crewly 1.20.192 → 1.20.194

package/dist/cli/backend/src/services/monitoring/claude-session-tokens.service.js

@@ -0,0 +1,455 @@
+/**
+ * Claude Session Token Reader
+ *
+ * Reads per-turn token usage from Claude Code's session JSONL files.
+ * Claude Code stores conversations at:
+ *   ~/.claude/projects/{path-slug}/{sessionId}.jsonl
+ * or, for a session that runs on another of the owner's Claude Code accounts
+ * (issue #942, `CLAUDE_CONFIG_DIR` set to the account's config dir):
+ *   <account config dir>/projects/{path-slug}/{sessionId}.jsonl
+ *
+ * Each assistant message includes an API `usage` object with exact
+ * token counts (input_tokens, output_tokens, cache tokens).
+ *
+ * Used as the primary token source for claude-code agents because
+ * Claude Code's TUI status bar is not capturable from PTY scrollback.
+ *
+ * @module services/monitoring/claude-session-tokens
+ */
+import { promises as fs, realpathSync } from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+import { LoggerService } from '../core/logger.service.js';
+/**
+ * Cache-aware cost rates for Claude models (USD per token).
+ * Cache reads are ~10% of input price; cache writes are ~125% of input price.
+ */
+const CLAUDE_COST_RATES = {
+    'claude-opus-4-6': { input: 0.000015, output: 0.000075, cacheRead: 0.0000015, cacheWrite: 0.00001875 },
+    'claude-opus-4-20250514': { input: 0.000015, output: 0.000075, cacheRead: 0.0000015, cacheWrite: 0.00001875 },
+    'claude-sonnet-4-6': { input: 0.000003, output: 0.000015, cacheRead: 0.0000003, cacheWrite: 0.00000375 },
+    'claude-sonnet-4-20250514': { input: 0.000003, output: 0.000015, cacheRead: 0.0000003, cacheWrite: 0.00000375 },
+    'claude-haiku-4-20250506': { input: 0.00000025, output: 0.00000125, cacheRead: 0.000000025, cacheWrite: 0.0000003125 },
+    default: { input: 0.000003, output: 0.000015, cacheRead: 0.0000003, cacheWrite: 0.00000375 },
+};
+/**
+ * Calculates cost with proper cache-aware pricing for Claude models.
+ */
+function calculateClaudeCost(inputTokens, outputTokens, cacheReadTokens, cacheCreateTokens, model) {
+    const rates = CLAUDE_COST_RATES[model] || CLAUDE_COST_RATES.default;
+    return (inputTokens * rates.input +
+        outputTokens * rates.output +
+        cacheReadTokens * rates.cacheRead +
+        cacheCreateTokens * rates.cacheWrite);
+}
+/** Claude Code's per-user state directory, under the home directory. */
+const CLAUDE_DIR_NAME = '.claude';
+/** Subdirectory of {@link CLAUDE_DIR_NAME} holding one directory per project slug. */
+const CLAUDE_PROJECTS_DIR_NAME = 'projects';
+/** File extension of Claude Code conversation transcripts. */
+const JSONL_EXTENSION = '.jsonl';
+const logger = LoggerService.getInstance().createComponentLogger('ClaudeSessionTokens');
+/**
+ * Encodes an absolute path into the slug format used by Claude Code
+ * for its projects directory. Replaces `/` with `-`.
+ *
+ * @param projectPath - Absolute path (e.g. /Users/alice/.crewly)
+ * @returns Encoded slug (e.g. -Users-alice--crewly)
+ */
+export function encodeProjectSlug(projectPath) {
+    // Claude Code replaces both / and . with - in its project directory slug
+    return projectPath.replace(/[/.]/g, '-');
+}
+/**
+ * Builds the ordered, de-duplicated list of Claude Code project slugs that may
+ * hold transcripts for a working directory.
+ *
+ * Claude Code names its project directory after the *resolved* cwd (it sees
+ * `process.cwd()`, which the OS has already run through any symlinks). On
+ * macOS `/tmp` and `/var` are symlinks into `/private`, so an agent launched
+ * in `/tmp/proj` writes to `-private-tmp-proj`, not `-tmp-proj` (#938).
+ *
+ * The realpath slug comes first because that is where Claude Code writes. The
+ * raw slug is kept as a fallback for a cwd that cannot be resolved (deleted,
+ * permission denied) and for transcripts written before a directory was moved
+ * behind a symlink. Resolution failures never throw.
