coolhand-cli 0.12.0 → 0.13.0

package/dist/hooks/types.d.ts

@@ -0,0 +1,74 @@
+import type { RawMessage } from '../sessions/blocks.js';
+import type { SubagentUsage, Usage } from '../sessions/usage.js';
+/** Agents whose hook payloads `capture-turn` understands. */
+export declare const HOOK_AGENTS: readonly ["claude", "copilot"];
+export type HookAgent = (typeof HOOK_AGENTS)[number];
+/** One completed user→assistant exchange, normalised across agents. */
+export interface HookTurn {
+    /** The agent's own session/conversation id. Stable across every turn of a session. */
+    sessionId: string;
+    /** What the user typed. Missing when the agent's payload and transcript don't expose it. */
+    userText?: string;
+    /** The assistant's final reply for the turn. Always non-empty. */
+    assistantText: string;
+    model?: string;
+    /** Identifies this exact turn when the agent exposes something unique to it. */
+    turnKey?: string;
+    /** Working directory of the session, when the payload carries one. */
+    cwd?: string;
+    /** When this turn's user line was written (ISO 8601), if the transcript says. */
+    exchangeTimestamp?: string;
+    /**
+     * The exchanges before this turn that the agent's transcript still shows, oldest first, including
+     * ones from before the skill was invoked. `prepareTurnMessages` keeps only those at or after the
+     * session's anchor (the first captured turn).
+     */
+    earlier?: EarlierExchange[];
+    /**
+     * Timestamps of EVERY earlier exchange the transcript shows, including ones with no text of their
+     * own (an image-only prompt), which `earlier` leaves out. Used only to tell whether the anchor's
+     * exchange is still in view.
+     */
+    earlierStamps?: string[];
+    /** Tokens the main-thread assistant messages of THIS exchange spent, as far as the transcript shows. */
+    usage?: Usage;
+    /** What subagents spent during this exchange, per model. */
+    subagents?: SubagentUsage;
+    /**
+     * This turn's own tool loop: everything after its prompt up to, not including, its final reply (the
+     * transcript is the source; empty when the turn used no tools or the transcript hasn't caught up).
+     */
+    currentMessages?: RawMessage[];
+    /** The raw blocks (thinking, text) of this turn's final reply, when the transcript shows it. */
+    finalReply?: unknown[];
+    /**
+     * Skill bodies the transcript shows being injected, with when. The caller picks the one for its skill: `name` (the
+     * declared name, when the agent records it) or the name of `dir` can match `--skill`.
+     */
+    skillBodies?: Array<{
+        dir: string;
+        text: string;
+        timestamp?: string;
+        name?: string;
+    }>;
+}
+/** A user message and the assistant's final text reply to it, from earlier in the session. */
+export interface EarlierExchange {
+    /** When the user line was written (ISO 8601); an exchange without one can't be placed relative to the anchor. */
+    timestamp?: string;
+    userText: string;
+    assistantText?: string;
+    usage?: Usage;
+    subagents?: SubagentUsage;
+    /** What came after the prompt: thinking, tool calls and results, replies. Absent for a hand-built exchange (text only). */
+    messages?: RawMessage[];
+}
+export type { TurnMessage } from '../sessions/blocks.js';
+/** A parsed hook payload: whatever JSON the agent wrote to stdin. */
+export type HookInput = Record<string, unknown>;
+/** What an adapter needs besides the hook payload. */
+export interface AdapterContext {
+    /** The `--skill` the hook was installed for. */
+    skill?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/hooks/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/hooks/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAEjE,6DAA6D;AAC7D,eAAO,MAAM,WAAW,gCAAiC,CAAC;AAC1D,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,uEAAuE;AACvE,MAAM,WAAW,QAAQ;IACvB,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,wGAAwG;IACxG,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,4DAA4D;IAC5D,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B;;;OAGG;IACH,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC;IAC/B,gGAAgG;IAChG,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;IACvB;;;OAGG;IACH,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvF;AAED,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,iHAAiH;IACjH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,2HAA2H;IAC3H,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;CACzB;AAED,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,qEAAqE;AACrE,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhD,sDAAsD;AACtD,MAAM,WAAW,cAAc;IAC7B,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/hooks/types.js

