crewly 1.20.307 → 1.20.309

package/dist/backend/backend/src/services/board/canvas/canvas-redact.js

@@ -0,0 +1,161 @@
+/**
+ * Redaction for what the canvas shows (crewly#1247 v2), on the machine, before
+ * anything leaves it:
+ *
+ * - {@link shortAgentLine}: the agent's own words from a transcript, reduced
+ *   to one short line (at most 280 characters), no code blocks, no secrets;
+ * - {@link maskTerminalText}: a terminal tail with every secret, token, email
+ *   and URL query masked.
+ *
+ * Both reuse the board's {@link scrubText} and the secret redactor that guards
+ * the session logs; this file only adds what those do not cover (zero-width
+ * characters, base64 blobs, spaced `key = value` secrets, ANSI).
+ *
+ * Pure (no I/O).
+ *
+ * @module services/board/canvas/canvas-redact
+ */
+import { CANVAS_CONSTANTS } from '../../../constants.js';
+import { redactSecrets } from '../../../utils/secret-redactor.js';
+import { clip, looksLikeToken, REDACTED, scrubText } from '../board-redact.js';
+const C = CANVAS_CONSTANTS;
+/** A terminal capture is cut to this many characters from the end before any pattern runs. */
+const MAX_RAW_CHARS = 400_000;
+/** A raw line is cut to this many characters (an escape-heavy line shrinks after ANSI removal). */
+const MAX_RAW_LINE = 6_000;
+/** A line is masked over its first this many characters (the displayed 400 plus room for a secret that straddles the cut; the cost is quadratic in it). */
+const MASK_LINE_CHARS = 600;
+// eslint-disable-next-line no-control-regex
+const ANSI = /\x1b\[[0-9;?]*[ -/]*[@-~]|\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)|\x1b[PX^_][^\x1b]*\x1b\\|\x1b[@-Z\\^_=>]|\x9b[0-9;?]*[ -/]*[@-~]/g;
+/** Characters that hide text or reorder it. */
+const INVISIBLE = /[\u200b-\u200f\u202a-\u202e\u2060-\u2069\ufeff]/g;
+/** A long run of base64 / base64url, or a data: URI payload. */
+const BASE64_BLOB = /data:[\w/+.-]+;base64,[A-Za-z0-9+/_=-]+|[A-Za-z0-9+_]{40,}={0,2}/g;
+/** `secret_key = value` with spaces around the separator (the shared redactor wants `NAME=value`). */
+const SPACED_SECRET = /((?:api[_ -]?key|secret|token|passw(?:or)?d|passphrase|private[_ -]?key|credential|auth)[\w-]*\s*(?:[:=]|is)\s+)["']?[^\s"',;]{4,}/gi;
+const PROMPT_SECRET = /((?:password|passphrase|pin|otp|verification code|2fa code)(?:\s+for\s+\S+)?\s*(?:\([^)]*\))?\s*[:?]\s*)\S.*$/gim;
+/** `[REDACTED NAME]` from the shared redactor, without the name (which env var it was is not Cloud's business). */
+const REDACTED_MASK = /\[REDACTED[^\]]*\]/g;
+const EMAIL = /[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}/g;
+const URL_QUERY = /(\bhttps?:\/\/[^\s?#"'<>]+)\?[^\s"'<>]*/gi;
+const URL_CREDENTIALS = /(\b[a-z][a-z0-9+.-]*:\/\/)[^\s/@:]+:[^\s/@]+@/gi;
+const BEARER = /\b(?:bearer|basic)\s+[A-Za-z0-9._~+/=-]{6,}/gi;
+const HEX_LONG = /\b[0-9a-fA-F]{32,}\b/g;
+/** A phone number: international (`+...`) or three-three-four groups. Dates, versions and model ids are not. */
+const PHONE = /(?<![\w.-])(?:\+\d[\d\s().-]{8,}\d|\(?\d{3}\)?[\s.-]\d{3}[\s.-]\d{4})(?![\w-])/g;
+/**
+ * Whether a word of a terminal line looks like a credential. Slugs such as
+ * `claude-opus-4-5-20251101` (lowercase words joined by dashes) are not.