+ *
+ * @param projectPath - The agent's working directory, as Crewly recorded it
+ * @returns Slugs to try, most likely first; never empty
+ *
+ * @example
+ * ```typescript
+ * await resolveProjectSlugCandidates('/tmp/proj');
+ * // macOS: ['-private-tmp-proj', '-tmp-proj']; Linux: ['-tmp-proj']
+ * ```
+ */
+export async function resolveProjectSlugCandidates(projectPath) {
+    const rawSlug = encodeProjectSlug(projectPath);
+    let resolvedSlug = null;
+    try {
+        resolvedSlug = encodeProjectSlug(await fs.realpath(projectPath));
+    }
+    catch {
+        // Nonexistent or unreadable cwd — the raw slug is the only guess left.
+    }
+    return resolvedSlug && resolvedSlug !== rawSlug ? [resolvedSlug, rawSlug] : [rawSlug];
+}
+/**
+ * Synchronous {@link resolveProjectSlugCandidates}, for callers that cannot
+ * await (launch-time resume checks).
+ *
+ * The raw slug is taken from the absolute (`path.resolve`d) cwd.
+ *
+ * @param projectPath - The agent's working directory
+ * @returns Slugs to try, realpath slug first; never empty
+ *
+ * @example
+ * ```typescript
+ * resolveProjectSlugCandidatesSync('/tmp/proj');
+ * // macOS: ['-private-tmp-proj', '-tmp-proj']
+ * ```
+ */
+export function resolveProjectSlugCandidatesSync(projectPath) {
+    const absolute = path.resolve(projectPath);
+    const rawSlug = encodeProjectSlug(absolute);
+    let resolvedSlug = null;
+    try {
+        resolvedSlug = encodeProjectSlug(realpathSync(absolute));
+    }
+    catch {
+        // Nonexistent or unreadable cwd — the raw slug is the only guess left.
+    }
+    return resolvedSlug && resolvedSlug !== rawSlug ? [resolvedSlug, rawSlug] : [rawSlug];
+}
+/**
+ * The `projects/` directories Claude Code may have written a session's
+ * transcripts to, most likely first.
+ *
+ * A session on another of the owner's Claude Code accounts (issue #942) runs
+ * with `CLAUDE_CONFIG_DIR` set to that account's config dir, so its
+ * transcripts land in `<config dir>/projects/`. The default login's
+ * `~/.claude/projects/` is always included last: a session that switched
+ * accounts during the day has transcripts in both.
+ *
+ * @param homeDir - Home directory that contains `.claude/`
+ * @param configDirs - Claude config dirs of the session's accounts (current account first)
+ * @returns Absolute `projects/` directory paths, de-duplicated
+ *
+ * @example
+ * ```typescript
+ * claudeProjectsRoots('/Users/a', ['/Users/a/.crewly/claude-accounts/work']);
+ * // ['/Users/a/.crewly/claude-accounts/work/projects', '/Users/a/.claude/projects']
+ * ```
+ */
+export function claudeProjectsRoots(homeDir, configDirs = []) {
+    const roots = [
+        ...configDirs.map((dir) => path.join(dir, CLAUDE_PROJECTS_DIR_NAME)),
+        path.join(homeDir, CLAUDE_DIR_NAME, CLAUDE_PROJECTS_DIR_NAME),
+    ];
+    return [...new Set(roots)];
+}
+/**
+ * Lists the Claude Code project directories that may hold transcripts for a
+ * working directory: every root of {@link claudeProjectsRoots}, each with the
+ * slugs of {@link resolveProjectSlugCandidates}. The directories are not
+ * required to exist.
+ *
+ * @param projectPath - The agent's working directory
+ * @param homeDir - Home directory that contains `.claude/` (defaults to the OS home)
+ * @param configDirs - Config dirs of the owner's other Claude Code accounts the session runs on (searched first)
+ * @returns Absolute candidate directory paths, most likely first
+ */
+export async function resolveProjectDirCandidates(projectPath, homeDir = os.homedir(), configDirs = []) {
+    const slugs = await resolveProjectSlugCandidates(projectPath);
+    return claudeProjectsRoots(homeDir, configDirs).flatMap((root) => slugs.map((slug) => path.join(root, slug)));
+}
+/**
+ * Locates a known conversation's transcript across all candidate project
+ * directories, returning the first one that exists.