@@ -0,0 +1,3 @@
+/** Agents whose hook payloads `capture-turn` understands. */
+export const HOOK_AGENTS = ['claude', 'copilot'];
+//# sourceMappingURL=types.js.map

package/dist/hooks/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/hooks/types.ts"],"names":[],"mappings":"AAGA,6DAA6D;AAC7D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAU,CAAC"}

package/dist/pending-store.d.ts

@@ -1,5 +1,5 @@
 /** What kind of SDK call the flush worker should make to upload a record. */
-export type PendingKind = 'feedback';
+export type PendingKind = 'feedback' | 'turn';
 export interface PendingRecord {
     /** Human-readable command name, e.g. "report-blocker". Used in the filename. */
     command: string;
@@ -9,6 +9,15 @@ export interface PendingRecord {
     payload: unknown;
     /** Optional stored-client id to resolve the api key/base url at flush time. */
     clientId?: string;
+    /** Public ingest key and base url supplied by a hook (no stored client). Wins over `clientId`. */
+    apiKey?: string;
+    baseUrl?: string;
+    /** Replay attempts started so far (counted before the upload, so a hook killed mid-upload still uses one). Hook-spooled turns are dropped after a few: with no server-side dedup, every retry that actually landed is a duplicate log. */
+    attempts?: number;
+    /** Short label put in the file name, e.g. to find records of one hook session without reading them. [a-z0-9-] only. */
+    fileTag?: string;
+    /** The send timed out, so the server may have stored the turn: a replay of this record can duplicate it. */
+    ambiguous?: boolean;
     /** ISO timestamp of when the record was saved locally. */
     savedAt: string;
 }
@@ -19,8 +28,19 @@ export declare function pendingDir(): string;
  * saves never collide.
  */
 export declare function savePendingRecord(record: PendingRecord): Promise<string>;
-/** Absolute paths of every saved record, sorted oldest-first by filename. */
+/**
+ * `savePendingRecord` names files after `record.command`, so hook-captured turns saved with this
+ * command are `capture-turn-…`. The hook owns and replays them; the user-facing flow ignores them.
+ */
+export declare const TURN_RECORD_COMMAND = "capture-turn";
+/**
+ * Absolute paths of every saved record the user-facing flow owns (blocker feedback), oldest-first.
+ * Hook-captured turns are excluded: they replay themselves and must not inflate the "you have N
+ * locally-saved records" prompts shown at login or on the next command.
+ */
 export declare function listPendingFiles(): Promise<string[]>;
+/** Absolute paths of the turns `capture-turn` spooled, oldest-first. */
+export declare function listTurnFiles(): Promise<string[]>;
 export declare function countPending(): Promise<number>;
 export declare function readPendingRecord(filePath: string): Promise<PendingRecord>;
 export declare function removePendingRecord(filePath: string): Promise<void>;

package/dist/pending-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pending-store.d.ts","sourceRoot":"","sources":["../src/pending-store.ts"],"names":[],"mappings":"AAiBA,6EAA6E;AAC7E,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC;AAErC,MAAM,WAAW,aAAa;IAC5B,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,IAAI,EAAE,WAAW,CAAC;IAClB,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAQD;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ9E;AAED,6EAA6E;AAC7E,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAc1D;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAEpD;AAED,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAGhF;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzE;AAED,0EAA0E;AAC1E,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAGrD;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAEtD;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAOpD"}
+{"version":3,"file":"pending-store.d.ts","sourceRoot":"","sources":["../src/pending-store.ts"],"names":[],"mappings":"AAqBA,6EAA6E;AAC7E,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;AAE9C,MAAM,WAAW,aAAa;IAC5B,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,IAAI,EAAE,WAAW,CAAC;IAClB,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kGAAkG;IAClG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0OAA0O;IAC1O,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uHAAuH;IACvH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4GAA4G;IAC5G,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAQD;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAS9E;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAmBlD;;;;GAIG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAE1D;AAED,wEAAwE;AACxE,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAEvD;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAEpD;AAED,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAGhF;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzE;AAED,0EAA0E;AAC1E,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAGrD;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAEtD;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAOpD"}

