteMemory } from './db.js';
 import { log } from './logger.js';
 const BOOTSTRAP_KEY = '__bootstrap_prompt';
 const BOOTSTRAP_SOURCE = '__system_bootstrap';
-function readBootstrapRow() {
+// A compact summary belongs to the conversation that produced it. While one main
+// run existed at a time a single row was enough; with several scopes in flight the
+// first spawn to look would take someone else's handoff. Scoped rows get their own
+// key and the bare key stays the default scope's, which is what existing rows are.
+function bootstrapKeyFor(scopeKey) {
+    return !scopeKey || scopeKey === 'default' ? BOOTSTRAP_KEY : `${BOOTSTRAP_KEY}:${scopeKey}`;
+}
+function readBootstrapRow(scopeKey) {
     try {
+        const key = bootstrapKeyFor(scopeKey);
         const rows = getMemory.all();
-        const row = rows.find(r => r.key === BOOTSTRAP_KEY && r.source === BOOTSTRAP_SOURCE);
+        const row = rows.find(r => r.key === key && r.source === BOOTSTRAP_SOURCE);
         return row?.value && row.value.trim() ? row.value : null;
     }
     catch (e) {
@@ -107,13 +148,14 @@ function readBootstrapRow() {
         return null;
     }
 }
-export function setPendingBootstrapPrompt(text) {
+export function setPendingBootstrapPrompt(text, scopeKey) {
     try {
+        const key = bootstrapKeyFor(scopeKey);
         if (text && text.trim()) {
-            upsertMemory.run(BOOTSTRAP_KEY, text, BOOTSTRAP_SOURCE);
+            upsertMemory.run(key, text, BOOTSTRAP_SOURCE);
         }
         else {
-            deleteMemory.run(BOOTSTRAP_KEY);
+            deleteMemory.run(key);
         }
     }
     catch (e) {
@@ -122,19 +164,20 @@ export function setPendingBootstrapPrompt(text) {
 }
 // Strict variant: throws on DB failure. Use inside transactions where the caller
 // must know about persistence loss so the surrounding tx can roll back.
-export function setPendingBootstrapPromptStrict(text) {
+export function setPendingBootstrapPromptStrict(text, scopeKey) {
+    const key = bootstrapKeyFor(scopeKey);
     if (text && text.trim()) {
-        upsertMemory.run(BOOTSTRAP_KEY, text, BOOTSTRAP_SOURCE);
+        upsertMemory.run(key, text, BOOTSTRAP_SOURCE);
     }
     else {
-        deleteMemory.run(BOOTSTRAP_KEY);
+        deleteMemory.run(key);
     }
 }
-export function consumePendingBootstrapPrompt() {
-    const out = readBootstrapRow();
+export function consumePendingBootstrapPrompt(scopeKey) {
+    const out = readBootstrapRow(scopeKey);
     if (out) {
         try {
-            deleteMemory.run(BOOTSTRAP_KEY);
+            deleteMemory.run(bootstrapKeyFor(scopeKey));
         }
         catch (e) {
             console.warn('[jaw:bootstrap] consume delete failed:', e.message);
@@ -142,7 +185,7 @@ export function consumePendingBootstrapPrompt() {
     }
     return out;
 }
-export function peekPendingBootstrapPrompt() {
-    return readBootstrapRow();
+export function peekPendingBootstrapPrompt(scopeKey) {
+    return readBootstrapRow(scopeKey);
 }
 //# sourceMappingURL=main-session.js.map

package/dist/src/core/main-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"main-session.js","sourceRoot":"","sources":["../../../src/core/main-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAoB1D,MAAM,UAAU,oBAAoB,CAChC,GAAW,EACX,kBAAuC,QAAQ;IAE/C,MAAM,EAAE,GAAG,eAAe,CAAC,iBAAiB,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3D,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAClD,OAAO;QACH,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,IAAI,SAAS;QACxC,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,IAAI,QAAQ;KAC7C,CAAC;AACN,CAAC;AAED,MAAM,UAAU,cAAc,CAC1B,YAA4B,EAC5B,kBAAuC,QAAQ,EAC/C,UAAoC,IAAI;IAExC,OAAO,YAAY;WACZ,eAAe,CAAC,KAAK,CAAC;WACtB,OAAO,EAAE,UAAU;WACnB,WAAW,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACnC,kBAAuC,QAAQ,EAC/C,UAAoC,IAAI,EACxC,UAAyB,IAAI;IAE7B,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,OAAO,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC;IACpF,OAAO;QACH,GAAG;QACH,SAAS;QACT,KAAK;QACL,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC,IAAI,MAAM;QACrD,UAAU,EAAE,eAAe,CAAC,YAAY,CAAC,IAAI,GAAG;QAChD,MAAM;KACT,CAAC;AACN,CAAC;AAED,MAAM,UAAU,sBAAsB,CAClC,kBAAuC,QAAQ,EAC/C,UAAoC,IAAI;IAExC,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACrE,OAAO;QACH,GAAG;QACH,SAAS,EAAE,IAAI;QACf,KAAK;QACL,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC,IAAI,MAAM;QACrD,UAAU,EAAE,eAAe,CAAC,YAAY,CAAC,IAAI,GAAG;QAChD,MAAM;KACT,CAAC;AACN,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAmB;IACnD,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAyB,IAAI;IACnE,MAAM,OAAO,GAAG,UAAU,EAAuB,CAAC;IAClD,MAAM,GAAG,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,OAAO,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,2CAA2C,OAAO,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACf,CAAC;AAED,8DAA8D;AAC9D,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,GAAmB,EAAE,EAAE;IACvD,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;QAC3C,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACJ,aAAa,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,mBAAmB,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,qBAAqB;IACjC,MAAM,OAAO,GAAG,UAAU,EAAuB,CAAC;IAClD,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtD,WAAW,CAAC,GAAG,CAAC,CAAC;IACjB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC;AACf,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,oBAAoB;IAChC,MAAM,OAAO,GAAG,UAAU,EAAuB,CAAC;IAClD,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtD,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACf,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,6BAA6B;IACzC,MAAM,OAAO,GAAG,UAAU,EAAuB,CAAC;IAClD,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtD,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,SAAS,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC;AACf,CAAC;AAED,mEAAmE;AACnE,4EAA4E;AAC5E,+EAA+E;AAC/E,8DAA8D;AAC9D,EAAE;AACF,sEAAsE;AAEtE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAE9C,SAAS,gBAAgB;IACrB,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAA2D,CAAC;QACtF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,aAAa,IAAI,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC;QACrF,OAAO,GAAG,EAAE,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,IAAI,CAAC,0CAA0C,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAmB;IACzD,IAAI,CAAC;QACD,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACtB,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACJ,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,IAAI,CAAC,mDAAmD,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;IAC5F,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,wEAAwE;AACxE,MAAM,UAAU,+BAA+B,CAAC,IAAmB;IAC/D,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACtB,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC5D,CAAC;SAAM,CAAC;QACJ,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACpC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B;IACzC,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,IAAI,GAAG,EAAE,CAAC;QACN,IAAI,CAAC;YAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAAC,CAAC;QACxC,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;IAC/F,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B;IACtC,OAAO,gBAAgB,EAAE,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"main-session.js","sourceRoot":"","sources":["../../../src/core/main-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAoB/D,MAAM,UAAU,oBAAoB,CAChC,GAAW,EACX,kBAAuC,QAAQ;IAE/C,MAAM,EAAE,GAAG,eAAe,CAAC,iBAAiB,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3D,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAClD,OAAO;QACH,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,IAAI,SAAS;QACxC,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,IAAI,QAAQ;KAC7C,CAAC;AACN,CAAC;AAED,MAAM,UAAU,cAAc,CAC1B,YAA4B,EAC5B,kBAAuC,QAAQ,EAC/C,UAAoC,IAAI;IAExC,OAAO,YAAY;WACZ,eAAe,CAAC,KAAK,CAAC;WACtB,OAAO,EAAE,UAAU;WACnB,WAAW,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACnC,kBAAuC,QAAQ,EAC/C,UAAoC,IAAI,EACxC,UAAyB,IAAI;IAE7B,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,OAAO,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC;IACpF,OAAO;QACH,GAAG;QACH,SAAS;QACT,KAAK;QACL,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC,IAAI,MAAM;QACrD,UAAU,EAAE,eAAe,CAAC,YAAY,CAAC,IAAI,GAAG;QAChD,MAAM;KACT,CAAC;AACN,CAAC;AAED,