coolhand-cli 0.12.0 → 0.13.1

package/dist/sessions/blocks.js

@@ -0,0 +1,193 @@
+import { redactSecrets } from './redact-secrets.js';
+/** Per-block caps. Redaction runs before truncation, so a secret is never cut in half and left half-visible. */
+export const MAX_TURN_TEXT_CHARS = 100000;
+const MAX_THINKING_CHARS = 4000;
+const MAX_TOOL_STRING_CHARS = 2000;
+const MAX_TOOL_RESULT_CHARS = 2000;
+/**
+ * Redaction is run on at most `max + REDACT_EXTRA_CHARS` of a string (it is quadratic on unterminated PEM
+ * blocks, and the rest would be cut off anyway). When a string is longer, the last `REDACT_TAIL_CHARS` of what
+ * was redacted are dropped too: a secret cut by the end of the window is not matched, and must not be left
+ * half-visible.
+ */
+const REDACT_EXTRA_CHARS = 50000;
+const REDACT_TAIL_CHARS = 8000;
+const MAX_KEY_CHARS = 200;
+const MAX_INPUT_ARRAY_ITEMS = 50;
+const MAX_INPUT_KEYS = 50;
+const MAX_INPUT_DEPTH = 6;
+const TRUNCATED = '…[truncated]';
+const REDACTED = '[REDACTED]';
+/** A numeric field with one of these names is a count or a limit (`max_tokens`), not a secret. */
+const COUNT_KEY = /tokens|limit|count|length|size/i;
+/** A command-line flag that takes a secret as its next argument (`['--password', 'hunter2']`). */
+const SECRET_FLAG = /^--?(?:(?:[a-z]{1,20}-){0,3}(?:password|passwd|token|secret|api-?key|auth(?:orization)?|access-?key|private-?key)(?:-(?:key|value))?|pass|pwd)$/i;
+/**
+ * Names of tool-input fields whose value is a secret whatever it looks like. `redactSecrets` finds
+ * `password=...` in text, but a structured input (`{"password": "hunter2"}`) has the key and the value apart.
+ */
+const SECRET_KEY = /api[_-]?key|secret(?!ary)|token(?!izer)|passw(?:or)?d|pwd|(?<![a-z])pass(?![a-z])|passphrase|access[_-]?key|private[_-]?key|ssh[_-]?key|auth(?!ors?(?![a-z])|ored|ority)|bearer|jwt|dsn|connection[_-]?string|credential|signing[_-]?key|encryption[_-]?key|cookie/i;
+/** Redact, then cap (`redact: false` only measures what would be kept). The marker says text was cut. */
+function clean(text, max, redact = true) {
+    if (!redact) {
+        const kept = text.slice(0, max).trim();
+        return text.length > max ? `${kept}${TRUNCATED}` : kept;
+    }
+    const window = max + REDACT_EXTRA_CHARS;
+    const windowed = text.length > window;
+    const body = redactSecrets(windowed ? text.slice(0, window) : text).trim();
+    if (!windowed && body.length <= max) {
+        return body;
+    }
+    const keep = windowed ? Math.min(max, body.length - REDACT_TAIL_CHARS) : max;
+    return `${body.slice(0, Math.max(keep, 0))}${TRUNCATED}`;
+}
+/** Redacted and capped to `max` characters, with a marker when cut: the one way any captured text is sanitized. */
+export function cleanText(text, max = MAX_TURN_TEXT_CHARS) {
+    return clean(text, max);
+}
+/** Redact and cap the strings of a tool call's input, keeping its shape; bound arrays, keys and depth. */
+export function sanitizeInput(value, depth = 0, secret = false, redact = true) {
+    if (typeof value === 'string') {
+        return secret && redact ? REDACTED : clean(value, MAX_TOOL_STRING_CHARS, redact);
+    }
+    if (typeof value === 'number') {
+        return secret && redact ? REDACTED : value;
+    }
+    if (value === null || typeof value === 'boolean') {
+        return value;
+    }
+    if (depth >= MAX_INPUT_DEPTH) {
+        return TRUNCATED;
+    }
+    if (Array.isArray(value)) {
+        // The element after a secret-named flag (`['--password', 'hunter2']`) is the secret.
