codetrellis 0.0.0-stage → 0.3.0

package/src/backend/services/agent-event-log.js

@@ -0,0 +1,350 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var agent_event_log_exports = {};
+__export(agent_event_log_exports, {
+  DEFAULT_LIMIT: () => DEFAULT_LIMIT,
+  MAX_LIMIT: () => MAX_LIMIT,
+  MAX_PAYLOAD_CHARS: () => MAX_PAYLOAD_CHARS,
+  MAX_ROWS: () => MAX_ROWS,
+  RETENTION_DAYS: () => RETENTION_DAYS,
+  actingSession: () => actingSession,
+  adoptSessionEvents: () => adoptSessionEvents,
+  eventId: () => eventId,
+  listAgentEvents: () => listAgentEvents,
+  pruneAgentEvents: () => pruneAgentEvents,
+  recordAgentEvent: () => recordAgentEvent,
+  recordBodyEdit: () => recordBodyEdit,
+  recordBreakpointEvent: () => recordBreakpointEvent,
+  recordCheckRun: () => recordCheckRun,
+  recordCriterionDecision: () => recordCriterionDecision,
+  recordDecision: () => recordDecision,
+  redactSecrets: () => redactSecrets,
+  redactValue: () => redactValue,
+  setEventPublisher: () => setEventPublisher,
+  setRecordedListener: () => setRecordedListener,
+  startAgentEventLog: () => startAgentEventLog,
+  withEventContext: () => withEventContext,
+  workstreamOfItem: () => workstreamOfItem
+});
+module.exports = __toCommonJS(agent_event_log_exports);
+var import_node_crypto = require("node:crypto");
+var import_node_async_hooks = require("node:async_hooks");
+var import_database = require("./database");
+var import_persistence = require("./persistence");
+var import_record_chain = require("./record-chain");
+var import_retention = require("./retention");
+const RETENTION_DAYS = 14;
+const MAX_ROWS = 1e5;
+const MAX_PAYLOAD_CHARS = 4e3;
+const DEFAULT_LIMIT = 400;
+const MAX_LIMIT = 2e3;
+const LAUNCH = (0, import_node_crypto.randomBytes)(4).toString("hex");
+let counter = 0;
+function eventId(prefix) {
+  return `${prefix}-${LAUNCH}-${++counter}`;
+}
+let publisher = null;
+function setEventPublisher(fn) {
+  publisher = fn;
+}
+const context = new import_node_async_hooks.AsyncLocalStorage();
+function withEventContext(ctx, fn) {
+  return context.run(ctx, fn);
+}
+function actingSession() {
+  return context.getStore() ?? null;
+}
+let recordedListener = null;
+function setRecordedListener(fn) {
+  recordedListener = fn;
+}
+function publishApp(type, payload, label) {
+  if (!publisher) return;
+  try {
+    const acting = context.getStore();
+    publisher("agent-event", {
+      id: eventId("app"),
+      timestamp: Date.now(),
+      source: "app",
+      type,
+      payload: {
+        ...payload,
+        // The turn's label: the acting agent, or who did it.
+        ...acting ? { sessionId: acting.sessionId, agentType: acting.agentType } : { agentType: label }
+      }
+    });
+  } catch {
+  }
+}
+function recordBodyEdit(edit) {
+  publishApp("spec_edited", {
+    kind: edit.kind,
+    planUid: edit.planUid,
+    uid: edit.uid,
+    title: edit.title,
+    version: edit.version,
+    author: edit.author,
+    authorType: edit.authorType,
+    ...edit.changeSummary ? { changeSummary: edit.changeSummary.slice(0, 200) } : {}
+  }, edit.authorType === "agent" ? edit.author : edit.authorType);
+}
+function workstreamOfItem(itemUid) {
+  try {
+    return rowsOf(
+      `SELECT s.workstream_root AS root FROM plan_items i JOIN agent_sessions s ON s.session_id = i.assignee_session WHERE i.uid = ?`,
+      [itemUid]
+    )[0]?.root ?? null;
+  } catch {
+    return null;
+  }
+}
+function recordCriterionDecision(input) {
+  try {
+    const row = rowsOf(
+      `SELECT c.item_uid, c.text, i.plan_uid, i.title FROM item_criteria c JOIN plan_items i ON i.uid = c.item_uid WHERE c.uid = ?`,
+      [input.criterionUid]
+    )[0];
+    if (!row) return;
+    const workstreamRoot = workstreamOfItem(row.item_uid);
+    publishApp("criterion_decided", {
+      criterionUid: input.criterionUid,
+      itemUid: row.item_uid,
+      itemTitle: row.title,
+      planUid: row.plan_uid,
+      text: row.text.slice(0, 200),