MAAM,UAAU,sBAAsB,CAClC,kBAAuC,QAAQ,EAC/C,UAAoC,IAAI;IAExC,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACrE,OAAO;QACH,GAAG;QACH,SAAS,EAAE,IAAI;QACf,KAAK;QACL,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC,IAAI,MAAM;QACrD,UAAU,EAAE,eAAe,CAAC,YAAY,CAAC,IAAI,GAAG;QAChD,MAAM;KACT,CAAC;AACN,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAmB,EAAE,gBAAgB,GAAG,IAAI;IAC5E,IAAI,CAAC,gBAAgB;QAAE,OAAO;IAC9B,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;AACtG,CAAC;AAED,0EAA0E;AAC1E,SAAS,8BAA8B;IACnC,OAAO,oBAAoB,EAAE,KAAK,SAAS,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAyB,IAAI;IACnE,MAAM,OAAO,GAAG,UAAU,EAAuB,CAAC;IAClD,MAAM,GAAG,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,OAAO,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,2CAA2C,OAAO,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACf,CAAC;AAED,8DAA8D;AAC9D,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,GAAmB,EAAE,gBAAyB,EAAE,EAAE;IAClF,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;QAC3C,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACJ,aAAa,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,qBAAqB;IACjC,MAAM,OAAO,GAAG,UAAU,EAAuB,CAAC;IAClD,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtD,4EAA4E;IAC5E,MAAM,gBAAgB,GAAG,8BAA8B,EAAE,CAAC;IAC1D,qFAAqF;IACrF,kFAAkF;IAClF,oFAAoF;IACpF,MAAM,gBAAgB,GAAG,oBAAoB,EAAE,CAAC;IAChD,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACnC,SAAS,CAAC,OAAO,EAAE;QACf,KAAK,EAAE,mBAAmB,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,gBAAgB,CAAC,IAAI,SAAS,CAAC;QACpG,SAAS,EAAE,gBAAgB;KAC9B,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACf,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,oBAAoB;IAChC,MAAM,OAAO,GAAG,UAAU,EAAuB,CAAC;IAClD,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtD,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACf,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,6BAA6B;IACzC,MAAM,OAAO,GAAG,UAAU,EAAuB,CAAC;IAClD,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtD,mBAAmB,CAAC,GAAG,EAAE,8BAA8B,EAAE,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,oBAAoB,EAAE,CAAC;IAC9C,SAAS,CAAC,eAAe,EAAE;QACvB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK,EAAE,mBAAmB,CAAC,cAAc,EAAE,uBAAuB,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;QAChG,SAAS,EAAE,cAAc;KAC5B,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACf,CAAC;AAED,mEAAmE;AACnE,4EAA4E;AAC5E,+EAA+E;AAC/E,8DAA8D;AAC9D,EAAE;AACF,sEAAsE;AAEtE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAE9C,iFAAiF;AACjF,mFAAmF;AACnF,mFAAmF;AACnF,mFAAmF;AACnF,SAAS,eAAe,CAAC,QAAwB;IAC7C,OAAO,CAAC,QAAQ,IAAI,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,IAAI,QAAQ,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAwB;IAC9C,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAA2D,CAAC;QACtF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC;QAC3E,OAAO,GAAG,EAAE,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,IAAI,CAAC,0CAA0C,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAmB,EAAE,QAAwB;IACnF,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACtB,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACJ,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,IAAI,CAAC,mDAAmD,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;IAC5F,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,wEAAwE;AACxE,MAAM,UAAU,+BAA+B,CAAC,IAAmB,EAAE,QAAwB;IACzF,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACtB,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACJ,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAAwB;IAClE,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,GAAG,EAAE,CAAC;QACN,IAAI,CAAC;YAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAC,CAAC;QACpD,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;IAC/F,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAwB;IAC/D,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC"}

package/dist/src/core/message-summary.js

@@ -1,7 +1,16 @@
 const TITLE_MAX_CHARS = 64;
+/**
+ * 첨부 프롬프트의 머리 블록. 파일/이미지/동영상 세 변형과 다중 헤더를 모두
+ * 덮는다. 한 가지만 알면 나머지 변형에서 업로드 절대경로가 활동 제목으로
+ * 새어나간다 (devlog 260806_slack_multifile_ingest/010 D-5).
+ */
+// 조사가 다르다: 파일"을" / 이미지"를" / 동영상"을".