+        return value
+            .slice(0, MAX_INPUT_ARRAY_ITEMS)
+            .map((item, i, items) => sanitizeInput(item, depth + 1, secret || (i > 0 && typeof items[i - 1] === 'string' && SECRET_FLAG.test(items[i - 1])), redact));
+    }
+    if (typeof value === 'object') {
+        const record = value;
+        // A {name, value} pair (an HTTP header, an env var) names the secret in one field and holds it in the other.
+        const namesSecret = ['name', 'key', 'header', 'variable'].some((k) => typeof record[k] === 'string' && SECRET_KEY.test(record[k]));
+        const out = {};
+        for (const [key, inner] of Object.entries(record).slice(0, MAX_INPUT_KEYS)) {
+            const name = clean(key, MAX_KEY_CHARS, redact);
+            if (name === '__proto__' || name === 'constructor' || name === 'prototype') {
+                continue;
+            }
+            out[name] = sanitizeInput(inner, depth + 1, secret || (SECRET_KEY.test(key) && !(typeof inner === 'number' && COUNT_KEY.test(key))) || (namesSecret && (key === 'value' || key === 'val')), redact);
+        }
+        return out;
+    }
+    return undefined;
+}
+/** A tool result's content is a string or an array of blocks: the text of it, with images as a placeholder. */
+function resultText(content) {
+    if (typeof content === 'string') {
+        return content;
+    }
+    if (Array.isArray(content)) {
+        return content
+            .map((b) => {
+            if (!b || typeof b !== 'object') {
+                return '';
+            }
+            const type = b.type;
+            return type === 'text' ? String(b.text ?? '') : type === 'image' ? '[image]' : '';
+        })
+            .filter((s) => s.length > 0)
+            .join('\n');
+    }
+    return '';
+}
+/**
+ * One transcript block as it is sent: redacted, capped, and stripped of anything opaque. Thinking keeps
+ * its text but not its `signature` (a long blob of no use to a reader); redacted/encrypted thinking, and
+ * block types we don't know, are left out.
+ */
+export function sanitizeBlock(block) {
+    if (!block || typeof block !== 'object') {
+        return undefined;
+    }
+    const b = block;
+    switch (b.type) {
+        case 'text': {
+            const text = typeof b.text === 'string' ? clean(b.text, MAX_TURN_TEXT_CHARS) : '';
+            return text ? { type: 'text', text } : undefined;
+        }
+        case 'thinking': {
+            const thinking = typeof b.thinking === 'string' ? clean(b.thinking, MAX_THINKING_CHARS) : '';
+            return thinking ? { type: 'thinking', thinking } : undefined;
+        }
+        case 'tool_use': {
+            if (typeof b.name !== 'string' || !b.name) {
+                return undefined;
+            }
+            return { type: 'tool_use', ...(typeof b.id === 'string' ? { id: b.id.slice(0, 200) } : {}), name: b.name.slice(0, 200), input: sanitizeInput(b.input) ?? {} };
+        }
+        case 'tool_result':
+            return {
+                type: 'tool_result',
+                ...(typeof b.tool_use_id === 'string' ? { tool_use_id: b.tool_use_id.slice(0, 200) } : {}),
+                content: clean(resultText(b.content), MAX_TOOL_RESULT_CHARS),
+                ...(b.is_error === true ? { is_error: true } : {}),
+            };
+        default:
+            return undefined;
+    }
+}
+/**
+ * A transcript message as it is sent. An assistant message that is nothing but one text block is sent as
+ * a plain string, like an ordinary chat; anything else keeps its blocks. `undefined` when nothing survives.