+ *
+ * @param projectPath - The agent's working directory
+ * @param sessionId - Claude Code conversation UUID
+ * @param homeDir - Home directory that contains `.claude/` (defaults to the OS home)
+ * @param configDirs - Config dirs of the owner's other Claude Code accounts (searched first)
+ * @returns Absolute path to the existing .jsonl file, or null if none exists
+ */
+export async function findSessionJsonlPath(projectPath, sessionId, homeDir = os.homedir(), configDirs = []) {
+    for (const dir of await resolveProjectDirCandidates(projectPath, homeDir, configDirs)) {
+        const candidate = path.join(dir, `${sessionId}${JSONL_EXTENSION}`);
+        try {
+            await fs.access(candidate);
+            return candidate;
+        }
+        catch {
+            continue;
+        }
+    }
+    return null;
+}
+/**
+ * Lists every transcript file across all candidate project directories.
+ *
+ * Merges rather than stopping at the first existing directory: if both the
+ * resolved and the raw slug directories exist, the live conversation may be in
+ * either, and picking a directory by existence alone could lock onto a stale
+ * one. A file name seen in an earlier (more likely) directory shadows the same
+ * name in a later one, so a conversation is never listed twice.
+ *
+ * @param projectPath - The agent's working directory
+ * @param homeDir - Home directory that contains `.claude/` (defaults to the OS home)
+ * @param configDirs - Config dirs of the owner's other Claude Code accounts (searched first)
+ * @returns Absolute paths of all .jsonl files found, grouped by candidate directory order
+ */
+export async function listProjectTranscripts(projectPath, homeDir = os.homedir(), configDirs = []) {
+    const seen = new Set();
+    const result = [];
+    for (const dir of await resolveProjectDirCandidates(projectPath, homeDir, configDirs)) {
+        let files;
+        try {
+            files = await fs.readdir(dir);
+        }
+        catch {
+            continue;
+        }
+        for (const file of files) {
+            if (!file.endsWith(JSONL_EXTENSION) || seen.has(file))
+                continue;
+            seen.add(file);
+            result.push(path.join(dir, file));
+        }
+    }
+    return result;
+}
+/**
+ * Finds the most recently modified transcript across all candidate project
+ * directories for a working directory.
+ *
+ * @param projectPath - The agent's working directory
+ * @param homeDir - Home directory that contains `.claude/` (defaults to the OS home)
+ * @param configDirs - Config dirs of the owner's other Claude Code accounts (searched too)
+ * @returns Absolute path of the newest .jsonl file, or null if there is none
+ */
+export async function findLatestSessionFile(projectPath, homeDir = os.homedir(), configDirs = []) {
+    let latestFile = null;
+    let latestMtime = -1;
+    for (const file of await listProjectTranscripts(projectPath, homeDir, configDirs)) {
+        try {
+            const { mtimeMs } = await fs.stat(file);
+            if (mtimeMs > latestMtime) {
+                latestMtime = mtimeMs;
+                latestFile = file;
+            }
+        }
+        catch {
+            continue;
+        }
+    }
+    return latestFile;
+}
+/**
+ * Returns the path to a Claude Code session JSONL file under the *raw* cwd
+ * slug. Does not resolve symlinks — prefer {@link findSessionJsonlPath},
+ * which also checks the realpath slug Claude Code actually writes to.
+ *
+ * @param projectPath - The agent's working directory
+ * @param sessionId - Claude Code conversation UUID
+ * @returns Absolute path to the .jsonl file
+ */
+export function getSessionJsonlPath(projectPath, sessionId) {
+    const slug = encodeProjectSlug(projectPath);
+    return path.join(os.homedir(), CLAUDE_DIR_NAME, CLAUDE_PROJECTS_DIR_NAME, slug, `${sessionId}${JSONL_EXTENSION}`);
+}
+/**
+ * Finds the most recently modified .jsonl session file in a Claude Code
+ * project directory. Used as a fallback when the session ID is not known
+ * (e.g. the orchestrator session, which may not have been persisted yet).
+ * Checks both the realpath and the raw cwd slug directories.
+ *
+ * @param projectPath - The agent's working directory
+ * @returns The session UUID, or null if no JSONL files found
+ */
+export async function findLatestSessionId(projectPath) {
+    const latest = await findLatestSessionFile(projectPath);
+    return latest ? path.basename(latest, JSONL_EXTENSION) : null;
+}
+/**
+ * Reads token usage from a Claude Code session JSONL, summing all
+ * assistant turns whose timestamp is at or after `since`.
+ *
+ * Reads the file from the end backwards for efficiency — recent
+ * entries are at the tail.