+const SENT_PREFIX = /^\[(?:사용자가 (?:파일을|이미지를|동영상을) 보냈습니다:[^\]]+|사용자가 파일 \d+개를 보냈습니다)\]\s*/u;
+/** 다중 목록의 번호 줄(`1. [이미지] /path`)도 제목이 되면 안 된다. */
+const NUMBERED_ENTRY = /^\d+\.\s+\[(?:이미지|동영상|파일)\]\s/u;
 function stripKnownPrefixes(line) {
     return line
-        .replace(/^\[사용자가 파일을 보냈습니다:[^\]]+\]\s*/u, '')
+        .replace(SENT_PREFIX, '')
         .replace(/^사용자 메시지:\s*/u, '')
         .replace(/^user message:\s*/iu, '')
         .replace(/^assistant:\s*/iu, '')
@@ -30,7 +39,8 @@ export function cleanDashboardActivityTitle(input) {
         .split('\n')
         .map(line => stripMarkdown(stripKnownPrefixes(line)).replace(/\s+/g, ' ').trim())
         .filter(Boolean)
-        .filter(line => !line.startsWith('[사용자가 파일을 보냈습니다:'))
+        .filter(line => !SENT_PREFIX.test(line))
+        .filter(line => !NUMBERED_ENTRY.test(line))
         .filter(line => !/^```/.test(line));
     return lines[0] ? clipTitle(lines[0]) : '';
 }

package/dist/src/core/message-summary.js.map

@@ -1 +1 @@
-{"version":3,"file":"message-summary.js","sourceRoot":"","sources":["../../../src/core/message-summary.ts"],"names":[],"mappings":"AAAA,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,SAAS,kBAAkB,CAAC,IAAY;IACpC,OAAO,IAAI;SACN,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC;SAC7C,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;SAClC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,IAAI,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IAC/B,OAAO,IAAI;SACN,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;SACzB,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;SACxB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC;SACjC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC;SAC7B,OAAO,CAAC,wBAAwB,EAAE,IAAI,CAAC;SACvC,IAAI,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC5B,IAAI,KAAK,CAAC,MAAM,IAAI,eAAe;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SAC5B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;SAChF,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;SACpD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAAoB;IAClE,MAAM,KAAK,GAAG,2BAA2B,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACvD,OAAO,KAAK,IAAI,IAAI,CAAC;AACzB,CAAC"}
+{"version":3,"file":"message-summary.js","sourceRoot":"","sources":["../../../src/core/message-summary.ts"],"names":[],"mappings":"AAAA,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B;;;;GAIG;AACH,oCAAoC;AACpC,MAAM,WAAW,GAAG,sEAAsE,CAAC;AAC3F,kDAAkD;AAClD,MAAM,cAAc,GAAG,gCAAgC,CAAC;AAExD,SAAS,kBAAkB,CAAC,IAAY;IACpC,OAAO,IAAI;SACN,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;SACxB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;SAClC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,IAAI,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IAC/B,OAAO,IAAI;SACN,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;SACzB,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;SACxB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC;SACjC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC;SAC7B,OAAO,CAAC,wBAAwB,EAAE,IAAI,CAAC;SACvC,IAAI,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC5B,IAAI,KAAK,CAAC,MAAM,IAAI,eAAe;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SAC5B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;SAChF,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACvC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC1C,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAAoB;IAClE,MAAM,KAAK,GAAG,2BAA2B,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACvD,OAAO,KAAK,IAAI,IAAI,CAAC;AACzB,CAAC"}

package/dist/src/core/platform-kind.js

@@ -0,0 +1,139 @@
+/**
+ * Canonical platform classification for cli-jaw.
+ *
+ * Single source of truth for "am I on native Windows / in WSL / on plain
+ * Linux". Every rule takes its inputs as parameters so the whole matrix is
+ * testable on one CI OS.
+ *
+ * Design rationale and primary sources:
+ * devlog/_plan/260805_windows_native_detection/001_platform_signal_research.md
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+export const defaultPlatformProbes = {
+    readText(path) {
+        try {
+            return fs.readFileSync(path, 'utf8');
+        }
+        catch {
+            return null;
+        }
+    },
+    exists(path) {
+        try {
+            return fs.existsSync(path);
+        }
+        catch {
+            return false;
+        }
+    },
+    release() {
+        try {
+            return os.release();
+        }
+        catch {
+            return '';
+        }
+    },
+};
+/**
+ * WSL markers that only ever exist inside a WSL *Linux* process.
+ *
+ * WSLENV is deliberately absent: Microsoft documents it as shared with the
+ * Windows host (it is what configures env-var translation across the
+ * boundary), so testing it misclassifies native Windows as WSL.