package/dist/pending-store.js

@@ -6,6 +6,10 @@ import { configDir, atomicWriteFile } from './config.js';
  * Local fallback store for records that could not be sent to Coolhand because the
  * user was not logged in. Records live under `~/.coolhand/pending/` and are uploaded
  * by the background flush on the next `coolhand login` (see `commands/flush-pending`).
+ *
+ * It also holds turns the `capture-turn` hook could not deliver (`kind: 'turn'`, saved after a
+ * network or server failure and carrying their own key). Those are replayed by the hook itself,
+ * not by login or `flush-pending`, and are kept out of `listPendingFiles` (see `TURN_RECORD_COMMAND`).
  */
 const PENDING_SUBDIR = 'pending';
 const DIR_MODE = 0o700;
@@ -29,13 +33,19 @@ export async function savePendingRecord(record) {
     const dir = await ensurePendingDir();
     const safeCommand = record.command.replace(/[^a-zA-Z0-9_-]/g, '_');
     const safeStamp = record.savedAt.replace(/[:.]/g, '-');
-    const fileName = `${safeCommand}-${safeStamp}-${randomBytes(4).toString('hex')}.json`;
+    const safeTag = record.fileTag ? `.${record.fileTag.replace(/[^a-z0-9-]/g, '')}` : '';
+    const fileName = `${safeCommand}-${safeStamp}-${randomBytes(4).toString('hex')}${safeTag}.json`;
     const filePath = path.join(dir, fileName);
     await atomicWriteFile(filePath, `${JSON.stringify(record, null, 2)}\n`, FILE_MODE);
     return filePath;
 }
-/** Absolute paths of every saved record, sorted oldest-first by filename. */
-export async function listPendingFiles() {
+/**
+ * `savePendingRecord` names files after `record.command`, so hook-captured turns saved with this
+ * command are `capture-turn-…`. The hook owns and replays them; the user-facing flow ignores them.
+ */
+export const TURN_RECORD_COMMAND = 'capture-turn';
+const TURN_FILE_PREFIX = `${TURN_RECORD_COMMAND}-`;
+async function listRecordFiles() {
     let entries;
     try {
         entries = await fs.readdir(pendingDir());
@@ -51,6 +61,18 @@ export async function listPendingFiles() {
         .sort()
         .map((name) => path.join(pendingDir(), name));
 }
+/**
+ * Absolute paths of every saved record the user-facing flow owns (blocker feedback), oldest-first.
+ * Hook-captured turns are excluded: they replay themselves and must not inflate the "you have N
+ * locally-saved records" prompts shown at login or on the next command.
+ */
+export async function listPendingFiles() {
+    return (await listRecordFiles()).filter((file) => !path.basename(file).startsWith(TURN_FILE_PREFIX));
+}
+/** Absolute paths of the turns `capture-turn` spooled, oldest-first. */
+export async function listTurnFiles() {
+    return (await listRecordFiles()).filter((file) => path.basename(file).startsWith(TURN_FILE_PREFIX));
+}
 export async function countPending() {
     return (await listPendingFiles()).length;
 }

package/dist/pending-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"pending-store.js","sourceRoot":"","sources":["../src/pending-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEzD;;;;GAIG;AAEH,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,kFAAkF;AAClF,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAkB5C,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,cAAc,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAqB;IAC3D,MAAM,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,GAAG,WAAW,IAAI,SAAS,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;IACtF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACjE,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,OAAO,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACxD,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,gBAAgB,EAAE,CAAC;IACzB,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"pending-store.js","sourceRoot":"","sources":["../src/pending-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEzD;;;;;;;;GAQG;AAEH,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,kFAAkF;AAClF,MAAM,mBAAmB,GAAG,eAAe,CAAC;AA2B5C,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,cAAc,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAqB;IAC3D,MAAM,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,QAAQ,GAAG,GAAG,WAAW,IAAI,SAAS,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,OAAO,OAAO,CAAC;IAChG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAClD,MAAM,gBAAgB,GAAG,GAAG,mBAAmB,GAAG,CAAC;AAEnD,KAAK,UAAU,eAAe;IAC5B,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACjE,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,OAAO,CAAC,MAAM,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,OAAO,CAAC,MAAM,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,OAAO,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACxD,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,gBAAgB,EAAE,CAAC;IACzB,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/pending-upload.d.ts

@@ -0,0 +1,12 @@
+import type { PendingRecord } from './pending-store.js';
+/**
+ * Send a single saved record to Coolhand. Resolves the api key/base url from the record itself when
+ * it carries one (hook-spooled turns do), otherwise from the stored client (or env) at flush time —
+ * by now the user is logged in. Returns true only when the server confirms the write; the SDK
+ * returns null (it does not throw) on a failed write, so a falsy result means "keep the file and
+ * retry later".
+ */
+export declare function uploadRecord(record: PendingRecord, opts?: {
+    timeoutMs?: number;
+}): Promise<boolean>;
+//# sourceMappingURL=pending-upload.d.ts.map

package/dist/pending-upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-upload.d.ts","sourceRoot":"","sources":["../src/pending-upload.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CA4C7G"}