+ *
+ * @param word - Word without surrounding punctuation
+ * @returns True when it should be masked
+ */
+function looksSecretWord(word) {
+    if (word.length < 24 || !/^[A-Za-z0-9_+=/-]+$/.test(word))
+        return false;
+    if (!/\d/.test(word) || !/[A-Za-z]/.test(word))
+        return false;
+    if (/^[a-z0-9]+(?:-[a-z0-9.]+)+$/.test(word))
+        return false;
+    if (word.includes('/'))
+        return false; // a path
+    return looksLikeToken(word) || (/[A-Z]/.test(word) && /[a-z]/.test(word));
+}
+/**
+ * Mask what must not be shown in either surface.
+ *
+ * @param text - One line or a whole text
+ * @returns Text with emails, URL queries / credentials, bearer tokens, long hex, blobs and spaced secrets masked
+ */
+function maskCommon(text) {
+    let s = text;
+    s = s.replace(URL_CREDENTIALS, `$1${REDACTED}@`);
+    s = s.replace(URL_QUERY, '$1?[query]');
+    s = s.replace(EMAIL, '[email]');
+    s = s.replace(BEARER, REDACTED);
+    s = s.replace(SPACED_SECRET, `$1${REDACTED}`);
+    s = s.replace(HEX_LONG, REDACTED);
+    s = s.replace(BASE64_BLOB, (m) => (m.startsWith('data:') || m.endsWith('=') || (/\d/.test(m) && /[A-Z]/.test(m) && /[a-z]/.test(m)) ? REDACTED : m));
+    return s;
+}
+/**
+ * Reduce an assistant message block to one short, safe line.
+ *
+ * Takes the first paragraph outside code fences (a list item or heading loses
+ * its marker), removes markdown emphasis, masks secrets / emails / URL
+ * queries / phone numbers, and cuts at 280 characters. Anything that is
+ * markup (`<system-reminder>`), an interrupt notice, or empty after masking
+ * gives null.
+ *
+ * @param raw - Text of a `text` block
+ * @param secrets - Exact secret values to mask (backend env)
+ * @returns The line, or null when nothing worth showing is left
+ */
+export function shortAgentLine(raw, secrets = []) {
+    if (typeof raw !== 'string')
+        return null;
+    let s = raw.length > 6000 ? raw.slice(0, 6000) : raw;
+    s = s.replace(INVISIBLE, '').replace(ANSI, '');
+    // Code is never a "short line": drop fenced blocks (an unclosed fence runs to the end)
+    s = s.replace(/```[\s\S]*?(?:```|$)/g, '\n\n').replace(/~~~[\s\S]*?(?:~~~|$)/g, '\n\n');
+    const paragraphs = s
+        .split(/\n\s*\n/)
+        .map((p) => p.trim())
+        .filter(Boolean);
+    let first = paragraphs.find((p) => !/^(?:\||<|\[Request interrupted|No response requested|API Error)/i.test(p)) ?? '';
+    // Soft-wrapped lines are one sentence; a list shows its first item
+    const lines = first.split('\n').map((l) => l.trim()).filter(Boolean);
+    first = /^(?:[-*+]|\d+[.)])\s/.test(lines[0] ?? '') ? (lines[0] ?? '') : lines.join(' ');
+    first = first
+        .replace(/^(?:#{1,6}|[-*+]|\d+[.)]|>)\s+/, '')
+        .replace(/\[([^\]]{1,120})\]\(([^)\s]*)\)/g, '$1')
+        .replace(/(\*\*|__|\*|_|`)/g, '');
+    if (first.length < 2 || /^<[a-z/!]/i.test(first))
+        return null;
+    const out = scrubText(maskCommon(redactSecrets(first, secrets).replace(REDACTED_MASK, REDACTED)).replace(PHONE, '[number]'), C.TEXT_MAX);
+    if (!/[\p{L}\p{N}]/u.test(out.replace(/\[(?:redacted|email|number|query)\]/gi, '')))
+        return null;
+    return out;
+}
+/**
+ * Mask a terminal tail for the canvas: ANSI and control characters removed,
+ * then secrets (by value, by `NAME=value`, by shape), emails, URL queries and
+ * credentials, bearer tokens, password prompts and long token-like words.