+ *
+ * @param projectPath - The agent's working directory
+ * @param sessionId - Claude Code conversation UUID (if null, auto-detects latest)
+ * @param since - Only count turns at or after this time
+ * @param until - Only count turns before this time (defaults to now)
+ * @param configDirs - Config dirs of the owner's other Claude Code accounts the session runs on
+ * @returns Aggregated token summary, or null if the file doesn't exist
+ */
+export async function getTokensSince(projectPath, sessionId, since, until, configDirs = []) {
+    // Auto-detect session if not provided
+    const filePath = sessionId
+        ? await findSessionJsonlPath(projectPath, sessionId, os.homedir(), configDirs)
+        : await findLatestSessionFile(projectPath, os.homedir(), configDirs);
+    if (!filePath) {
+        logger.debug('No Claude session JSONL found', { projectPath, sessionId });
+        return null;
+    }
+    let content;
+    try {
+        content = await fs.readFile(filePath, 'utf-8');
+    }
+    catch {
+        logger.debug('Session JSONL not found', { filePath });
+        return null;
+    }
+    const sinceMs = since.getTime();
+    const untilMs = until ? until.getTime() : Infinity;
+    const summary = {
+        inputTokens: 0,
+        outputTokens: 0,
+        cacheReadTokens: 0,
+        cacheCreateTokens: 0,
+        cost: 0,
+        model: '',
+        turnCount: 0,
+    };
+    // Parse lines from the end — most recent entries are last
+    const lines = content.split('\n');
+    for (let i = lines.length - 1; i >= 0; i--) {
+        const line = lines[i].trim();
+        if (!line)
+            continue;
+        let entry;
+        try {
+            entry = JSON.parse(line);
+        }
+        catch {
+            continue;
+        }
+        // Only assistant messages carry usage data
+        if (entry.type !== 'assistant')
+            continue;
+        const ts = entry.timestamp;
+        if (!ts)
+            continue;
+        // Timestamp can be ISO string or epoch ms
+        const entryMs = typeof ts === 'number' ? ts : new Date(ts).getTime();
+        if (isNaN(entryMs))
+            continue;
+        // Stop scanning once we're before the window — entries are chronological
+        if (entryMs < sinceMs)
+            break;
+        // Skip entries after the upper bound
+        if (entryMs > untilMs)
+            continue;
+        const msg = entry.message;
+        if (!msg)
+            continue;
+        const usage = msg.usage;
+        if (!usage)
+            continue;
+        const inputTokens = usage.input_tokens || 0;
+        const outputTokens = usage.output_tokens || 0;
+        const cacheRead = usage.cache_read_input_tokens || 0;
+        const cacheCreate = usage.cache_creation_input_tokens || 0;
+        const model = msg.model || '';
+        summary.inputTokens += inputTokens + cacheRead + cacheCreate;
+        summary.outputTokens += outputTokens;
+        summary.cacheReadTokens += cacheRead;
+        summary.cacheCreateTokens += cacheCreate;
+        summary.cost += calculateClaudeCost(inputTokens, outputTokens, cacheRead, cacheCreate, model);
+        summary.turnCount += 1;
+        if (!summary.model && model)
+            summary.model = model;
+    }
+    return summary;
+}
+/**
+ * Scans all Claude Code session JSONL files for a project and feeds
+ * aggregated per-session token data into TokenUsageService.
+ *
+ * This bridges the gap between Claude Code's file-based token tracking
+ * and the in-memory TokenUsageService that powers the Usage dashboard.
+ * Should be called once during server startup.
+ *
+ * Only processes sessions modified in the last `maxAgeDays` to avoid
+ * scanning hundreds of old session files.