+ */
+const WSL_ENV_KEYS = ['WSL_DISTRO_NAME', 'WSL_INTEROP'];
+const WSL_PATH_MARKERS = ['/run/WSL', '/proc/sys/fs/binfmt_misc/WSLInterop'];
+function hasWslEnvMarker(env) {
+    return WSL_ENV_KEYS.some((key) => !!env[key]);
+}
+function hasWslPathMarker(probes) {
+    return WSL_PATH_MARKERS.some((markerPath) => probes.exists(markerPath));
+}
+function hasWslKernelMarker(probes) {
+    // `||` not `??`: an unreadable probe returns null, but a mounted-but-empty
+    // /proc under a restricted container returns '', and both must fall
+    // through to os.release().
+    const osrelease = probes.readText('/proc/sys/kernel/osrelease')?.trim() || probes.release();
+    if (osrelease.toLowerCase().includes('microsoft'))
+        return true;
+    const version = probes.readText('/proc/version');
+    return !!version && version.toLowerCase().includes('microsoft');
+}
+export function resolvePlatformKind(platform = process.platform, env = process.env, probes = defaultPlatformProbes) {
+    // STRICT: a win32 process is a Win32 binary. WSL env vars leaking in from
+    // the host (WSLENV, or anything a user exported) can never change this.
+    if (platform === 'win32')
+        return 'windows-native';
+    if (platform === 'darwin')
+        return 'darwin';
+    if (platform !== 'linux')
+        return 'other';
+    if (hasWslEnvMarker(env) || hasWslPathMarker(probes) || hasWslKernelMarker(probes)) {
+        return 'wsl';
+    }
+    return 'linux';
+}
+/**
+ * Takes only `platform` on purpose: adding env inputs would reintroduce the
+ * exact class of bug this module exists to prevent.
+ */
+export function isWindowsNative(platform = process.platform) {
+    return platform === 'win32';
+}
+export function isWsl(platform = process.platform, env = process.env, probes = defaultPlatformProbes) {
+    return resolvePlatformKind(platform, env, probes) === 'wsl';
+}
+/**
+ * True when a Win32 process appears to have been launched from a WSL shell,
+ * i.e. Windows Node running against a WSL working directory. Global npm
+ * installs then land on the Windows side rather than in the distro.
+ *
+ * Keyed on the working directory, not the environment. A Win32 process started
+ * from inside a distro has its cwd on the WSL filesystem, which Windows spells
+ * as the UNC prefix `\\wsl$\<distro>` or `\\wsl.localhost\<distro>`. Every
+ * environment variable is ambiguous here: native Windows with interop
+ * configured and Windows-Node-from-WSL both carry WSLENV.
+ *
+ * Both parameters are required. There is no useful default: inside an npm
+ * lifecycle script `process.cwd()` is the installed package root, not where
+ * the user ran npm. Use `resolveInvocationCwd()` to obtain the right value.
+ *
+ * This is a HEURISTIC, and weaker than resolvePlatformKind's taxonomy. Two
+ * known holes, both inherent to a cwd-based signal:
+ *   - false negative: the user cd's to a Windows path (e.g. /mnt/c/src) inside
+ *     a WSL shell before invoking npm, so the cwd is an ordinary drive path;
+ *   - false positive: a native PowerShell session whose cwd is a \\wsl$ share.
+ *
+ * Do not describe this function as strict. The strictness guarantee belongs to
+ * resolvePlatformKind, which can never confuse windows-native with wsl; this
+ * only decides whether to print an advisory warning.
+ */
+export function isWindowsNodeLaunchedFromWsl(platform, cwd) {
+    if (platform !== 'win32')
+        return false;
+    if (!cwd)
+        return false;
+    const normalized = cwd.replace(/\//g, '\\').toLowerCase();
+    return normalized.startsWith('\\\\wsl$\\') || normalized.startsWith('\\\\wsl.localhost\\');
+}
+/**
+ * The directory the user actually invoked the command from.
+ *
+ * npm sets INIT_CWD to the directory where `npm` was originally run, while the
+ * lifecycle script itself executes from the package root. Outside an npm
+ * lifecycle INIT_CWD is absent and process.cwd() is already correct.