+ *
+ * @param text - Raw tail (the PTY capture)
+ * @param secrets - Exact secret values to mask (backend env)
+ * @param maxLines - Keep this many lines from the end
+ * @returns Lines, oldest first, each at most {@link CANVAS_CONSTANTS.TERMINAL_MAX_LINE_CHARS} characters
+ */
+export function maskTerminalText(text, secrets = [], maxLines = C.TERMINAL_TAIL_LINES) {
+    // Bound the work first: the patterns below are linear per line, but a single
+    // megabyte-long line of letters would still cost seconds in the email pattern
+    const bounded = (text.length > MAX_RAW_CHARS ? text.slice(-MAX_RAW_CHARS) : text)
+        .split('\n')
+        .slice(-(maxLines + 20))
+        .map((l) => (l.length > MAX_RAW_LINE ? l.slice(0, MAX_RAW_LINE) : l));
+    let s = bounded.join('\n').replace(/\r\n/g, '\n').replace(ANSI, '').replace(INVISIBLE, '');
+    // A carriage return redraws the line: keep what was drawn last
+    s = s
+        .split('\n')
+        .map((l) => {
+        const drawn = l.includes('\r') ? (l.split('\r').filter(Boolean).pop() ?? '') : l;
+        return drawn.length > MASK_LINE_CHARS ? drawn.slice(0, MASK_LINE_CHARS) : drawn;
+    })
+        .join('\n');
+    // eslint-disable-next-line no-control-regex
+    s = s.replace(/[\u0000-\u0008\u000b-\u001f\u007f]/g, '');
+    // Whole-text passes first: a private key block spans lines
+    s = redactSecrets(s, secrets).replace(REDACTED_MASK, REDACTED);
+    s = s.replace(PROMPT_SECRET, `$1${REDACTED}`);
+    const lines = s.split('\n').map((line) => {
+        let l = maskCommon(line);
+        l = l.replace(PHONE, '[number]');
+        l = l.replace(/[A-Za-z0-9_+=/-]{24,}/g, (w) => (looksSecretWord(w) ? REDACTED : w));
+        return clip(l.replace(/\s+$/, ''), C.TERMINAL_MAX_LINE_CHARS);
+    });
+    while (lines.length > 0 && lines[lines.length - 1] === '')
+        lines.pop();
+    return lines.slice(-maxLines);
+}
+//# sourceMappingURL=canvas-redact.js.map

package/dist/backend/backend/src/services/board/canvas/canvas-redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canvas-redact.js","sourceRoot":"","sources":["../../../../../../../backend/src/services/board/canvas/canvas-redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAElE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/E,MAAM,CAAC,GAAG,gBAAgB,CAAC;AAE3B,8FAA8F;AAC9F,MAAM,aAAa,GAAG,OAAO,CAAC;AAC9B,mGAAmG;AACnG,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,2JAA2J;AAC3J,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,4CAA4C;AAC5C,MAAM,IAAI,GAAG,+HAA+H,CAAC;AAC7I,+CAA+C;AAC/C,MAAM,SAAS,GAAG,kDAAkD,CAAC;AACrE,gEAAgE;AAChE,MAAM,WAAW,GAAG,mEAAmE,CAAC;AACxF,sGAAsG;AACtG,MAAM,aAAa,GAAG,sIAAsI,CAAC;AAC7J,MAAM,aAAa,GAAG,kHAAkH,CAAC;AACzI,mHAAmH;AACnH,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAC5C,MAAM,KAAK,GAAG,oEAAoE,CAAC;AACnF,MAAM,SAAS,GAAG,2CAA2C,CAAC;AAC9D,MAAM,eAAe,GAAG,iDAAiD,CAAC;AAC1E,MAAM,MAAM,GAAG,+CAA+C,CAAC;AAC/D,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AACzC,gHAAgH;AAChH,MAAM,KAAK,GAAG,iFAAiF,CAAC;AAEhG;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,IAAY;IACpC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,SAAS;IAC/C,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,IAAY;IAC/B,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,QAAQ,GAAG,CAAC,CAAC;IACjD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACvC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAChC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC9C,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrJ,OAAO,CAAC,CAAC;AACV,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY,EAAE,UAAqC,EAAE;IACnF,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACrD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/C,uFAAuF;IACvF,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACxF,MAAM,UAAU,GAAG,CAAC;SAClB,KAAK,CAAC,SAAS,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,IAAI,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kEAAkE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtH,mEAAmE;IACnE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrE,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzF,KAAK,GAAG,KAAK;SACX,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC;SAC7C,OAAO,CAAC,kCAAkC,EAAE,IAAI,CAAC;SACjD,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,uCAAuC,EAAE,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,UAAqC,EAAE,EAAE,WAAmB,CAAC,CAAC,mBAAmB;IAC/H,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;SAC/E,KAAK,CAAC,IAAI,CAAC;SACX,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC3F,+DAA+D;IAC/D,CAAC,GAAG,CAAC;SACH,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,OAAO,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACjF,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,4CAA4C;IAC5C,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,qCAAqC,EAAE,EAAE,CAAC,CAAC;IACzD,2DAA2D;IAC3D,CAAC,GAAG,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC/D,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxC,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACjC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IACvE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC"}

package/dist/backend/backend/src/services/board/canvas/canvas-step.normalizer.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Step normalizer (crewly#1247 v2): maps a runtime tool call, a browser action,
+ * a chat reply or a wait on the owner to one canvas step: a kind, a verb
+ * (`label`) and a redacted `target`. Same redaction rules as the board
+ * ({@link scrubText}, repo-relative paths, host + path, executable +
+ * subcommand); the raw tool input is read here and dropped.
