failproofai 1.0.11 → 1.0.12-beta.1

package/src/hooks/semantic/jev-client.ts

@@ -536,6 +536,14 @@ export interface NativeTransportOptions {
   allowUnreported?: boolean;
   /** The base URL came from a connection, not from the person (FailproofAI Cloud). */
   derivedBase?: boolean;
+  /**
+   * FailproofAI Cloud: the reply's `cloud` block (its verdict for the Cloud
+   * checks deployed to this machine, CONTRACT C10.4) is carried through as
+   * `JevResponse.cloud`, unvalidated — `parseCloudReply` in `cloud-jev.ts`
+   * validates it field by field. A reply that carries one may come without
+   * `answers` (Cloud's short-circuit asked nothing), which reads as none.
+   */
+  cloudReply?: boolean;
 }
 
 /**
@@ -545,7 +553,12 @@ export interface NativeTransportOptions {
  */
 function normalizeNative(body: unknown, sentModel: string, opts: NativeTransportOptions): JevResponse {
   if (!body || typeof body !== "object" || Array.isArray(body)) throw new JevError("malformed", "Jev returned no object");
-  const b = body as { model?: unknown; answers?: unknown; usage?: unknown; error?: unknown };
+  const b = body as { model?: unknown; answers?: unknown; usage?: unknown; error?: unknown; cloud?: unknown };
+  const cloud = opts.cloudReply && b.cloud !== undefined ? { cloud: b.cloud } : {};
+  if ((typeof b.answers !== "object" || b.answers === null) && "cloud" in cloud && b.error === undefined) {
+    // Cloud's short-circuit: nothing was asked, so there is nothing to answer.
+    return { model: typeof b.model === "string" ? scrubSecret(b.model, opts.apiKey) : "", answers: {}, ...cloud };
+  }
   if (typeof b.answers !== "object" || b.answers === null) {
     // Gateways sometimes report an upstream failure inside a 200.
     if (b.error !== undefined) {
@@ -576,6 +589,7 @@ function normalizeNative(body: unknown, sentModel: string, opts: NativeTransport
     answers: b.answers as JevResponse["answers"],
     ...(usage ? { usage } : {}),
     ...(unverified ? { modelUnverified: true } : {}),
+    ...cloud,
   };
 }
 
@@ -1146,6 +1160,9 @@ export function transportForConfig(input: JevConfig): { transport: JevTransport;
             // `readAnswers` then holds the reported id to the 1.13 family.
             allowUnreported: false,
             derivedBase: true,
+            // Cloud's verdict for its own checks, when the request asked for
+            // it (a `cloud` block, CONTRACT C10.3).
+            cloudReply: true,
           }),
         ),
         via: "failproofai",

package/src/hooks/semantic/jev-config.ts

@@ -89,8 +89,8 @@
  */
 import { closeSync, constants as fsConstants, fstatSync, openSync, readSync, statSync } from "node:fs";
 import { dirname } from "node:path";
-import { readJevCloudCredential, type JevCloudCredential } from "../fp-config";
-import { jevConfigFile } from "../fp-home";
+import { readConfig, readCredentials, readJevCloudCredential, type JevCloudCredential } from "../fp-config";
+import { configFile, credentialsFile, jevConfigFile } from "../fp-home";
 
 export type { JevCloudCredential } from "../fp-config";
 
@@ -179,6 +179,15 @@ export const JEV_API_KEY_ENV = "FAILPROOFAI_JEV_API_KEY";
  * the evaluator; the two are pinned equal by a test.
  */
 export const JEV_CONFIG_DEFAULT_TIMEOUT_MS = 3_000;
+/**
+ * How long one call waits for FailproofAI Cloud when Cloud's Jev mode asks
+ * (CONTRACT C10.2). Longer than the local default above: the call makes one
+ * more hop (Cloud selects this machine's checks, forwards to Jev, and decides
+ * them) before it answers. A local BYOK `jev.json` keeps its own `timeoutMs`
+ * or the default; this one is fixed, because under a Cloud mode `jev.json` is
+ * not read at all. Past it, the regex decides alone, as for any fallback.
+ */
+export const CLOUD_JEV_TIMEOUT_MS = 5_000;
 /** Bounds on `timeoutMs`. Every millisecond of it can be added to a tool call. */
 export const MIN_JEV_TIMEOUT_MS = 100;
 export const MAX_JEV_TIMEOUT_MS = 10_000;
@@ -618,7 +627,15 @@ export function validateJevConfig(
     };
   }
 