+ *
+ * @param projectPath - The project's working directory
+ * @param maxAgeDays - Only process sessions modified within this many days (default: 7)
+ * @returns Number of sessions loaded
+ */
+export async function syncSessionsToTokenUsageService(projectPath, maxAgeDays = 7) {
+    const { TokenUsageService } = await import('./token-usage.service.js');
+    const tokenSvc = TokenUsageService.getInstance();
+    const jsonlFiles = await listProjectTranscripts(projectPath);
+    if (jsonlFiles.length === 0) {
+        logger.debug('No Claude transcripts found for project', { projectPath });
+        return 0;
+    }
+    const cutoffMs = Date.now() - maxAgeDays * 24 * 60 * 60 * 1000;
+    let loaded = 0;
+    for (const filePath of jsonlFiles) {
+        try {
+            const stat = await fs.stat(filePath);
+            if (stat.mtimeMs < cutoffMs)
+                continue;
+            const content = await fs.readFile(filePath, 'utf-8');
+            const lines = content.split('\n');
+            let sessionInput = 0;
+            let sessionOutput = 0;
+            let sessionCacheRead = 0;
+            let sessionCacheCreate = 0;
+            let model = '';
+            let turnCount = 0;
+            for (const line of lines) {
+                if (!line.trim())
+                    continue;
+                try {
+                    const entry = JSON.parse(line);
+                    if (entry.type !== 'assistant')
+                        continue;
+                    const msg = entry.message;
+                    if (!msg?.usage)
+                        continue;
+                    const u = msg.usage;
+                    sessionInput += u.input_tokens || 0;
+                    sessionOutput += u.output_tokens || 0;
+                    sessionCacheRead += u.cache_read_input_tokens || 0;
+                    sessionCacheCreate += u.cache_creation_input_tokens || 0;
+                    if (!model && msg.model)
+                        model = msg.model;
+                    turnCount++;
+                }
+                catch {
+                    continue;
+                }
+            }
+            if (turnCount > 0) {
+                const sessionId = path.basename(filePath, JSONL_EXTENSION);
+                const resolvedModel = model || 'claude-sonnet-4-6';
+                // Calculate cost with proper cache-aware pricing
+                const cost = calculateClaudeCost(sessionInput, sessionOutput, sessionCacheRead, sessionCacheCreate, resolvedModel);
+                // Record only real input tokens (not cache) to avoid inflating counts.
+                // Pass pre-calculated cost via a dedicated method if available,
+                // otherwise record raw tokens and let the dashboard use our cost.
+                tokenSvc.recordUsage(sessionId, sessionId, sessionInput, sessionOutput, resolvedModel);
+                // Override the auto-calculated cost with our cache-aware cost
+                tokenSvc.overrideSessionCost(sessionId, cost);
+                loaded++;
+            }
+        }
+        catch {
+            continue;
+        }
+    }
+    logger.info('Synced Claude Code sessions to TokenUsageService', {
+        projectPath,
+        scannedFiles: jsonlFiles.length,
+        loadedSessions: loaded,
+        maxAgeDays,
+    });
+    return loaded;
+}
+//# sourceMappingURL=claude-session-tokens.service.js.map

package/dist/cli/backend/src/services/monitoring/claude-session-tokens.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-session-tokens.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/monitoring/claude-session-tokens.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClD,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D;;;GAGG;AACH,MAAM,iBAAiB,GAA6F;IAClH,iBAAiB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE;IACtG,wBAAwB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE;IAC7G,mBAAmB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE;IACxG,0BAA0B,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE;IAC/G,yBAAyB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE;IACtH,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE;CAC7F,CAAC;AAEF;;GAEG;AACH,SAAS,mBAAmB,CAC1B,WAAmB,EACnB,YAAoB,EACpB,eAAuB,EACvB,iBAAyB,EACzB,KAAa;IAEb,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC;IACpE,OAAO,CACL,WAAW,GAAG,KAAK,CAAC,KAAK;QACzB,YAAY,GAAG,KAAK,CAAC,MAAM;QAC3B,eAAe,GAAG,KAAK,CAAC,SAAS;QACjC,iBAAiB,GAAG,KAAK,CAAC,UAAU,CACrC,CAAC;AACJ,CAAC;AAaD,wEAAwE;AACxE,MAAM,eAAe,GAAG,SAAS,CAAC;AAClC,sFAAsF;AACtF,MAAM,wBAAwB,GAAG,UAAU,CAAC;AAC5C,8DAA8D;AAC9D,MAAM,eAAe,GAAG,QAAQ,CAAC;AAEjC,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;AAExF;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,yEAAyE;IACzE,OAAO,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,WAAmB;IACpE,MAAM,OAAO,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,YAAY,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;IACD,OAAO,YAAY,IAAI,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gCAAgC,CAAC,WAAmB;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,YAAY,GAAG,iBAAiB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;IACD,OAAO,YAAY,IAAI,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,aAAgC,EAAE;IACrF,MAAM,KAAK,GAAG;QACZ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,wBAAwB,CAAC;KAC9D,