+ *
+ * Pure (no I/O).
+ *
+ * @module services/board/canvas/canvas-step.normalizer
+ */
+import { type NormalizeContext, type ToolInput } from '../board-activity.normalizer.js';
+import type { StepKind } from './canvas.types.js';
+/** What a step says before it gets an id and a time. */
+export interface StepShape {
+    kind: StepKind;
+    label: string;
+    target?: string;
+}
+/**
+ * One tool call as a step.
+ *
+ * @param toolName - Runtime tool name (`Edit`, `Bash`, `mcp__x__y`, ...)
+ * @param input - Validated input slice (see {@link parseToolInput})
+ * @param ctx - Project roots for relative paths
+ * @returns Kind, verb and redacted target
+ *
+ * @example
+ * ```typescript
+ * stepOfTool('Bash', { command: 'cd app && npm test -- --ci' }); // { kind: 'command', label: 'Ran', target: 'npm test' }
+ * stepOfTool('WebSearch', { query: 'open swarm rivals' }); // { kind: 'search', label: 'Searched', target: '"open swarm rivals"' }
+ * ```
+ */
+export declare function stepOfTool(toolName: string, input?: ToolInput, ctx?: NormalizeContext): StepShape;
+/**
+ * A browser action by an agent (the Chrome extension path).
+ *
+ * @param tool - Extension tool name (`navigate`, `click`, ...)
+ * @param url - The page the agent is on, if known
+ * @returns Step shape
+ */
+export declare function stepOfBrowserAction(tool: string, url?: string): StepShape;
+/**
+ * An agent message to the owner or a channel.
+ *
+ * @param channel - Channel or chat name (`#general`, `owner chat`, `Slack`)
+ * @returns Step shape
+ */
+export declare function stepOfMessage(channel: string): StepShape;
+/**
+ * The agent waits for the owner.
+ *
+ * @param what - Short plain-words description
+ * @returns Step shape
+ */
+export declare function stepOfOwnerWait(what: string): StepShape;
+//# sourceMappingURL=canvas-step.normalizer.d.ts.map

package/dist/backend/backend/src/services/board/canvas/canvas-step.normalizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canvas-step.normalizer.d.ts","sourceRoot":"","sources":["../../../../../../../backend/src/services/board/canvas/canvas-step.normalizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAMN,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,MAAM,iCAAiC,CAAC;AAEzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD,wDAAwD;AACxD,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAoDD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,GAAE,SAAc,EAAE,GAAG,GAAE,gBAAqB,GAAG,SAAS,CAyCzG;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAYzE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAGxD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAEvD"}

package/dist/backend/backend/src/services/board/canvas/canvas-step.normalizer.js

@@ -0,0 +1,164 @@
+/**
+ * Step normalizer (crewly#1247 v2): maps a runtime tool call, a browser action,
+ * a chat reply or a wait on the owner to one canvas step: a kind, a verb
+ * (`label`) and a redacted `target`. Same redaction rules as the board
+ * ({@link scrubText}, repo-relative paths, host + path, executable +
+ * subcommand); the raw tool input is read here and dropped.