+ */
+export function sanitizeMessage(raw) {
+    const blocks = raw.blocks.map(sanitizeBlock).filter((b) => b !== undefined);
+    if (blocks.length === 0) {
+        return undefined;
+    }
+    if (blocks.length === 1 && blocks[0].type === 'text') {
+        return { role: raw.role, content: blocks[0].text };
+    }
+    return { role: raw.role, content: blocks };
+}
+function jsonLength(value) {
+    try {
+        return JSON.stringify(value).length;
+    }
+    catch {
+        return MAX_TOOL_STRING_CHARS;
+    }
+}
+/** Close to the characters `sanitizeMessage` would keep, computed without redacting anything. */
+export function messageSize(raw) {
+    let size = 0;
+    for (const block of raw.blocks) {
+        if (!block || typeof block !== 'object') {
+            continue;
+        }
+        const b = block;
+        if (b.type === 'text' && typeof b.text === 'string') {
+            size += Math.min(b.text.length, MAX_TURN_TEXT_CHARS);
+        }
+        else if (b.type === 'thinking' && typeof b.thinking === 'string') {
+            size += Math.min(b.thinking.length, MAX_THINKING_CHARS);
+        }
+        else if (b.type === 'tool_use') {
+            size += jsonLength(sanitizeInput(b.input ?? {}, 0, false, false)) + 50;
+        }
+        else if (b.type === 'tool_result') {
+            size += Math.min(resultText(b.content).length, MAX_TOOL_RESULT_CHARS) + 50;
+        }
+    }
+    return size;
+}
+/** The text of the text blocks of a raw message, joined the way the exchange parser joins them. */
+export function rawMessageText(raw) {
+    return raw.blocks
+        .map((b) => (b && typeof b === 'object' && b.type === 'text' && typeof b.text === 'string' ? b.text : ''))
+        .filter((t) => t.trim().length > 0)
+        .join('\n')
+        .trim();
+}
+//# sourceMappingURL=blocks.js.map

package/dist/sessions/blocks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocks.js","sourceRoot":"","sources":["../../src/sessions/blocks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,gHAAgH;AAChH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAO,CAAC;AAC3C,MAAM,kBAAkB,GAAG,IAAK,CAAC;AACjC,MAAM,qBAAqB,GAAG,IAAK,CAAC;AACpC,MAAM,qBAAqB,GAAG,IAAK,CAAC;AACpC;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAClC,MAAM,iBAAiB,GAAG,IAAK,CAAC;AAChC,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,SAAS,GAAG,cAAc,CAAC;AACjC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,kGAAkG;AAClG,MAAM,SAAS,GAAG,iCAAiC,CAAC;AACpD,kGAAkG;AAClG,MAAM,WAAW,GAAG,kJAAkJ,CAAC;AACvK;;;GAGG;AACH,MAAM,UAAU,GAAG,qQAAqQ,CAAC;AAsBzR,yGAAyG;AACzG,SAAS,KAAK,CAAC,IAAY,EAAE,GAAW,EAAE,MAAM,GAAG,IAAI;IACrD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,GAAG,kBAAkB,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtC,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3E,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7E,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,EAAE,CAAC;AAC3D,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,GAAG,GAAG,mBAAmB;IAC/D,OAAO,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,EAAE,MAAM,GAAG,IAAI;IACpF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7C,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,IAAI,eAAe,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,qFAAqF;QACrF,OAAO,KAAK;aACT,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC;aAC/B,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACxK,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,6GAA6G;QAC7G,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC;QAC7I,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC3E,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtM,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+GAA+G;AAC/G,SAAS,UAAU,CAAC,OAAgB;IAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,GAAI,CAAwB,CAAC,IAAI,CAAC;YAC5C,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAE,CAAwB,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5G,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;aAC3B,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC1C,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChK,CAAC;QACD,KAAK,aAAa;YAChB,OAAO;gBACL,IAAI,EAAE,aAAa;gBACnB,GAAG,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1F,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;gBAC5D,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD,CAAC;QACJ;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAe;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC/F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,WAAW,CAAC,GAAe;IACzC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpD,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACvD,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACnE,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACjC,IAAI,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;QACzE,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACpC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAC,GAAG,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,cAAc,CAAC,GAAe;IAC5C,OAAO,GAAG,CAAC,MAAM;SACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAK,CAAwB,CAAC,IAAI,KAAK,MAAM,IAAI,OAAQ,CAAwB,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAC/K,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SAClC,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAC;AACZ,CAAC"}

package/dist/sessions/claude-scanner.d.ts

@@ -1,8 +1,11 @@
+import { type ContentBlock, type RawMessage } from './blocks.js';
+import { type SubagentUsage, type Usage } from './usage.js';
 import type { SessionFileMeta } from './session-filter.js';
 /** One message in the reconstructed conversation. */
 export interface ConversationMessage {
     role: string;
-    content: string;
+    /** A plain string, or content blocks (thinking, tool calls and results) for hook-captured turns. */
+    content: string | ContentBlock[];
 }
 /**
  * An Anthropic-shaped envelope for ONE whole Claude Code session (a conversation). The server's
@@ -18,6 +21,8 @@ export interface CaptureEnvelope {
     status_code: number;
     request_body: {
         model?: string;
+        /** The skill's text, for hook-captured turns. */
+        system?: string;
         messages: ConversationMessage[];
     };
     response_body: {
@@ -57,6 +62,60 @@ export declare function defaultProjectsDir(): string;
  * exactly once, matching benchmark/lib/transcript.mjs.
  */
 export declare function parseTranscript(content: string, sessionId: string): CaptureEnvelope | null;
+/** The most recent user prompt and the assistant's final reply to it, as plain text. */
+export interface LastTurn {
+    userText?: string;
+    assistantText?: string;
+    model?: string;
+    /** The final assistant message's request id: unique per model call, so it tells a repeated
+     *  identical turn from a hook that fired twice for one turn. */
+    assistantKey?: string;
+}
+/** One user prompt and the assistant's final text reply to it, as plain text. */
+export interface Exchange {
+    /** Undefined for a prompt with no text of its own (e.g. an image), or an assistant reply with no prompt in view. */
+    userText?: string;
+    /** When the user line was written (ISO 8601), straight from the transcript. */
+    timestamp?: string;
+    assistantText?: string;
+    /** Request id of the message `assistantText` came from. */
+    assistantKey?: string;
+    /** Tokens the main-thread assistant messages of this exchange spent (each message counted once). */
+    usage?: Usage;
+    /** What subagents (Agent tool calls) made during this exchange spent, per model. */
+    subagents?: SubagentUsage;
+    /**
+     * Everything after the user's prompt, in order, as the transcript has it: each model call's blocks
+     * (thinking, text, tool calls) merged into one assistant message, and each batch of tool results as a
+     * user message. Raw: redacted and capped only when sent (see `sanitizeMessage`).
+     */
+    messages?: RawMessage[];
+    /** The skill body Claude Code injected after a slash command (`/skill`), if this exchange invoked one. */
+    skill?: {
+        dir: string;
+        text: string;
+    };
+}
+export interface ParsedExchanges {
+    exchanges: Exchange[];
+    /** The latest real model name seen on an assistant line. */
+    model?: string;
+}
+/**
+ * Walk a transcript (or a window of one — a leading partial line is skipped like any other
+ * unparseable line) and return its user→assistant exchanges in order. Each exchange carries its prompt and reply text and
+ * its `messages` (raw blocks: thinking, tool calls and results included). Synthetic `isMeta` user lines (injected skill bodies,
+ * caveats), compaction summaries, interrupt markers and subagent (sidechain) traffic are not prompts.
+ * A typed slash command is recovered as typed. Pure function, never throws.
+ */
+export declare function parseExchanges(content: string): ParsedExchanges;
+/** The latest exchange of already-parsed exchanges, in the shape the Stop-hook adapter wants. */
+export declare function lastTurnFrom(parsed: ParsedExchanges): LastTurn;
+/**
+ * Pull the latest user prompt and the final assistant message out of a transcript (or a window of
+ * one). Text only, the final reply's blocks aside. Pure function, never throws.