+ */
+export function resolveInvocationCwd(env = process.env) {
+    const initCwd = env['INIT_CWD'];
+    if (initCwd && initCwd.trim())
+        return initCwd;
+    try {
+        return process.cwd();
+    }
+    catch {
+        return '';
+    }
+}
+//# sourceMappingURL=platform-kind.js.map

package/dist/src/core/platform-kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-kind.js","sourceRoot":"","sources":["../../../src/core/platform-kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AAazB,MAAM,CAAC,MAAM,qBAAqB,GAAmB;IACjD,QAAQ,CAAC,IAAI;QACT,IAAI,CAAC;YAAC,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IACxE,CAAC;IACD,MAAM,CAAC,IAAI;QACP,IAAI,CAAC;YAAC,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC/D,CAAC;IACD,OAAO;QACH,IAAI,CAAC;YAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACrD,CAAC;CACJ,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,CAAC,iBAAiB,EAAE,aAAa,CAAU,CAAC;AACjE,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,qCAAqC,CAAU,CAAC;AAEtF,SAAS,eAAe,CAAC,GAAsB;IAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAsB;IAC5C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAsB;IAC9C,2EAA2E;IAC3E,oEAAoE;IACpE,2BAA2B;IAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;IAC5F,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACjD,OAAO,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAC/B,WAA4B,OAAO,CAAC,QAAQ,EAC5C,MAAyB,OAAO,CAAC,GAAG,EACpC,SAAyB,qBAAqB;IAE9C,0EAA0E;IAC1E,wEAAwE;IACxE,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,gBAAgB,CAAC;IAClD,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC3C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IAEzC,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjF,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC3B,WAA4B,OAAO,CAAC,QAAQ;IAE5C,OAAO,QAAQ,KAAK,OAAO,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,KAAK,CACjB,WAA4B,OAAO,CAAC,QAAQ,EAC5C,MAAyB,OAAO,CAAC,GAAG,EACpC,SAAyB,qBAAqB;IAE9C,OAAO,mBAAmB,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,KAAK,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,4BAA4B,CACxC,QAAyB,EACzB,GAAW;IAEX,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,OAAO,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IAChC,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,CAAC;QAAC,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACtD,CAAC"}

package/dist/src/core/rate-limit.js

@@ -0,0 +1,156 @@
+const DEFAULT_CONFIG = {
+    windowMs: 60_000,
+    budgets: {
+        cli: { poll: 600, mutate: 240, general: 600 },
+        manager: { poll: 600, mutate: 240, general: 600 },
+        browser: { poll: 300, mutate: 120, general: 300 },
+        lan: { poll: 120, mutate: 120, general: 120 },
+        remote: { poll: 60, mutate: 30, general: 120 },
+    },
+    nonLoopbackTotalLimit: 120,
+};
+const EXEMPT_PATH_PREFIXES = [
+    '/api/orchestrate/worker-runs',
+    '/api/orchestrate/worker/',
+    '/api/orchestrate/worker-progress',
+];
+function isLoopback(ip) {
+    return ip === '127.0.0.1' || ip === '::1' || ip === '::ffff:127.0.0.1';
+}
+export function classifyClient(opts) {
+    // Network position is authoritative: remote headers cannot buy a loopback budget.
+    if (!isLoopback(opts.ip)) {
+        if (opts.lanAllowed && opts.isPrivateIp(opts.ip))
+            return 'lan';
+        return 'remote';
+    }
+    if (opts.authHeader === `Bearer ${opts.authToken}`)
+        return 'cli';
+    if (opts.internalHeader !== undefined)
+        return 'manager';
+    return 'browser';
+}
+export function classifyPath(method, path) {
+    const normalizedMethod = method.toUpperCase();
+    if (normalizedMethod !== 'GET' && normalizedMethod !== 'HEAD')
+        return 'mutate';
+    if (path === '/api/status'
+        || path === '/api/health'
+        || path === '/api/messages/latest'
+        || path === '/api/goal')
+        return 'poll';
+    return 'general';
+}
+function viewBucket(bucket, now, windowMs) {
+    let { windowStart, count, prevCount } = bucket;
+    const age = Math.max(0, now - windowStart);
+    if (age >= 2 * windowMs) {
+        windowStart += windowMs * Math.floor(age / windowMs);
+        count = 0;
+        prevCount = 0;
+    }
+    else if (age >= windowMs) {
+        windowStart += windowMs * Math.floor(age / windowMs);
+        prevCount = count;
+        count = 0;
+    }
+    const elapsed = Math.max(0, now - windowStart);
+    const previousWeight = Math.max(0, Math.min(1, 1 - elapsed / windowMs));
+    return { windowStart, count, prevCount, effective: count + prevCount * previousWeight };
+}
+function retryAfterSec(bucket, limit, now, windowMs) {
+    const maxSeconds = Math.ceil(2 * windowMs / 1_000) + 1;
+    for (let seconds = 1; seconds <= maxSeconds; seconds++) {
+        if (viewBucket(bucket, now + seconds * 1_000, windowMs).effective < limit)
+            return seconds;
+    }
+    return maxSeconds;
+}
+export function createRateLimiter(config = {}) {
+    const resolved = { ...DEFAULT_CONFIG, ...config };
+    const buckets = new Map();
+    const loggedWindows = new Map();
+    function check(key, cls, pathClass, now = Date.now()) {
+        const pathKey = `${cls}:${key}:${pathClass}`;
+        const specs = [{ key: pathKey, limit: resolved.budgets[cls][pathClass] }];
+        if (cls === 'lan' || cls === 'remote') {
+            specs.push({ key: `${cls}:${key}:total`, limit: resolved.nonLoopbackTotalLimit });
+        }
+        // Peek every participating bucket before committing so a rejection consumes no quota.