+ *
+ * Pure (no I/O).
+ *
+ * @module services/board/canvas/canvas-step.normalizer
+ */
+import { BROWSING_SKILLS, CHANNEL_NAME, flagValue, MESSAGING_SKILLS, WRITING_SKILLS, } from '../board-activity.normalizer.js';
+import { clip, looksLikeToken, redactUrl, reduceCommand, relativePath, scrubText } from '../board-redact.js';
+const shape = (kind, label, target) => {
+    const t = target ? clip(scrubText(target, 120)) : '';
+    return { kind, label, ...(t ? { target: t } : {}) };
+};
+const channelName = (raw, fallback) => {
+    // A readable name only: a chat-v2 channel id (a UUID) or a Slack id says nothing to the owner
+    if (!raw || !CHANNEL_NAME.test(raw) || looksLikeToken(raw.replace(/^#/, '')) || /^[0-9a-f]{8}-/i.test(raw) || /^[CDG][A-Z0-9]{8,}$/.test(raw))
+        return fallback;
+    return raw.startsWith('#') ? raw : `#${raw}`;
+};
+function fromCommand(command) {
+    const reduced = reduceCommand(command);
+    if (!reduced)
+        return shape('command', 'Ran', 'a shell command');
+    if (reduced.skill) {
+        const skill = reduced.skill;
+        if (MESSAGING_SKILLS.has(skill)) {
+            const fallback = skill.includes('slack') ? 'Slack' : skill === 'reply-channel' ? 'a channel' : 'owner chat';
+            return shape('message', 'Sent message', channelName(flagValue(reduced.args, ['--channel', '--to']), fallback));
+        }
+        if (BROWSING_SKILLS.has(skill)) {
+            const url = reduced.args.find((w) => /^https?:\/\//i.test(w));
+            if (skill === 'web-search')
+                return shape('search', 'Searched', 'the web');
+            return shape('browse', url ? 'Opened' : 'Browsed', url ? redactUrl(url) : 'the browser');
+        }
+        const place = WRITING_SKILLS[skill];
+        if (place)
+            return shape('write', 'Wrote in', place);
+        return shape('command', 'Ran', reduced.label);
+    }
+    if ((reduced.executable === 'curl' || reduced.executable === 'wget') && reduced.args.length > 0) {
+        const url = reduced.args.find((w) => /^https?:\/\//i.test(w));
+        if (url)
+            return shape('browse', 'Fetched', redactUrl(url));
+    }
+    return shape('command', 'Ran', reduced.label);
+}
+function fromMcp(name, input) {
+    const parts = name.split('__');
+    const server = parts[1] ?? 'mcp';
+    const tool = parts.slice(2).join('_') || server;
+    const hay = `${server} ${tool}`.toLowerCase();
+    if (/browser|chrome|playwright|puppeteer|navigate|screenshot/.test(hay)) {
+        return shape('browse', /navigate/.test(hay) ? 'Opened' : 'Browsed', input.url ? redactUrl(input.url) : 'the browser');
+    }
+    if (/slack|chat|message|mail|email|telegram|whatsapp|discord/.test(hay))
+        return shape('message', 'Sent message', server);
+    if (/search/.test(hay))
+        return shape('search', 'Searched', server);
+    if (/docs?|drive|sheets?|slides?|notion|zoho|canva|wiki|write|publish/.test(hay))
+        return shape('write', 'Wrote in', server);
+    return shape('tool', 'Used', `${server} ${tool}`);
+}
+/**
+ * One tool call as a step.
+ *
+ * @param toolName - Runtime tool name (`Edit`, `Bash`, `mcp__x__y`, ...)