+ */
+export declare function extractLastTurn(content: string): LastTurn;
 /**
  * Find every Claude Code transcript under `projectsDir` (default `~/.claude/projects`) and build one
  * conversation envelope per session. A missing directory simply yields zero sessions.

package/dist/sessions/claude-scanner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-scanner.d.ts","sourceRoot":"","sources":["../../src/sessions/claude-scanner.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,mBAAmB,EAAE,CAAC;KACjC,CAAC;IACF,aAAa,EAAE;QACb,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,2FAA2F;IAC3F,SAAS,EAAE,MAAM,CAAC;IAClB;kFAC8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,+FAA+F;IAC/F,WAAW,EAAE,MAAM,CAAC;IACpB;;;sBAGkB;IAClB,EAAE,EAAE,OAAO,CAAC;CACb;AAKD,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAsJD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAkI1F;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,OAAO,GAAE;IACP,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC;CAC3C,GACL,OAAO,CAAC,UAAU,CAAC,CA8ErB;AAED,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CAG7D"}
+{"version":3,"file":"claude-scanner.d.ts","sourceRoot":"","sources":["../../src/sessions/claude-scanner.ts"],"names":[],"mappings":"AAIA,OAAO,EAAiB,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EAAyD,KAAK,aAAa,EAAE,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AACnH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,oGAAoG;IACpG,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,iDAAiD;QACjD,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;KACjC,CAAC;IACF,aAAa,EAAE;QACb,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,2FAA2F;IAC3F,SAAS,EAAE,MAAM,CAAC;IAClB;kFAC8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,+FAA+F;IAC/F,WAAW,EAAE,MAAM,CAAC;IACpB;;;sBAGkB;IAClB,EAAE,EAAE,OAAO,CAAC;CACb;AAKD,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAyJD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAkI1F;AAED,wFAAwF;AACxF,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;oEACgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAoID,iFAAiF;AACjF,MAAM,WAAW,QAAQ;IACvB,oHAAoH;IACpH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oGAAoG;IACpG,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,oFAAoF;IACpF,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;IACxB,0GAA0G;IAC1G,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAuI/D;AAED,iGAAiG;AACjG,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,QAAQ,CAQ9D;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAEzD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,OAAO,GAAE;IACP,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC;CAC3C,GACL,OAAO,CAAC,UAAU,CAAC,CA8ErB;AAED,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CAG7D"}

package/dist/sessions/claude-scanner.js

@@ -2,6 +2,8 @@ import { promises as fs } from 'fs';
 import * as os from 'os';
 import * as path from 'path';
 import { redactSecrets } from './redact-secrets.js';
+import { sanitizeInput } from './blocks.js';
+import { addSubagent, addUsage, emptySubagentUsage, emptyUsage } from './usage.js';
 /** Cap on a single serialised tool input/output. Edit/Write inputs carry whole file bodies. */
 const MAX_BLOCK_CHARS = 2000;
 export function defaultProjectsDir() {
@@ -113,7 +115,10 @@ function sanitizeResponseBlocks(blocks) {
         if (type === 'thinking' || type === 'redacted_thinking') {
             continue;
         }
-        out.push(redactDeep(block));
+        const redacted = redactDeep(block);
+        // A tool call's input needs the key-aware scrub: `redactDeep` only sees each string alone, so
+        // `{ password: 'x' }` would pass.
+        out.push(type === 'tool_use' && 'input' in redacted ? { ...redacted, input: sanitizeInput(block.input) } : redacted);
     }
     return out;
 }
@@ -255,6 +260,277 @@ export function parseTranscript(content, sessionId) {
         projectPath,
     };
 }
+function isToolResultBlock(block) {
+    return !!block && typeof block === 'object' && block.type === 'tool_result';
+}
+/**
+ * Claude Code stores a typed slash command as markup, e.g.