-  const cfg: JevConfig = { provider: kind, apiKey, mode: DEFAULT_JEV_MODE, timeoutMs: JEV_CONFIG_DEFAULT_TIMEOUT_MS };
+  // The FailproofAI Cloud provider waits as long as a Cloud Jev mode does (B9):
+  // the same extra hop, and `jev setup --provider failproofai` printing 3000 ms
+  // misstated what FailproofAI Cloud is given.
+  const cfg: JevConfig = {
+    provider: kind,
+    apiKey,
+    mode: DEFAULT_JEV_MODE,
+    timeoutMs: kind === JEV_CLOUD_PROVIDER ? CLOUD_JEV_TIMEOUT_MS : JEV_CONFIG_DEFAULT_TIMEOUT_MS,
+  };
 
   if (o.baseUrl !== undefined) {
     const r = validateBaseUrl(o.baseUrl);
@@ -1090,6 +1107,159 @@ export function loadJevConfig(): JevConfig | null {
   }
 }
 
+// ── FailproofAI Cloud sets the mode ──────────────────────────────────────────
+
+export interface CloudModeJevConfig {
+  /**
+   * The config to run with: provider `failproofai` on the Cloud Jev
+   * credential, with Cloud's mode — or null: Jev does not run.
+   */
+  config: JevConfig | null;
+  /**
+   * This machine's FailproofAI Cloud machine id (`credentials.json`
+   * `cloud.machine_id`), sent in the request's `cloud` block so Cloud can find
+   * the checks deployed to this machine. Null when there is none.
+   */
+  machineId: string | null;
+  /**
+   * Why Jev cannot run in Cloud's mode, for `errors.json` — null when it runs,
+   * and null for `off`, which is not a problem:
+   * - `transcripts_disabled`: connected for decisions only (`--no-transcripts`);
+   * - `jev_unconfigured`: no Cloud Jev credential at all;
+   * - `jev_unconfigured: <detail>`: one exists and cannot be used.
+   */
+  problem: string | null;
+}
+
+/** The contract's message for "Cloud set a Jev mode and this machine has no Cloud Jev credential". */
+export const JEV_UNCONFIGURED_PROBLEM = "jev_unconfigured";
+/** The contract's message for "Cloud set a Jev mode on a decisions-only connection" (CONTRACT C10.2). */
+export const TRANSCRIPTS_DISABLED_PROBLEM = "transcripts_disabled";
+
+/**
+ * The config to run when FailproofAI Cloud sets this machine's Jev mode
+ * (`active.json` `jevMode`) to `observe` or `enforce` (CONTRACT C10.2).
+ *
+ * The provider is ALWAYS FailproofAI Cloud, on the Cloud Jev credential
+ * (`credentials.json` `jev {url,key}`, only while its connection is still on
+ * this machine), at `<cloud base>/enforcement/v1/jev` — the checks Cloud
+ * deployed to this machine live there, and the verdict for them is computed
+ * there. A local `jev.json` is NOT used while Cloud sets a mode, BYOK provider
+ * or not: Cloud wins, a local `off` included.
+ *
+ * Jev does not run, and `problem` says why, when:
+ * 1. the machine was connected for decisions only (`collector.sessions` is not
+ *    `true` in `config.json` — what `--no-transcripts` writes): the standing
+ *    rule is that such a connection never switches Jev on, because a Jev call
+ *    sends the tool call and the recent prompt;
+ * 2. there is no Cloud Jev credential, or it cannot be used;
+ * 3. there is no FailproofAI Cloud machine id to name.
+ *
+ * Asked twice per gate event on a machine whose Cloud mode asks — once for the
+ * review, once for `errors.json` — and on every event in the warm worker, so
+ * the answer is kept until an input changes (see `jevInputsVersion`).
+ *
+ * Never throws.
+ */
+export function loadJevConfigForCloudMode(mode: JevConfigMode): CloudModeJevConfig {
+  if (mode === "off") return { config: null, machineId: null, problem: null };
+  const key = `${mode}\u0000${jevInputsVersion()}`;
+  if (cloudModeMemo?.key === key) return cloudModeMemo.value;
+  const value = computeCloudModeConfig(mode);
+  cloudModeMemo = { key, value };
+  return value;
+}
+
+let cloudModeMemo: { key: string; value: CloudModeJevConfig } | null = null;
+
+/** Forget the memoised answer. Tests only. */
+export function _resetJevConfigMemoForTest(): void {
+  cloudModeMemo = null;
+}
+
+/**
+ * Everything a Cloud-mode config load reads, as one version string: the
+ * credentials file and its directory (whose modes the loader checks), and
+ * `config.json` (the decisions-only switch), plus where those paths point. A
+ * file's version is its device, inode, mode, size and modification and change
+ * times to the nanosecond — an edit, a chmod and a replace-by-rename all move
+ * it, and the change time cannot be set back by the user.
+ */
+function jevInputsVersion(): string {
+  const credentials = credentialsFile();
+  const config = configFile();
+  return [
+    process.platform,
+    credentials,
+    statVersion(credentials),
+    statVersion(dirname(credentials)),
+    config,
+    statVersion(config),
+  ].join("\u0000");
+}
+
+function statVersion(path: string): string {
+  try {
+    const st = statSync(path, { bigint: true });
+    return `${st.dev}:${st.ino}:${st.mode}:${st.size}:${st.mtimeNs}:${st.ctimeNs}`;
+  } catch (err) {
+    return `-${(err as NodeJS.ErrnoException).code ?? "error"}`;
+  }
+}
+
+function computeCloudModeConfig(mode: JevConfigMode): CloudModeJevConfig {
+  try {
+    // Decisions only: checked first, because no credential would change it.
+    if (readConfig().collector.sessions !== true) {
+      return { config: null, machineId: null, problem: TRANSCRIPTS_DISABLED_PROBLEM };
+    }
+    const credential = readJevCloudCredential();
+    if (credential.status === "absent") return { config: null, machineId: null, problem: JEV_UNCONFIGURED_PROBLEM };
+    if (credential.status === "refused") {
+      return {
+        config: null,
+        machineId: null,
+        problem: `${JEV_UNCONFIGURED_PROBLEM}: the FailproofAI Cloud Jev credential is refused — ${credential.problem}`,
+      };
+    }
+    const machineId = readCredentials().cloud?.machineId || null;
+    if (!machineId) {
+      return {
+        config: null,
+        machineId: null,
+        problem: `${JEV_UNCONFIGURED_PROBLEM}: this machine has no FailproofAI Cloud machine id (no policy connection in credentials.json)`,
+      };
+    }
+    const raw = {
+      provider: JEV_CLOUD_PROVIDER,
+      baseUrl: jevCloudBaseUrl(cloudBaseFor(credential.credential)),
+      mode,
+      timeoutMs: CLOUD_JEV_TIMEOUT_MS,
+    };
+    const r = validateJevConfig(raw, null, credential.credential);
+    return r.ok
+      ? { config: r.value, machineId, problem: null }
+      : { config: null, machineId, problem: `${JEV_UNCONFIGURED_PROBLEM}: the FailproofAI Cloud Jev credential — ${r.problem}` };
+  } catch (err) {
+    return { config: null, machineId: null, problem: `${JEV_UNCONFIGURED_PROBLEM}: ${err instanceof Error ? err.message : String(err)}` };
+  }
+}
+
+/**
+ * The Cloud base URL the Jev route hangs off: the connection's own URL when it
+ * is on the credential's origin (so a Cloud served under a path prefix keeps
+ * it, as `config --token` writes it), else the credential's origin.
+ */
+function cloudBaseFor(credential: JevCloudCredential): string {
+  try {
+    const cloud = readCredentials().cloud;
+    if (cloud?.url && new URL(cloud.url).origin === new URL(credential.url).origin) return cloud.url;
+  } catch {
+    // Fall through to the origin.
+  }
+  return credential.url;
+}
+
 export interface JevConfigFileForUpdate {
   raw: Record<string, unknown>;
   /** The file's permission bits (null where they mean nothing). */