package/dist/pending-upload.js

@@ -0,0 +1,51 @@
+import { Coolhand } from 'coolhand-node';
+import { logTurn } from './hooks/log-turn.js';
+import { loadConfig, getClient } from './config.js';
+import { DEFAULT_BASE_URL } from './types.js';
+/**
+ * Send a single saved record to Coolhand. Resolves the api key/base url from the record itself when
+ * it carries one (hook-spooled turns do), otherwise from the stored client (or env) at flush time —
+ * by now the user is logged in. Returns true only when the server confirms the write; the SDK
+ * returns null (it does not throw) on a failed write, so a falsy result means "keep the file and
+ * retry later".
+ */
+export async function uploadRecord(record, opts = {}) {
+    // A record that carries its own key (hook-spooled turns) never touches the stored config, so an
+    // unreadable config.json can't stop it from being replayed.
+    const client = record.apiKey ? undefined : getClient(await loadConfig(), record.clientId);
+    const apiKey = record.apiKey ?? client?.api_key ?? process.env.COOLHAND_API_KEY;
+    if (!apiKey) {
+        return false;
+    }
+    const baseUrl = record.baseUrl ?? client?.base_url ?? DEFAULT_BASE_URL;
+    let coolhand;
+    try {
+        // requestTimeoutMs makes the SDK abort the request itself, not just stop us waiting for it.
+        coolhand = new Coolhand({ apiKey, baseUrl, silent: true, ...(opts.timeoutMs ? { requestTimeoutMs: opts.timeoutMs } : {}) });
+    }
+    catch {
+        return false;
+    }
+    if (record.kind === 'feedback') {
+        const result = await coolhand.createFeedback(record.payload);
+        return result !== null && result !== undefined;
+    }
+    if (record.kind === 'turn') {
+        const { envelope, collector, metadata, declared } = record.payload;
+        // A replay may duplicate a turn that actually landed (the server does not dedup), so mark it for consumers.
+        const result = await logTurn(coolhand, envelope, {
+            collector,
+            declared,
+            metadata: {
+                ...metadata,
+                replayed: true,
+                replay_attempt: (record.attempts ?? 0) + 1,
+                // The original send timed out rather than being refused, so it may already be stored.
+                ...(record.ambiguous ? { possible_duplicate: true } : {}),
+            },
+        });
+        return result !== null && result !== undefined;
+    }
+    return false;
+}
+//# sourceMappingURL=pending-upload.js.map

package/dist/pending-upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-upload.js","sourceRoot":"","sources":["../src/pending-upload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAoD,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG9C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAqB,EAAE,OAA+B,EAAE;IACzF,gGAAgG;IAChG,4DAA4D;IAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,UAAU,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAChF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,EAAE,QAAQ,IAAI,gBAAgB,CAAC;IAEvE,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,4FAA4F;QAC5F,QAAQ,GAAG,IAAI,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,OAAgC,CAAC,CAAC;QACtF,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,CAAC;IACjD,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,OAK1D,CAAC;QACF,4GAA4G;QAC5G,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE;YAC/C,SAAS;YACT,QAAQ;YACR,QAAQ,EAAE;gBACR,GAAG,QAAQ;gBACX,QAAQ,EAAE,IAAI;gBACd,cAAc,EAAE,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC;gBAC1C,sFAAsF;gBACtF,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D;SACF,CAAC,CAAC;QACH,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/sessions/blocks.d.ts

@@ -0,0 +1,51 @@
+/** Per-block caps. Redaction runs before truncation, so a secret is never cut in half and left half-visible. */
+export declare const MAX_TURN_TEXT_CHARS = 100000;
+/** A message as it sits in the transcript: raw blocks, not yet redacted or capped. */
+export interface RawMessage {
+    role: 'user' | 'assistant';
+    /** The request id of the model call (assistant messages), used to merge its content-block lines. */
+    key?: string;
+    blocks: unknown[];
+}
+/** The blocks that are sent. Text only in the sense of no binary data; thinking, tool calls and results included. */
+export type ContentBlock = {
+    type: 'text';
+    text: string;
+} | {
+    type: 'thinking';
+    thinking: string;
+} | {
+    type: 'tool_use';
+    id?: string;
+    name: string;
+    input: unknown;
+} | {
+    type: 'tool_result';
+    tool_use_id?: string;
+    content: string;
+    is_error?: boolean;
+};
+export interface TurnMessage {
+    role: 'user' | 'assistant';
+    content: string | ContentBlock[];
+}
+/** Redacted and capped to `max` characters, with a marker when cut: the one way any captured text is sanitized. */
+export declare function cleanText(text: string, max?: number): string;
+/** Redact and cap the strings of a tool call's input, keeping its shape; bound arrays, keys and depth. */
+export declare function sanitizeInput(value: unknown, depth?: number, secret?: boolean, redact?: boolean): unknown;
+/**
+ * One transcript block as it is sent: redacted, capped, and stripped of anything opaque. Thinking keeps
+ * its text but not its `signature` (a long blob of no use to a reader); redacted/encrypted thinking, and
+ * block types we don't know, are left out.
+ */
+export declare function sanitizeBlock(block: unknown): ContentBlock | undefined;
+/**
+ * A transcript message as it is sent. An assistant message that is nothing but one text block is sent as
+ * a plain string, like an ordinary chat; anything else keeps its blocks. `undefined` when nothing survives.
+ */
+export declare function sanitizeMessage(raw: RawMessage): TurnMessage | undefined;
+/** Close to the characters `sanitizeMessage` would keep, computed without redacting anything. */
+export declare function messageSize(raw: RawMessage): number;
+/** The text of the text blocks of a raw message, joined the way the exchange parser joins them. */
+export declare function rawMessageText(raw: RawMessage): string;
+//# sourceMappingURL=blocks.d.ts.map