+ *   <command-message>loop-review</command-message>
+ *   <command-name>/loop-review</command-name>
+ *   <command-args>high --max-rounds 3</command-args>
+ * (tags in either order, `<command-args>` present but empty when nothing was typed). The prompt the
+ * user actually typed is `/loop-review high --max-rounds 3`, so that is what is recorded.
+ */
+function slashCommandPrompt(text) {
+    // Claude Code's own line starts with the markup; a prompt that merely quotes it is left alone.
+    const head = text.trimStart();
+    if (!head.startsWith('<command-name>') && !head.startsWith('<command-message>')) {
+        return text;
+    }
+    const tag = (name) => new RegExp(`<${name}>([\\s\\S]*?)</${name}>`).exec(text)?.[1]?.trim();
+    const command = tag('command-name') ?? (tag('command-message') ? `/${tag('command-message')}` : undefined);
+    if (!command) {
+        return text;
+    }
+    const args = tag('command-args');
+    return args ? `${command} ${args}` : command;
+}
+/** Lines Claude Code writes as user messages that the user didn't type. */
+function isInterruptMarker(text) {
+    return text.startsWith('[Request interrupted by user');
+}
+/**
+ * The OUTPUT of a local command (`/compact`, `/context`, `/status`, `/cost`, …) or of bash mode
+ * (`!cmd`) is stored as a non-meta user line. It is not something the user typed and can hold account
+ * details, paths and tool config, so it is never a prompt and is never uploaded.
+ */
+const COMMAND_OUTPUT_TAGS = ['<local-command-stdout>', '<local-command-stderr>', '<bash-input>', '<bash-stdout>', '<bash-stderr>'];
+function isCommandOutput(text) {
+    const head = text.trimStart();
+    return COMMAND_OUTPUT_TAGS.some((tag) => head.startsWith(tag));
+}
+/**
+ * Host- and harness-injected context that rides in user lines but was never typed: Conductor's
+ * `<system_instruction>`, background-task `<task-notification>`s, `<system-reminder>`s and the IDE
+ * extension's `<ide_opened_file>` / `<ide_selection>` blocks. They carry file paths, selected code
+ * and workspace details, and a hook that re-uploads the conversation every turn would send them again
+ * and again. Removed before anything is recorded.
+ */
+const INJECTED_TAGS = '(?:system_instruction|system-reminder|task-notification|local-command-caveat|user-prompt-submit-hook|ide_[a-z_]+)';
+/**
+ * Remove `<tag>…</tag>` elements of the injected kinds above. A single left-to-right pass: for each
+ * opening tag it looks once, forwards, for that tag's closer; an opening tag with no closer takes the
+ * rest of the text with it (fail closed). Linear in the length of the text — a regex with a lazy
+ * `[\s\S]*?` per opener is quadratic on a pasted log full of unclosed tags, and this runs over up to
+ * 8 MB of transcript inside a hook with a timeout. It also means a prompt that merely discusses one of
+ * these tags loses the rest of that text: the cost of failing closed.
+ */
+function stripInjectedContext(text) {
+    const opener = new RegExp(`<(${INJECTED_TAGS})>`, 'g');
+    let out = '';
+    let from = 0;
+    for (;;) {
+        opener.lastIndex = from;
+        const match = opener.exec(text);
+        if (!match) {
+            out += text.slice(from);
+            break;
+        }
+        out += text.slice(from, match.index);
+        const closer = `</${match[1]}>`;
+        const end = text.indexOf(closer, match.index + match[0].length);
+        if (end < 0) {
+            break;
+        }
+        from = end + closer.length;
+    }
+    return out.trim();
+}
+/** All the text of a message's content, untouched: a string, or the `text` blocks of an array. */
+function rawText(content) {
+    if (typeof content === 'string') {
+        return content;
+    }
+    if (Array.isArray(content)) {
+        return content
+            .map((b) => (b && typeof b === 'object' && b.type === 'text' ? String(b.text ?? '') : ''))
+            .join('\n');
+    }
+    return '';
+}
+const SKILL_BODY_PREFIX = 'Base directory for this skill:';
+/**
+ * Claude Code injects an invoked skill as a meta user line: `Base directory for this skill: <dir>`,
+ * a blank line, then the skill's text. The directory (a local path) is kept apart from the text.