+ * @param input - Validated input slice (see {@link parseToolInput})
+ * @param ctx - Project roots for relative paths
+ * @returns Kind, verb and redacted target
+ *
+ * @example
+ * ```typescript
+ * stepOfTool('Bash', { command: 'cd app && npm test -- --ci' }); // { kind: 'command', label: 'Ran', target: 'npm test' }
+ * stepOfTool('WebSearch', { query: 'open swarm rivals' }); // { kind: 'search', label: 'Searched', target: '"open swarm rivals"' }
+ * ```
+ */
+export function stepOfTool(toolName, input = {}, ctx = {}) {
+    const name = toolName || 'tool';
+    const rel = input.filePath ? relativePath(input.filePath, ctx.roots ?? []) : '';
+    switch (name) {
+        case 'Read':
+            return shape('read', 'Read', rel || 'a file');
+        case 'Edit':
+        case 'MultiEdit':
+            return shape('edit', 'Edited', rel || 'a file');
+        case 'NotebookEdit':
+            return shape('edit', 'Edited', rel || 'a notebook');
+        case 'Write':
+            return shape('write', 'Wrote', rel || 'a file');
+        case 'Grep':
+        case 'Glob':
+        case 'LS':
+            return shape('search', 'Searched', rel || 'the code');
+        case 'Bash':
+        case 'BashOutput':
+        case 'KillShell':
+            return input.command ? fromCommand(input.command) : shape('command', 'Ran', 'a shell command');
+        case 'WebFetch':
+            return shape('browse', 'Opened', input.url ? redactUrl(input.url) : 'a web page');
+        case 'WebSearch': {
+            const q = input.query ? scrubText(input.query, 100) : '';
+            return shape('search', 'Searched', q ? `"${q}"` : 'the web');
+        }
+        case 'Task':
+        case 'Agent':
+            return shape('tool', 'Asked', 'a helper agent');
+        case 'TodoWrite':
+            return shape('tool', 'Planned', 'the next steps');
+        case 'AskUserQuestion':
+            return shape('wait', 'Asked', 'the owner a question');
+        case 'ExitPlanMode':
+            return shape('wait', 'Waiting for', 'plan approval');
+        default:
+            break;
+    }
+    if (name.startsWith('mcp__'))
+        return fromMcp(name, input);
+    return shape('tool', 'Used', /^[A-Za-z0-9_-]{1,64}$/.test(name) ? name : 'a tool');
+}
+/**
+ * A browser action by an agent (the Chrome extension path).
+ *
+ * @param tool - Extension tool name (`navigate`, `click`, ...)
+ * @param url - The page the agent is on, if known
+ * @returns Step shape
+ */
+export function stepOfBrowserAction(tool, url) {
+    const where = url ? redactUrl(url) : 'the browser';
+    const verbs = {
+        navigate: 'Opened',
+        click: 'Clicked on',
+        type: 'Typed on',
+        scroll: 'Scrolled',
+        screenshot: 'Looked at',
+        read: 'Read',
+        extract: 'Read',
+    };
+    return shape('browse', verbs[tool] ?? 'Browsed', where);
+}
+/**
+ * An agent message to the owner or a channel.
+ *
+ * @param channel - Channel or chat name (`#general`, `owner chat`, `Slack`)
+ * @returns Step shape
+ */
+export function stepOfMessage(channel) {
+    const name = CHANNEL_NAME.test(channel) && !channel.startsWith('#') && channel !== 'owner chat' && channel !== 'Slack' ? `#${channel}` : channel;
+    return shape('message', 'Sent message', name);
+}
+/**
+ * The agent waits for the owner.