package/dist/sessions/blocks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocks.d.ts","sourceRoot":"","sources":["../../src/sessions/blocks.ts"],"names":[],"mappings":"AAEA,gHAAgH;AAChH,eAAO,MAAM,mBAAmB,SAAU,CAAC;AA4B3C,sFAAsF;AACtF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,oGAAoG;IACpG,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,EAAE,CAAC;CACnB;AAED,qHAAqH;AACrH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAEvF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CAAC;CAClC;AAkBD,mHAAmH;AACnH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAsB,GAAG,MAAM,CAEzE;AAED,0GAA0G;AAC1G,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,EAAE,MAAM,UAAQ,EAAE,MAAM,UAAO,GAAG,OAAO,CAkC/F;AAsBD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,GAAG,SAAS,CA8BtE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,GAAG,WAAW,GAAG,SAAS,CASxE;AAUD,iGAAiG;AACjG,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAkBnD;AAED,mGAAmG;AACnG,wBAAgB,cAAc,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAMtD"}

package/dist/sessions/blocks.js

@@ -0,0 +1,193 @@
+import { redactSecrets } from './redact-secrets.js';
+/** Per-block caps. Redaction runs before truncation, so a secret is never cut in half and left half-visible. */
+export const MAX_TURN_TEXT_CHARS = 100000;
+const MAX_THINKING_CHARS = 4000;
+const MAX_TOOL_STRING_CHARS = 2000;
+const MAX_TOOL_RESULT_CHARS = 2000;
+/**
+ * Redaction is run on at most `max + REDACT_EXTRA_CHARS` of a string (it is quadratic on unterminated PEM
+ * blocks, and the rest would be cut off anyway). When a string is longer, the last `REDACT_TAIL_CHARS` of what
+ * was redacted are dropped too: a secret cut by the end of the window is not matched, and must not be left
+ * half-visible.
+ */
+const REDACT_EXTRA_CHARS = 50000;
+const REDACT_TAIL_CHARS = 8000;
+const MAX_KEY_CHARS = 200;
+const MAX_INPUT_ARRAY_ITEMS = 50;
+const MAX_INPUT_KEYS = 50;
+const MAX_INPUT_DEPTH = 6;
+const TRUNCATED = '…[truncated]';
+const REDACTED = '[REDACTED]';
+/** A numeric field with one of these names is a count or a limit (`max_tokens`), not a secret. */
+const COUNT_KEY = /tokens|limit|count|length|size/i;
+/** A command-line flag that takes a secret as its next argument (`['--password', 'hunter2']`). */
+const SECRET_FLAG = /^--?(?:(?:[a-z]{1,20}-){0,3}(?:password|passwd|token|secret|api-?key|auth(?:orization)?|access-?key|private-?key)(?:-(?:key|value))?|pass|pwd)$/i;
+/**
+ * Names of tool-input fields whose value is a secret whatever it looks like. `redactSecrets` finds
+ * `password=...` in text, but a structured input (`{"password": "hunter2"}`) has the key and the value apart.
+ */
+const SECRET_KEY = /api[_-]?key|secret(?!ary)|token(?!izer)|passw(?:or)?d|pwd|(?<![a-z])pass(?![a-z])|passphrase|access[_-]?key|private[_-]?key|ssh[_-]?key|auth(?!ors?(?![a-z])|ored|ority)|bearer|jwt|dsn|connection[_-]?string|credential|signing[_-]?key|encryption[_-]?key|cookie/i;
+/** Redact, then cap (`redact: false` only measures what would be kept). The marker says text was cut. */
+function clean(text, max, redact = true) {
+    if (!redact) {
+        const kept = text.slice(0, max).trim();
+        return text.length > max ? `${kept}${TRUNCATED}` : kept;
+    }
+    const window = max + REDACT_EXTRA_CHARS;
+    const windowed = text.length > window;
+    const body = redactSecrets(windowed ? text.slice(0, window) : text).trim();
+    if (!windowed && body.length <= max) {
+        return body;
+    }
+    const keep = windowed ? Math.min(max, body.length - REDACT_TAIL_CHARS) : max;
+    return `${body.slice(0, Math.max(keep, 0))}${TRUNCATED}`;
+}
+/** Redacted and capped to `max` characters, with a marker when cut: the one way any captured text is sanitized. */
+export function cleanText(text, max = MAX_TURN_TEXT_CHARS) {
+    return clean(text, max);
+}
+/** Redact and cap the strings of a tool call's input, keeping its shape; bound arrays, keys and depth. */
+export function sanitizeInput(value, depth = 0, secret = false, redact = true) {
+    if (typeof value === 'string') {
+        return secret && redact ? REDACTED : clean(value, MAX_TOOL_STRING_CHARS, redact);
+    }
+    if (typeof value === 'number') {
+        return secret && redact ? REDACTED : value;
+    }
+    if (value === null || typeof value === 'boolean') {
+        return value;
+    }
+    if (depth >= MAX_INPUT_DEPTH) {
+        return TRUNCATED;
+    }
+    if (Array.isArray(value)) {
+        // The element after a secret-named flag (`['--password', 'hunter2']`) is the secret.
+        return value
+            .slice(0, MAX_INPUT_ARRAY_ITEMS)
+            .map((item, i, items) => sanitizeInput(item, depth + 1, secret || (i > 0 && typeof items[i - 1] === 'string' && SECRET_FLAG.test(items[i - 1])), redact));
+    }
+    if (typeof value === 'object') {
+        const record = value;
+        // A {name, value} pair (an HTTP header, an env var) names the secret in one field and holds it in the other.