+        const views = specs.map(spec => {
+            const bucket = buckets.get(spec.key) ?? { windowStart: now, count: 0, prevCount: 0 };
+            return { ...spec, bucket, view: viewBucket(bucket, now, resolved.windowMs) };
+        });
+        const violated = views.filter(item => item.view.effective >= item.limit);
+        if (violated.length > 0) {
+            let retry = 0;
+            let limit = violated[0].limit;
+            let shouldLog = false;
+            for (const item of violated) {
+                const needed = retryAfterSec(item.bucket, item.limit, now, resolved.windowMs);
+                if (needed > retry) {
+                    retry = needed;
+                    limit = item.limit;
+                }
+                if (loggedWindows.get(item.key) !== item.view.windowStart) {
+                    shouldLog = true;
+                    loggedWindows.set(item.key, item.view.windowStart);
+                }
+            }
+            return { allowed: false, retryAfterSec: retry, limit, remaining: 0, shouldLog };
+        }
+        for (const item of views) {
+            buckets.set(item.key, {
+                windowStart: item.view.windowStart,
+                count: item.view.count + 1,
+                prevCount: item.view.prevCount,
+            });
+        }
+        return { allowed: true };
+    }
+    function sweep(now = Date.now()) {
+        for (const [key, bucket] of buckets) {
+            if (now - bucket.windowStart >= 2 * resolved.windowMs) {
+                buckets.delete(key);
+                loggedWindows.delete(key);
+            }
+        }
+    }
+    return { check, sweep };
+}
+export function createRateLimitMiddleware(opts) {
+    const limiter = opts.limiter ?? createRateLimiter();
+    return (req, res, next) => {
+        if (!req.path.startsWith('/api/'))
+            return next();
+        if (req.path === '/api/events')
+            return next();
+        if (EXEMPT_PATH_PREFIXES.some(prefix => req.path.startsWith(prefix)))
+            return next();
+        const ip = req.ip || req.socket?.remoteAddress || '';
+        const internalHeader = req.headers['x-jaw-internal'];
+        const cls = classifyClient({
+            ip,
+            ...(req.headers.authorization === undefined
+                ? {}
+                : { authHeader: req.headers.authorization }),
+            ...(internalHeader === undefined
+                ? {}
+                : { internalHeader: Array.isArray(internalHeader) ? internalHeader.join(', ') : internalHeader }),
+            authToken: opts.authToken,
+            lanAllowed: opts.lanAllowed(),
+            isPrivateIp: opts.isPrivateIp,
+        });
+        const decision = limiter.check(ip, cls, classifyPath(req.method, req.path));
+        if (decision.allowed)
+            return next();
+        res.setHeader('Retry-After', String(decision.retryAfterSec));
+        res.setHeader('RateLimit', `limit=${decision.limit}, remaining=${decision.remaining}, reset=${decision.retryAfterSec}`);
+        res.setHeader('Cache-Control', 'no-store');
+        if (decision.shouldLog) {
+            console.warn(`[rate-limit] ${ip} (${cls}) exceeded (first blocked: ${req.method} ${req.path})`);
+        }
+        return res.status(429).json({ error: 'rate_limit', retryAfterSec: decision.retryAfterSec });
+    };
+}
+//# sourceMappingURL=rate-limit.js.map