+      decision: input.decision,
+      actor: input.actor,
+      actorType: input.actorType,
+      channel: input.channel,
+      ...workstreamRoot ? { workstreamRoot } : {}
+    }, input.actorType === "agent" ? input.actor : input.actorType);
+  } catch {
+  }
+}
+function recordCheckRun(input) {
+  try {
+    const byRoot = /* @__PURE__ */ new Map();
+    const rootOf = /* @__PURE__ */ new Map();
+    for (const o of input.outcomes) {
+      if (!rootOf.has(o.itemUid)) rootOf.set(o.itemUid, workstreamOfItem(o.itemUid));
+      const root = rootOf.get(o.itemUid) ?? null;
+      byRoot.set(root, [...byRoot.get(root) ?? [], { ok: o.ok && o.state !== "stale", text: o.text }]);
+    }
+    for (const [root, list] of byRoot) {
+      const failed = list.filter((o) => !o.ok);
+      publishApp("check_run", {
+        runUid: input.runUid,
+        planUid: input.planUid,
+        trigger: input.trigger,
+        by: input.by,
+        byType: input.byType,
+        passed: list.length - failed.length,
+        failed: failed.length,
+        ...failed.length ? { failing: failed.slice(0, 3).map((f) => f.text.slice(0, 120)) } : {},
+        ...root ? { workstreamRoot: root } : {}
+      }, input.byType === "agent" ? input.by : input.byType);
+    }
+  } catch {
+  }
+}
+function recordBreakpointEvent(type, payload, label) {
+  publishApp(type, payload, label);
+}
+function recordDecision(type, payload, label) {
+  publishApp(type, payload, label);
+}
+const SECRET_KEY = /(["']?)([A-Za-z0-9_-]*(?:token|secret|password|passwd|api[_-]?key|authorization|credential|private[_-]?key)[A-Za-z0-9_-]*)\1(\s*[:=]\s*)("(?:[^"\\]|\\.)*"?|'[^']*'?|[^\s,}&]+)/gi;
+const TOKEN_FORMATS = [
+  /\bsk-(?:ant-)?[A-Za-z0-9_-]{16,}/g,
+  // OpenAI / Anthropic keys
+  /\bgh[pousr]_[A-Za-z0-9]{20,}/g,
+  // GitHub tokens
+  /\bgithub_pat_[A-Za-z0-9_]{20,}/g,
+  /\bxox[abposr]-[A-Za-z0-9-]{10,}/g,
+  // Slack
+  /\bAKIA[0-9A-Z]{16}\b/g,
+  // AWS access key id
+  /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,
+  // JWT
+  /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?(?:-----END [A-Z ]*PRIVATE KEY-----|$)/g
+];
+function redactSecrets(text, known = []) {
+  let out = text;
+  for (const k of known) if (k && k.length >= 8) out = out.split(k).join("[redacted]");
+  out = out.replace(SECRET_KEY, (_m, q, key, sep, value) => {
+    const quote = value.startsWith('"') ? '"' : value.startsWith("'") ? "'" : "";
+    return `${q}${key}${q}${sep}${quote}[redacted]${quote}`;
+  });
+  for (const re of TOKEN_FORMATS) out = out.replace(re, "[redacted]");
+  return out;
+}
+const SECRET_NAME = /token|secret|password|passwd|api[_-]?key|authorization|credential|private[_-]?key/i;
+function redactValue(v, known = [], depth = 0) {
+  if (typeof v === "string") return redactSecrets(v, known);
+  if (depth > 6 || v === null || typeof v !== "object") return v;
+  if (Array.isArray(v)) return v.map((x) => redactValue(x, known, depth + 1));
+  return Object.fromEntries(Object.entries(v).map(([k, x]) => [
+    k,
+    SECRET_NAME.test(k) && (typeof x === "string" || typeof x === "number") ? "[redacted]" : redactValue(x, known, depth + 1)
+  ]));
+}
+function rowsOf(sql, params = []) {
+  const res = (0, import_database.getDb)().exec(sql, params);
+  if (!res.length) return [];
+  const { columns, values } = res[0];
+  return values.map((v) => Object.fromEntries(columns.map((c, i) => [c, v[i]])));
+}
+function sessionOf(sessionId) {
+  try {
+    return rowsOf("SELECT agent_type, workstream_root FROM agent_sessions WHERE session_id = ?", [sessionId])[0] ?? null;
+  } catch {
+    return null;
+  }
+}
+const str = (v) => typeof v === "string" && v ? v : null;
+function recordAgentEvent(evt, known = []) {
+  try {
+    if (!evt || typeof evt.id !== "string" || typeof evt.type !== "string") return null;
+    const payload = evt.payload && typeof evt.payload === "object" ? evt.payload : {};
+    const sessionId = str(payload.sessionId);