+ *
+ * @param what - Short plain-words description
+ * @returns Step shape
+ */
+export function stepOfOwnerWait(what) {
+    return shape('wait', 'Waiting for', what || 'the owner');
+}
+//# sourceMappingURL=canvas-step.normalizer.js.map

package/dist/backend/backend/src/services/board/canvas/canvas-step.normalizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canvas-step.normalizer.js","sourceRoot":"","sources":["../../../../../../../backend/src/services/board/canvas/canvas-step.normalizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACN,eAAe,EACf,YAAY,EACZ,SAAS,EACT,gBAAgB,EAChB,cAAc,GAGd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAU7G,MAAM,KAAK,GAAG,CAAC,IAAc,EAAE,KAAa,EAAE,MAAe,EAAa,EAAE;IAC3E,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACrD,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,GAAuB,EAAE,QAAgB,EAAU,EAAE;IACzE,8FAA8F;IAC9F,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/J,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AAC9C,CAAC,CAAC;AAEF,SAAS,WAAW,CAAC,OAAe;IACnC,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;YAC5G,OAAO,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChH,CAAC;QACD,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,IAAI,KAAK,KAAK,YAAY;gBAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YAC1E,OAAO,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjG,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,GAAG;YAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,KAAgB;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC;IAChD,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,yDAAyD,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzE,OAAO,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACvH,CAAC;IACD,IAAI,yDAAyD,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IACzH,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACnE,IAAI,kEAAkE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5H,OAAO,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,QAAmB,EAAE,EAAE,MAAwB,EAAE;IAC7F,MAAM,IAAI,GAAG,QAAQ,IAAI,MAAM,CAAC;IAChC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,MAAM;YACV,OAAO,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC;QACZ,KAAK,WAAW;YACf,OAAO,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;QACjD,KAAK,cAAc;YAClB,OAAO,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC;QACrD,KAAK,OAAO;YACX,OAAO,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;QACjD,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,IAAI;YACR,OAAO,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC;QACZ,KAAK,YAAY,CAAC;QAClB,KAAK,WAAW;YACf,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;QAChG,KAAK,UAAU;YACd,OAAO,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACnF,KAAK,WAAW,CAAC,CAAC,CAAC;YAClB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO;YACX,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACjD,KAAK,WAAW;YACf,OAAO,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACnD,KAAK,iBAAiB;YACrB,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC;QACvD,KAAK,cAAc;YAClB,OAAO,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;QACtD;YACC,MAAM;IACR,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,GAAY;IAC7D,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IACnD,MAAM,KAAK,GAA2B;QACrC,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,WAAW;QACvB,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,MAAM;KACf,CAAC;IACF,OAAO,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,KAAK,CAAC,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC5C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,YAAY,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IACjJ,OAAO,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC3C,OAAO,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,IAAI,WAAW,CAAC,CAAC;AAC1D,CAAC"}

package/dist/backend/backend/src/services/board/canvas/canvas-step.stream.d.ts

@@ -0,0 +1,140 @@
+/**
+ * The live step stream per agent (crewly#1247 v2).
+ *
+ * Pairs a tool start with its end (hook PreToolUse / PostToolUse) into one
+ * {@link StepEvent} with a duration and a status, takes instant steps (a chat
+ * reply, a browser action) and the agent's own short text lines (from the
+ * transcript tail), and keeps the last 300 per agent in memory.
+ *
+ * A step is sent again, with the same id, when it changes (`running` ->
+ * `done` / `error`): `unsent` holds the newest version of every step Cloud has
+ * not taken yet, so a failed push loses nothing (capped per agent).
+ *
+ * In memory only; nothing here reads files or the network. Everything that
+ * goes in has been through the redaction in {@link ./canvas-step.normalizer}
+ * and {@link ./canvas-redact}.
+ *
+ * @module services/board/canvas/canvas-step.stream
+ */
+import type { StepShape } from './canvas-step.normalizer.js';
+import type { StepEvent, StepStatus } from './canvas.types.js';
+/** Called when a session's steps changed. */
+export type StepChangeListener = (session: string) => void;
+/**
+ * Steps per agent.
+ */
+export declare class StepStream {
+    private readonly sessions;
+    private readonly listeners;
+    /**
+     * Subscribe to changes.
+     *
+     * @param listener - Called with the session whose steps changed
+     * @returns Unsubscribe
+     */
+    onChange(listener: StepChangeListener): () => void;
+    private emit;
+    private get;
+    private touch;
+    private insert;
+    /** A running step older than the limit lost its end: close it without a duration. */
+    private sweep;
+    /**
+     * A step began (a tool call started).
+     *
+     * @param session - Agent session
+     * @param shape - Kind, verb and target
+     * @param opts.id - The runtime's tool-call id; a derived one when absent
+     * @param now - Clock (tests)
+     * @returns The step id
+     */
+    start(session: string, shape: StepShape, opts?: {
+        id?: string;
+    }, now?: number): string;
+    /**
+     * A step ended. Without an id the oldest running step ends (a hook that
+     * did not name its tool call).
+     *
+     * @param session - Agent session
+     * @param id - Step id, if known
+     * @param status - How it ended
+     * @param now - Clock (tests)
+     */
+    finish(session: string, id?: string, status?: StepStatus, now?: number): void;
+    /**
+     * A step turned out to have failed (the transcript's `is_error` flag), after
+     * its end was already seen.