+        const namesSecret = ['name', 'key', 'header', 'variable'].some((k) => typeof record[k] === 'string' && SECRET_KEY.test(record[k]));
+        const out = {};
+        for (const [key, inner] of Object.entries(record).slice(0, MAX_INPUT_KEYS)) {
+            const name = clean(key, MAX_KEY_CHARS, redact);
+            if (name === '__proto__' || name === 'constructor' || name === 'prototype') {
+                continue;
+            }
+            out[name] = sanitizeInput(inner, depth + 1, secret || (SECRET_KEY.test(key) && !(typeof inner === 'number' && COUNT_KEY.test(key))) || (namesSecret && (key === 'value' || key === 'val')), redact);
+        }
+        return out;
+    }
+    return undefined;
+}
+/** A tool result's content is a string or an array of blocks: the text of it, with images as a placeholder. */
+function resultText(content) {
+    if (typeof content === 'string') {
+        return content;
+    }
+    if (Array.isArray(content)) {
+        return content
+            .map((b) => {
+            if (!b || typeof b !== 'object') {
+                return '';
+            }
+            const type = b.type;
+            return type === 'text' ? String(b.text ?? '') : type === 'image' ? '[image]' : '';
+        })
+            .filter((s) => s.length > 0)
+            .join('\n');
+    }
+    return '';
+}
+/**
+ * One transcript block as it is sent: redacted, capped, and stripped of anything opaque. Thinking keeps
+ * its text but not its `signature` (a long blob of no use to a reader); redacted/encrypted thinking, and
+ * block types we don't know, are left out.
+ */
+export function sanitizeBlock(block) {
+    if (!block || typeof block !== 'object') {
+        return undefined;
+    }
+    const b = block;
+    switch (b.type) {
+        case 'text': {
+            const text = typeof b.text === 'string' ? clean(b.text, MAX_TURN_TEXT_CHARS) : '';
+            return text ? { type: 'text', text } : undefined;
+        }
+        case 'thinking': {
+            const thinking = typeof b.thinking === 'string' ? clean(b.thinking, MAX_THINKING_CHARS) : '';
+            return thinking ? { type: 'thinking', thinking } : undefined;
+        }
+        case 'tool_use': {
+            if (typeof b.name !== 'string' || !b.name) {
+                return undefined;
+            }
+            return { type: 'tool_use', ...(typeof b.id === 'string' ? { id: b.id.slice(0, 200) } : {}), name: b.name.slice(0, 200), input: sanitizeInput(b.input) ?? {} };
+        }
+        case 'tool_result':
+            return {
+                type: 'tool_result',
+                ...(typeof b.tool_use_id === 'string' ? { tool_use_id: b.tool_use_id.slice(0, 200) } : {}),
+                content: clean(resultText(b.content), MAX_TOOL_RESULT_CHARS),
+                ...(b.is_error === true ? { is_error: true } : {}),
+            };
+        default:
+            return undefined;
+    }
+}
+/**
+ * A transcript message as it is sent. An assistant message that is nothing but one text block is sent as
+ * a plain string, like an ordinary chat; anything else keeps its blocks. `undefined` when nothing survives.
+ */
+export function sanitizeMessage(raw) {
+    const blocks = raw.blocks.map(sanitizeBlock).filter((b) => b !== undefined);
+    if (blocks.length === 0) {
+        return undefined;
+    }
+    if (blocks.length === 1 && blocks[0].type === 'text') {
+        return { role: raw.role, content: blocks[0].text };
+    }
+    return { role: raw.role, content: blocks };
+}
+function jsonLength(value) {
+    try {
+        return JSON.stringify(value).length;
+    }
+    catch {
+        return MAX_TOOL_STRING_CHARS;
+    }
+}
+/** Close to the characters `sanitizeMessage` would keep, computed without redacting anything. */
+export function messageSize(raw) {
+    let size = 0;
+    for (const block of raw.blocks) {
+        if (!block || typeof block !== 'object') {
+            continue;
+        }
+        const b = block;
+        if (b.type === 'text' && typeof b.text === 'string') {
+            size += Math.min(b.text.length, MAX_TURN_TEXT_CHARS);
+        }
+        else if (b.type === 'thinking' && typeof b.thinking === 'string') {
+            size += Math.min(b.thinking.length, MAX_THINKING_CHARS);
+        }
+        else if (b.type === 'tool_use') {
+            size += jsonLength(sanitizeInput(b.input ?? {}, 0, false, false)) + 50;
+        }
+        else if (b.type === 'tool_result') {
+            size += Math.min(resultText(b.content).length, MAX_TOOL_RESULT_CHARS) + 50;
+        }
+    }
+    return size;
+}
+/** The text of the text blocks of a raw message, joined the way the exchange parser joins them. */
+export function rawMessageText(raw) {
+    return raw.blocks
+        .map((b) => (b && typeof b === 'object' && b.type === 'text' && typeof b.text === 'string' ? b.text : ''))
+        .filter((t) => t.trim().length > 0)
+        .join('\n')
+        .trim();
+}
+//# sourceMappingURL=blocks.js.map