+    const session = sessionId ? sessionOf(sessionId) : null;
+    const agentType = str(payload.agentType) ?? session?.agent_type ?? (evt.source === "claude-code-watcher" ? "claude-code" : null);
+    const workstreamRoot = str(payload.workstreamRoot) ?? session?.workstream_root ?? null;
+    let json = JSON.stringify(redactValue(payload, known));
+    if (json.length > MAX_PAYLOAD_CHARS) json = JSON.stringify({ truncated: true, text: json.slice(0, MAX_PAYLOAD_CHARS) });
+    const at = typeof evt.timestamp === "number" && Number.isFinite(evt.timestamp) ? evt.timestamp : Date.now();
+    (0, import_database.getDb)().run(
+      "INSERT OR IGNORE INTO agent_events (id, at, source, type, session_id, agent_type, workstream_root, payload) VALUES (?, ?, ?, ?, ?, ?, ?, ?)",
+      [evt.id, at, evt.source, evt.type, sessionId, agentType, workstreamRoot, json]
+    );
+    (0, import_persistence.markDirty)();
+    (0, import_record_chain.linkEvent)(evt.id);
+    const stored = { ...evt, timestamp: at, payload: JSON.parse(json), sessionId, agentType, workstreamRoot };
+    try {
+      recordedListener?.(stored);
+    } catch {
+    }
+    return stored;
+  } catch {
+    return null;
+  }
+}
+function adoptSessionEvents(sessionId, workstreamRoot) {
+  try {
+    (0, import_database.getDb)().run("UPDATE agent_events SET workstream_root = ? WHERE session_id = ? AND workstream_root IS NULL", [workstreamRoot, sessionId]);
+  } catch {
+  }
+}
+function listAgentEvents(q = {}) {
+  const where = [];
+  const params = [];
+  if (q.since !== void 0) {
+    where.push("at > ?");
+    params.push(q.since);
+  }
+  if (q.before !== void 0) {
+    where.push("at < ?");
+    params.push(q.before);
+  }
+  if (q.sessionId) {
+    where.push("session_id = ?");
+    params.push(q.sessionId);
+  }
+  if (q.workstreamRoot) {
+    where.push("workstream_root = ?");
+    params.push(q.workstreamRoot);
+  }
+  const limit = Math.max(1, Math.min(MAX_LIMIT, Math.floor(q.limit ?? DEFAULT_LIMIT)));
+  const sql = `SELECT id, at, source, type, session_id, agent_type, workstream_root, payload FROM agent_events ${where.length ? `WHERE ${where.join(" AND ")}` : ""} ORDER BY at DESC, rowid DESC LIMIT ${limit}`;
+  return rowsOf(sql, params).reverse().map((r) => {
+    let payload = {};
+    try {
+      payload = JSON.parse(r.payload);
+    } catch {
+    }
+    return {
+      id: r.id,
+      timestamp: r.at,
+      source: r.source,
+      type: r.type,
+      payload,
+      sessionId: r.session_id,
+      agentType: r.agent_type,
+      workstreamRoot: r.workstream_root
+    };
+  });
+}
+function pruneAgentEvents(now = Date.now(), maxRows = MAX_ROWS) {
+  const cutoff = (0, import_retention.retentionCutoff)(now);
+  if (cutoff === null) return 0;
+  return (0, import_record_chain.trimRecord)(cutoff, maxRows, now);
+}
+let stop = null;
+function startAgentEventLog(tap, known = () => []) {
+  if (stop) return stop;
+  try {
+    (0, import_record_chain.beginRecord)();
+  } catch {
+  }
+  try {
+    pruneAgentEvents();
+  } catch {
+  }
+  const untap = tap(({ type, payload }) => {
+    if (type === "agent-event") recordAgentEvent(payload, known());
+  });
+  const timer = setInterval(() => {
+    try {
+      pruneAgentEvents();
+    } catch {
+    }
+  }, 60 * 60 * 1e3);
+  if (typeof timer.unref === "function") timer.unref();
+  stop = () => {
+    untap();
+    clearInterval(timer);
+    stop = null;
+  };
+  return stop;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DEFAULT_LIMIT,
+  MAX_LIMIT,
+  MAX_PAYLOAD_CHARS,
+  MAX_ROWS,
+  RETENTION_DAYS,
+  actingSession,
+  adoptSessionEvents,
+  eventId,
+  listAgentEvents,
+  pruneAgentEvents,
+  recordAgentEvent,
+  recordBodyEdit,
+  recordBreakpointEvent,
+  recordCheckRun,
+  recordCriterionDecision,
+  recordDecision,
+  redactSecrets,
+  redactValue,
+  setEventPublisher,
+  setRecordedListener,
+  startAgentEventLog,
+  withEventContext,
+  workstreamOfItem
+});