+ */
+function parseSkillBody(text) {
+    const trimmed = text.trimStart();
+    if (!trimmed.startsWith(SKILL_BODY_PREFIX)) {
+        return undefined;
+    }
+    const newline = trimmed.indexOf('\n');
+    const dir = (newline < 0 ? trimmed : trimmed.slice(0, newline)).slice(SKILL_BODY_PREFIX.length).trim();
+    const body = newline < 0 ? '' : trimmed.slice(newline + 1).trim();
+    return dir && body ? { dir, text: body } : undefined;
+}
+/** Plain text of a REAL user prompt: a string, or the `text` blocks of an array. Tool results are not prompts. */
+function promptText(content) {
+    if (typeof content === 'string') {
+        return stripInjectedContext(content);
+    }
+    if (Array.isArray(content)) {
+        return content
+            .map((block) => block && typeof block === 'object' && block.type === 'text'
+            ? stripInjectedContext(String(block.text ?? ''))
+            : '')
+            .filter((part) => part.length > 0)
+            .join('\n');
+    }
+    return '';
+}
+/**
+ * Walk a transcript (or a window of one — a leading partial line is skipped like any other
+ * unparseable line) and return its user→assistant exchanges in order. Each exchange carries its prompt and reply text and
+ * its `messages` (raw blocks: thinking, tool calls and results included). Synthetic `isMeta` user lines (injected skill bodies,
+ * caveats), compaction summaries, interrupt markers and subagent (sidechain) traffic are not prompts.
+ * A typed slash command is recovered as typed. Pure function, never throws.
+ */
+export function parseExchanges(content) {
+    const exchanges = [];
+    let model;
+    let current;
+    let groupKey;
+    let parts = [];
+    // Claude Code repeats a message's usage on every content-block line of it: count each message, and each subagent run, once.
+    const countedMessages = new Set();
+    const countedAgents = new Set();
+    const begin = (userText) => {
+        current = { userText };
+        exchanges.push(current);
+        groupKey = undefined;
+        parts = [];
+    };
+    for (const line of content.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed) {
+            continue;
+        }
+        let event;
+        try {
+            event = JSON.parse(trimmed);
+        }
+        catch {
+            continue;
+        }
+        const message = event?.message;
+        if (!message || typeof message !== 'object') {
+            continue;
+        }
+        // Subagent (sidechain) traffic is not the conversation the user is having.
+        if (event.isSidechain === true) {
+            continue;
+        }
+        if (event.type === 'user') {
+            // An Agent tool call's result reports what the subagent spent, and on which model.
+            const result = event.toolUseResult;
+            if (current && result && typeof result === 'object' && !Array.isArray(result)) {
+                const run = result;
+                const agentId = typeof run.agentId === 'string' ? run.agentId : '';
+                if (agentId && run.usage && typeof run.usage === 'object' && !countedAgents.has(agentId)) {
+                    countedAgents.add(agentId);
+                    const model = typeof run.resolvedModel === 'string' && run.resolvedModel ? run.resolvedModel : 'unknown';
+                    addSubagent((current.subagents ?? (current.subagents = emptySubagentUsage())), model, run.usage);
+                }
+            }
+            // Tool results come back as user lines; they are part of the exchange's conversation.
+            if (current && Array.isArray(message.content)) {
+                const results = message.content.filter(isToolResultBlock);
+                if (results.length > 0) {
+                    (current.messages ?? (current.messages = [])).push({ role: 'user', blocks: results });
+                }
+            }
+            // The expanded skill body, injected right after the slash command that invoked it.