+     *
+     * @param session - Agent session
+     * @param id - Step id
+     * @param now - Clock (tests)
+     */
+    markError(session: string, id: string, now?: number): void;
+    /**
+     * A step that has no duration (a message sent, a page opened by the
+     * extension). Dropped when a tool call of the same kind is running, or the
+     * previous step is the same thing within 5 s (a skill's own tool call and
+     * the controller that served it).
+     *
+     * @param session - Agent session
+     * @param shape - Kind, verb and target
+     * @param now - Clock (tests)
+     * @returns The step id, or null when it repeated the previous step
+     */
+    instant(session: string, shape: StepShape, now?: number): string | null;
+    /**
+     * One line of the agent's own words.
+     *
+     * @param session - Agent session
+     * @param id - Stable id (the transcript entry's uuid)
+     * @param atMs - When it was written
+     * @param text - Already reduced and redacted (see shortAgentLine)
+     * @returns True when it is new
+     */
+    text(session: string, id: string, atMs: number, text: string): boolean;
+    /**
+     * The turn ended: whatever still runs ended with it.
+     *
+     * @param session - Agent session
+     * @param now - Clock (tests)
+     */
+    closeAll(session: string, now?: number): void;
+    /**
+     * A session's recent steps (oldest first).
+     *
+     * @param session - Agent session
+     * @param limit - Newest this many
+     * @param now - Clock (tests)
+     * @returns Copies
+     */
+    recent(session: string, limit?: number, now?: number): StepEvent[];
+    /** Whether the session has a step that is still running. */
+    hasRunning(session: string): boolean;
+    /**
+     * Steps (new or changed) Cloud has not taken. Call {@link ackUnsent} once
+     * it did.
+     *
+     * @param sessions - Only these sessions (all when omitted)
+     * @param max - Most steps in all
+     * @param perSession - Most steps per session (the oldest go first; the rest wait for the next delta)
+     * @returns Steps, oldest first
+     */
+    peekUnsent(sessions?: Iterable<string>, max?: number, perSession?: number): StepEvent[];
+    /**
+     * Mark steps as taken. A step that changed since it was peeked stays
+     * unsent (and goes out again); steps left over by the per-delta limit stay
+     * too, for the next delta.
+     *
+     * @param steps - What {@link peekUnsent} returned and Cloud accepted
+     */
+    ackUnsent(steps: readonly StepEvent[]): void;
+    /** Sessions with steps not yet sent. */
+    sessionsWithUnsent(): string[];
+    /**
+     * Forget a session (it was deleted).
+     *
+     * @param session - Agent session
+     */
+    forget(session: string): void;
+}
+//# sourceMappingURL=canvas-step.stream.d.ts.map

package/dist/backend/backend/src/services/board/canvas/canvas-step.stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canvas-step.stream.d.ts","sourceRoot":"","sources":["../../../../../../../backend/src/services/board/canvas/canvas-step.stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAe/D,6CAA6C;AAC7C,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAI3D;;GAEG;AACH,qBAAa,UAAU;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiC;IAE3D;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,IAAI;IAKlD,OAAO,CAAC,IAAI;IAUZ,OAAO,CAAC,GAAG;IASX,OAAO,CAAC,KAAK;IAQb,OAAO,CAAC,MAAM;IAad,qFAAqF;IACrF,OAAO,CAAC,KAAK;IAiBb;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,GAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAO,EAAE,GAAG,GAAE,MAAmB,GAAG,MAAM;IAetG;;;;;;;;OAQG;IACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,GAAE,UAAmB,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI;IAejG;;;;;;;OAOG;IACH,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI;IAItE;;;;;;;;;;OAUG;IACH,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,GAAE,MAAmB,GAAG,MAAM,GAAG,IAAI;IAmBnF;;;;;;;;OAQG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAmBtE;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI;IAOzD;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,EAAE,GAAG,GAAE,MAAmB,GAAG,SAAS,EAAE;IAOlF,4DAA4D;IAC5D,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIpC;;;;;;;;OAQG;IACH,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,GAAE,MAA0B,EAAE,UAAU,GAAE,MAAoC,GAAG,SAAS,EAAE;IAavI;;;;;;OAMG;IACH,SAAS,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,GAAG,IAAI;IAS5C,wCAAwC;IACxC,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;;;OAIG;IACH,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAG7B"}