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,WAAmB,EACnB,UAAkB,EAAE,CAAC,OAAO,EAAE,EAC9B,aAAgC,EAAE;IAElC,MAAM,KAAK,GAAG,MAAM,4BAA4B,CAAC,WAAW,CAAC,CAAC;IAC9D,OAAO,mBAAmB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAChH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAmB,EACnB,SAAiB,EACjB,UAAkB,EAAE,CAAC,OAAO,EAAE,EAC9B,aAAgC,EAAE;IAElC,KAAK,MAAM,GAAG,IAAI,MAAM,2BAA2B,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;QACtF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,eAAe,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,WAAmB,EACnB,UAAkB,EAAE,CAAC,OAAO,EAAE,EAC9B,aAAgC,EAAE;IAElC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,MAAM,2BAA2B,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;QACtF,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAChE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAmB,EACnB,UAAkB,EAAE,CAAC,OAAO,EAAE,EAC9B,aAAgC,EAAE;IAElC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,MAAM,sBAAsB,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;QAClF,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;gBAC1B,WAAW,GAAG,OAAO,CAAC;gBACtB,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB,EAAE,SAAiB;IACxE,MAAM,IAAI,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,wBAAwB,EAAE,IAAI,EAAE,GAAG,SAAS,GAAG,eAAe,EAAE,CAAC,CAAC;AACpH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IAC3D,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAmB,EACnB,SAAwB,EACxB,KAAW,EACX,KAAY,EACZ,aAAgC,EAAE;IAElC,sCAAsC;IACtC,MAAM,QAAQ,GAAG,SAAS;QACxB,CAAC,CAAC,MAAM,oBAAoB,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC;QAC9E,CAAC,CAAC,MAAM,qBAAqB,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;IACvE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IACnD,MAAM,OAAO,GAAwB;QACnC,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,eAAe,EAAE,CAAC;QAClB,iBAAiB,EAAE,CAAC;QACpB,IAAI,EAAE,CAAC;QACP,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,CAAC;KACb,CAAC;IAEF,0DAA0D;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,IAAI,KAA8B,CAAC;QACnC,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,2CAA2C;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QAEzC,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;QAC3B,IAAI,CAAC,EAAE;YAAE,SAAS;QAElB,0CAA0C;QAC1C,MAAM,OAAO,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAY,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/E,IAAI,KAAK,CAAC,OAAO,CAAC;YAAE,SAAS;QAE7B,yEAAyE;QACzE,IAAI,OAAO,GAAG,OAAO;YAAE,MAAM;QAE7B,qCAAqC;QACrC,IAAI,OAAO,GAAG,OAAO;YAAE,SAAS;QAEhC,MAAM,GAAG,GAAG,KAAK,CAAC,OAA8C,CAAC;QACjE,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,MAAM,KAAK,GAAG,GAAG,CAAC,KAA2C,CAAC;QAC9D,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,uBAAuB,IAAI,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,KAAK,CAAC,2BAA2B,IAAI,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAI,GAAG,CAAC,KAAgB,IAAI,EAAE,CAAC;QAE1C,OAAO,CAAC,WAAW,IAAI,WAAW,GAAG,SAAS,GAAG,WAAW,CAAC;QAC7D,OAAO,CAAC,YAAY,IAAI,YAAY,CAAC;QACrC,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC;QACrC,OAAO,CAAC,iBAAiB,IAAI,WAAW,CAAC;QACzC,OAAO,CAAC,IAAI,IAAI,mBAAmB,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QAC9F,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK;YAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;IACrD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,WAAmB,EACnB,UAAU,GAAG,CAAC;IAEd,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;IAEjD,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAC7D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC/D,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,OAAO,GAAG,QAAQ;gBAAE,SAAS;YAEtC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,IAAI,aAAa,GAAG,CAAC,CAAC;YACtB,IAAI,gBAAgB,GAAG,CAAC,CAAC;YACzB,IAAI,kBAAkB,GAAG,CAAC,CAAC;YAC3B,IAAI,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,SAAS,GAAG,CAAC,CAAC;YAElB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;oBAAE,SAAS;gBAC3B,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;wBAAE,SAAS;oBACzC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;oBAC1B,IAAI,CAAC,GAAG,EAAE,KAAK;wBAAE,SAAS;oBAE1B,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;oBACpB,YAAY,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;oBACpC,aAAa,IAAI,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC;oBACtC,gBAAgB,IAAI,CAAC,CAAC,uBAAuB,IAAI,CAAC,CAAC;oBACnD,kBAAkB,IAAI,CAAC,CAAC,2BAA2B,IAAI,CAAC,CAAC;oBACzD,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK;wBAAE,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;oBAC3C,SAAS,EAAE,CAAC;gBACd,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;YAED,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;gBAC3D,MAAM,aAAa,GAAG,KAAK,IAAI,mBAAmB,CAAC;gBAEnD,iDAAiD;gBACjD,MAAM,IAAI,GAAG,mBAAmB,CAC9B,YAAY,EAAE,aAAa,EAC3B,gBAAgB,EAAE,kBAAkB,EACpC,aAAa,CACd,CAAC;gBAEF,uEAAuE;gBACvE,gEAAgE;gBAChE,kEAAkE;gBAClE,QAAQ,CAAC,WAAW,CAClB,SAAS,EACT,SAAS,EACT,YAAY,EACZ,aAAa,EACb,aAAa,CACd,CAAC;gBAEF,8DAA8D;gBAC9D,QAAQ,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC9C,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE;QAC9D,WAAW;QACX,YAAY,EAAE,UAAU,CAAC,MAAM;QAC/B,cAAc,EAAE,MAAM;QACtB,UAAU;KACX,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cli/backend/src/services/people/acting-for.service.d.ts

@@ -0,0 +1,188 @@
+/**
+ * Acting-for — the person each agent session is working for right now
+ * (issue #968).