package/dist/sessions/blocks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocks.js","sourceRoot":"","sources":["../../src/sessions/blocks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,gHAAgH;AAChH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAO,CAAC;AAC3C,MAAM,kBAAkB,GAAG,IAAK,CAAC;AACjC,MAAM,qBAAqB,GAAG,IAAK,CAAC;AACpC,MAAM,qBAAqB,GAAG,IAAK,CAAC;AACpC;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAClC,MAAM,iBAAiB,GAAG,IAAK,CAAC;AAChC,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,SAAS,GAAG,cAAc,CAAC;AACjC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,kGAAkG;AAClG,MAAM,SAAS,GAAG,iCAAiC,CAAC;AACpD,kGAAkG;AAClG,MAAM,WAAW,GAAG,kJAAkJ,CAAC;AACvK;;;GAGG;AACH,MAAM,UAAU,GAAG,qQAAqQ,CAAC;AAsBzR,yGAAyG;AACzG,SAAS,KAAK,CAAC,IAAY,EAAE,GAAW,EAAE,MAAM,GAAG,IAAI;IACrD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,GAAG,kBAAkB,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtC,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3E,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7E,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,EAAE,CAAC;AAC3D,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,GAAG,GAAG,mBAAmB;IAC/D,OAAO,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,EAAE,MAAM,GAAG,IAAI;IACpF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7C,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,IAAI,eAAe,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,qFAAqF;QACrF,OAAO,KAAK;aACT,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC;aAC/B,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACxK,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,6GAA6G;QAC7G,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC;QAC7I,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC3E,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtM,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+GAA+G;AAC/G,SAAS,UAAU,CAAC,OAAgB;IAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,GAAI,CAAwB,CAAC,IAAI,CAAC;YAC5C,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAE,CAAwB,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5G,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;aAC3B,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC1C,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChK,CAAC;QACD,KAAK,aAAa;YAChB,OAAO;gBACL,IAAI,EAAE,aAAa;gBACnB,GAAG,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1F,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;gBAC5D,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD,CAAC;QACJ;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAe;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC/F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,WAAW,CAAC,GAAe;IACzC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpD,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACvD,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACnE,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACjC,IAAI,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;QACzE,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACpC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAC,GAAG,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,cAAc,CAAC,GAAe;IAC5C,OAAO,GAAG,CAAC,MAAM;SACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAK,CAAwB,CAAC,IAAI,KAAK,MAAM,IAAI,OAAQ,CAAwB,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAC/K,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SAClC,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAC;AACZ,CAAC"}