+            if (event.isMeta === true && current && !current.skill) {
+                current.skill = parseSkillBody(rawText(message.content));
+            }
+            // Meta lines are injected context and compaction summaries are generated, not typed. A line
+            // carrying any tool_result is the tool loop talking, whatever else rides along with it.
+            if (event.isMeta === true ||
+                event.isCompactSummary === true ||
+                (Array.isArray(message.content) && message.content.some(isToolResultBlock))) {
+                continue;
+            }
+            const text = slashCommandPrompt(promptText(message.content).trim());
+            if (isCommandOutput(text)) {
+                continue;
+            }
+            // A prompt with no text of its own (e.g. an image) still starts a new turn: the reply that
+            // follows must not be paired with the previous prompt.
+            // (A line whose every text block was injected context and has nothing else in it is not a prompt.)
+            const textlessPrompt = !text &&
+                Array.isArray(message.content) &&
+                message.content.some((b) => !!b && typeof b === 'object' && b.type !== 'text');
+            if ((text && !isInterruptMarker(text)) || textlessPrompt) {
+                // A new prompt starts a new exchange; whatever assistant text we had belonged to the old one.
+                begin(text || undefined);
+                if (typeof event.timestamp === 'string' && event.timestamp) {
+                    current.timestamp = event.timestamp;
+                }
+            }
+            continue;
+        }
+        if (event.type === 'assistant' && message.role === 'assistant') {
+            if (!current) {
+                begin(undefined);
+            }
+            const exchange = current;
+            const key = turnKey(event, message, '');
+            if (key && !countedMessages.has(key) && message.usage && typeof message.usage === 'object') {
+                countedMessages.add(key);
+                addUsage((exchange.usage ?? (exchange.usage = emptyUsage())), message.usage);
+            }
+            if (key !== groupKey) {
+                groupKey = key;
+                parts = [];
+            }
+            const blocks = Array.isArray(message.content) ? message.content : [];
+            // One assistant message per model call: its content-block lines share a request id.
+            const sequence = (exchange.messages ?? (exchange.messages = []));
+            const lastMessage = sequence[sequence.length - 1];
+            if (lastMessage && lastMessage.role === 'assistant' && lastMessage.key === key && key) {
+                lastMessage.blocks.push(...blocks);
+            }
+            else {
+                sequence.push({ role: 'assistant', key: key || undefined, blocks: [...blocks] });
+            }
+            for (const block of blocks) {
+                if (block && typeof block === 'object' && block.type === 'text') {
+                    const text = block.text;
+                    if (typeof text === 'string' && text.trim()) {
+                        parts.push(text);
+                    }
+                }
+            }
+            if (parts.length > 0) {
+                exchange.assistantText = parts.join('\n').trim();
+                // The key of the message the text came from, not of a later tool-only message.
+                exchange.assistantKey = key || undefined;
+            }
+            // Claude Code's own placeholder messages (interrupts, API errors) carry a pseudo-model.
+            if (typeof message.model === 'string' && message.model && message.model !== '<synthetic>') {
+                model = message.model;
+            }
+        }
+    }
+    return { exchanges, model };
+}
+/** The latest exchange of already-parsed exchanges, in the shape the Stop-hook adapter wants. */
+export function lastTurnFrom(parsed) {
+    const last = parsed.exchanges[parsed.exchanges.length - 1];
+    return {
+        userText: last?.userText,
+        assistantText: last?.assistantText,
+        model: parsed.model,
+        assistantKey: last?.assistantText ? last.assistantKey : undefined,
+    };
+}
+/**
+ * Pull the latest user prompt and the final assistant message out of a transcript (or a window of
+ * one). Text only, the final reply's blocks aside. Pure function, never throws.
+ */
+export function extractLastTurn(content) {
+    return lastTurnFrom(parseExchanges(content));
+}
 /**
  * Find every Claude Code transcript under `projectsDir` (default `~/.claude/projects`) and build one
  * conversation envelope per session. A missing directory simply yields zero sessions.