+ *
+ * Every human message delivered to an agent records its sender as the person
+ * that agent acts for until the next human message: a Slack message records
+ * the sender's Slack user id (`owner` for any Slack id of the owner), a
+ * dashboard message records the owner. A message one agent sends another
+ * passes the sender's person on, so work delegated for Info stays Info's — and
+ * a message an agent wrote is never recorded as a person, even when it came
+ * through Slack under a bot's user id. Scheduled, autonomous and system turns
+ * act for the owner.
+ *
+ * The record is set only by the backend from what it delivered — never from
+ * anything an agent sends — and connector credential requests carry it to
+ * Cloud, which decides whether that person may use the grant.
+ *
+ * Kept in `<CREWLY_HOME>/acting-for.json` so a restart does not turn a
+ * member's in-flight turn into the owner's.
+ *
+ * specs/per-person-access.md
+ *
+ * @module services/people/acting-for.service
+ */
+import { type PeopleDirectoryService, type PersonRole } from './people-directory.service.js';
+/** Where an acting-for record came from. */
+export type ActingForSource = 'slack' | 'dashboard' | 'agent' | 'system';
+/** One session's record. */
+export interface ActingForEntry {
+    /** Person id (a member's Slack user id, or `owner`) */
+    personId: string;
+    source: ActingForSource;
+    /** ISO time it was recorded */
+    at: string;
+}
+/** The person a request acts for, as Cloud is told. */
+export interface Actor {
+    id: string;
+    role: PersonRole;
+    /** Display name, for messages */
+    name: string;
+}
+/** Injectable dependencies. */
+export interface ActingForDeps {
+    filePath?: string;
+    people?: () => PeopleDirectoryService;
+    now?: () => number;
+}
+/** The acting-for record. */
+export declare class ActingForService {
+    private readonly filePathOverride?;
+    private readonly people;
+    private readonly now;
+    private cache;
+    /**
+     * @param deps - Store path, people directory, clock
+     */
+    constructor(deps?: ActingForDeps);
+    /**
+     * Record that a session now acts for a person.
+     *
+     * @param session - Agent session name
+     * @param personId - Slack user id, or `owner`
+     * @param source - What delivered the message
+     */
+    record(session: string, personId: string, source: ActingForSource): void;
+    /**
+     * Record a human message delivered to a session: a Slack sender, or the
+     * owner when it carries no Slack sender (dashboard / terminal).
+     *
+     * @param session - Agent session name
+     * @param slackUserId - Sender's Slack user id, when the message came from Slack
+     */
+    recordHumanMessage(session: string, slackUserId: string | null | undefined): void;
+    /**
+     * A turn nobody asked for just now — a scheduled check, a scheduled
+     * message, an autonomous run, a system event: it acts for the owner, not
+     * for whoever spoke last.
+     *
+     * @param session - Agent session
+     */
+    recordSystemTurn(session: string): void;
+    /**
+     * A message an agent wrote (in Slack, or a chat row an agent authored):
+     * the target acts for whoever that agent acts for. When the author has no
+     * record here (an agent on another machine) the target is left as it was.
+     *
+     * @param target - Receiving session
+     * @param authorSession - The agent that wrote it
+     */
+    inheritFromAgent(target: string, authorSession: string): void;
+    /**
+     * A message from one agent to another: the target acts for whoever the
+     * sender acts for (the owner when the sender has no record).
+     *
+     * @param target - Receiving session
+     * @param fromSession - Sending session
+     */
+    inherit(target: string, fromSession: string): void;
+    /**
+     * A session's record.