package/dist/sessions/claude-scanner.d.ts

@@ -1,8 +1,11 @@
+import { type ContentBlock, type RawMessage } from './blocks.js';
+import { type SubagentUsage, type Usage } from './usage.js';
 import type { SessionFileMeta } from './session-filter.js';
 /** One message in the reconstructed conversation. */
 export interface ConversationMessage {
     role: string;
-    content: string;
+    /** A plain string, or content blocks (thinking, tool calls and results) for hook-captured turns. */
+    content: string | ContentBlock[];
 }
 /**
  * An Anthropic-shaped envelope for ONE whole Claude Code session (a conversation). The server's
@@ -18,6 +21,8 @@ export interface CaptureEnvelope {
     status_code: number;
     request_body: {
         model?: string;
+        /** The skill's text, for hook-captured turns. */
+        system?: string;
         messages: ConversationMessage[];
     };
     response_body: {
@@ -57,6 +62,60 @@ export declare function defaultProjectsDir(): string;
  * exactly once, matching benchmark/lib/transcript.mjs.
  */
 export declare function parseTranscript(content: string, sessionId: string): CaptureEnvelope | null;
+/** The most recent user prompt and the assistant's final reply to it, as plain text. */
+export interface LastTurn {
+    userText?: string;
+    assistantText?: string;
+    model?: string;
+    /** The final assistant message's request id: unique per model call, so it tells a repeated
+     *  identical turn from a hook that fired twice for one turn. */
+    assistantKey?: string;
+}
+/** One user prompt and the assistant's final text reply to it, as plain text. */
+export interface Exchange {
+    /** Undefined for a prompt with no text of its own (e.g. an image), or an assistant reply with no prompt in view. */
+    userText?: string;
+    /** When the user line was written (ISO 8601), straight from the transcript. */
+    timestamp?: string;
+    assistantText?: string;
+    /** Request id of the message `assistantText` came from. */
+    assistantKey?: string;
+    /** Tokens the main-thread assistant messages of this exchange spent (each message counted once). */
+    usage?: Usage;
+    /** What subagents (Agent tool calls) made during this exchange spent, per model. */
+    subagents?: SubagentUsage;
+    /**
+     * Everything after the user's prompt, in order, as the transcript has it: each model call's blocks
+     * (thinking, text, tool calls) merged into one assistant message, and each batch of tool results as a
+     * user message. Raw: redacted and capped only when sent (see `sanitizeMessage`).
+     */
+    messages?: RawMessage[];
+    /** The skill body Claude Code injected after a slash command (`/skill`), if this exchange invoked one. */
+    skill?: {
+        dir: string;
+        text: string;
+    };
+}
+export interface ParsedExchanges {
+    exchanges: Exchange[];
+    /** The latest real model name seen on an assistant line. */
+    model?: string;
+}
+/**
+ * Walk a transcript (or a window of one — a leading partial line is skipped like any other
+ * unparseable line) and return its user→assistant exchanges in order. Each exchange carries its prompt and reply text and
+ * its `messages` (raw blocks: thinking, tool calls and results included). Synthetic `isMeta` user lines (injected skill bodies,
+ * caveats), compaction summaries, interrupt markers and subagent (sidechain) traffic are not prompts.
+ * A typed slash command is recovered as typed. Pure function, never throws.
+ */
+export declare function parseExchanges(content: string): ParsedExchanges;
+/** The latest exchange of already-parsed exchanges, in the shape the Stop-hook adapter wants. */
+export declare function lastTurnFrom(parsed: ParsedExchanges): LastTurn;
+/**
+ * Pull the latest user prompt and the final assistant message out of a transcript (or a window of
+ * one). Text only, the final reply's blocks aside. Pure function, never throws.
+ */
+export declare function extractLastTurn(content: string): LastTurn;
 /**
  * Find every Claude Code transcript under `projectsDir` (default `~/.claude/projects`) and build one
  * conversation envelope per session. A missing directory simply yields zero sessions.