+     *
+     * @param session - Agent session name
+     * @returns Entry, or null when the session never got a human message
+     */
+    get(session: string): ActingForEntry | null;
+    /**
+     * The person a request acts for: the owner for a request with no agent
+     * session (the owner's dashboard), else the session's record (the owner
+     * when it has none).
+     *
+     * @param session - Calling agent session, if any
+     * @returns Actor
+     */
+    actorFor(session?: string | null): Actor;
+    /**
+     * @param personId - Person id
+     * @returns `owner` for the owner by any spelling, else the id
+     */
+    private canonical;
+    /**
+     * @param id - Slack user id
+     * @returns True for a known bot (false when the directory cannot tell)
+     */
+    private isBot;
+    /** Forget everything (tests). */
+    clear(): void;
+    /** @returns Store path */
+    private filePath;
+    /** @returns All records (read once, then cached) */
+    private load;
+    /**
+     * Save atomically (best effort: the in-memory record still applies).
+     *
+     * @param all - Records
+     */
+    private save;
+}
+/**
+ * The backend's acting-for record.
+ *
+ * @returns Singleton
+ */
+export declare function getActingFor(): ActingForService;
+/**
+ * Replace the singleton (tests).
+ *
+ * @param service - Instance, or null to reset
+ */
+export declare function setActingForForTesting(service: ActingForService | null): void;
+/**
+ * Before a scheduled, autonomous or system turn is delivered: the session
+ * acts for the owner (best effort, never throws).
+ *
+ * @param session - Agent session the turn goes to
+ */
+export declare function noteSystemTurn(session: string): void;
+/**
+ * Run work as a person: connector token requests made inside carry that
+ * person to Cloud.
+ *
+ * @param actor - Person
+ * @param fn - Work
+ * @returns What `fn` returns
+ */
+export declare function runAsActor<T>(actor: Actor, fn: () => T): T;
+/**
+ * The person the current request acts for.
+ *
+ * @returns Actor, or null outside a connector request (backend-internal calls)
+ */
+export declare function currentActor(): Actor | null;
+/**
+ * Headers that tell Cloud who a credential request is for.
+ *
+ * @param actor - Person (default: the current request's)
+ * @returns Headers (empty outside a connector request)
+ */
+export declare function actingForHeaders(actor?: Actor | null): Record<string, string>;
+/**
+ * Cache-key suffix for a token fetched for the current person, so one
+ * person's cached token is never handed to another.
+ *
+ * @param actor - Person (default: the current request's)
+ * @returns `''` outside a connector request, else `\0<person id>`
+ */
+export declare function actorCacheSuffix(actor?: Actor | null): string;
+//# sourceMappingURL=acting-for.service.d.ts.map

package/dist/cli/backend/src/services/people/acting-for.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acting-for.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/people/acting-for.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAOH,OAAO,EAAsB,KAAK,sBAAsB,EAAE,KAAK,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAEjH,4CAA4C;AAC5C,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,WAAW,GAAG,OAAO,GAAG,QAAQ,CAAC;AAKzE,4BAA4B;AAC5B,MAAM,WAAW,cAAc;IAC9B,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,eAAe,CAAC;IACxB,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;CACX;AAED,uDAAuD;AACvD,MAAM,WAAW,KAAK;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;CACb;AAED,+BAA+B;AAC/B,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,sBAAsB,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,6BAA6B;AAC7B,qBAAa,gBAAgB;IAC5B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,KAAK,CAA+C;IAE5D;;OAEG;gBACS,IAAI,GAAE,aAAkB;IAMpC;;;;;;OAMG;IACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IAUxE;;;;;;OAMG;IACH,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI;IAgBjF;;;;;;OAMG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIvC;;;;;;;OAOG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAM7D;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAMlD;;;;;OAKG;IACH,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAK3C;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK;IASxC;;;OAGG;IACH,OAAO,CAAC,SAAS;IAQjB;;;OAGG;IACH,OAAO,CAAC,KAAK;IAQb,iCAAiC;IACjC,KAAK,IAAI,IAAI;IAIb,0BAA0B;IAC1B,OAAO,CAAC,QAAQ;IAIhB,oDAAoD;IACpD,OAAO,CAAC,IAAI;IAoBZ;;;;OAIG;IACH,OAAO,CAAC,IAAI;CAYZ;AAID;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,gBAAgB,CAG/C;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAE7E;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMpD;AAID;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAE1D;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,KAAK,GAAG,IAAI,CAE3C;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,GAAE,KAAK,GAAG,IAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAG7F;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,GAAE,KAAK,GAAG,IAAqB,GAAG,MAAM,CAE7E"}