package/src/hooks/semantic/jev-review.ts

@@ -7,6 +7,13 @@
  * `jev.json` never loads the semantic evaluator at all, and its hook path is
  * exactly what it was before two tiers existed.
  *
+ * Or once FailproofAI Cloud sets this machine's Jev mode to `observe` or
+ * `enforce` (CONTRACT C10): then the call goes to FailproofAI Cloud on the
+ * Cloud Jev credential (`JevCallContext.cloud`), Cloud decides the checks it
+ * deployed here, and `evaluateCloudSemantic` merges that verdict with the
+ * machine's own. Cloud's outcomes are filed as their policy's OWN reviewers
+ * (`reviewerKey`), so a `both` policy is cleared by its Cloud checks alone.
+ *
  * Everything the request needs comes through the §7 contracts:
  * `transportForConfig` (T1) for the provider, `throttleTransport` (T5) for the
  * cache and rate limit (scoped to the config's provider, endpoint and model;
@@ -44,17 +51,28 @@
  * it distinguishes, which is what `toReview` below does.
  */
 import { BUILTIN_POLICIES } from "../builtin-policies";
+import { cloudReviewerName } from "../cloud-managed-policies";
+import type { AgentIdentity } from "../agent-targets";
+import { recordJevBudgetDrops } from "../cloud-policy-errors";
 import { normalizePolicyName } from "../policy-registry";
 import { effectiveAuthority, type PolicyAuthority, type RegisteredPolicy } from "../policy-types";
 import type { JevMode, JevReview, TwoTierReview } from "./combine";
 import { DEFAULT_THRESHOLDS_V1 } from "./decide";
+import { evaluateCloudSemantic, type CloudSemanticOutcome } from "./cloud-jev";
+import {
+  BREAKER_SKIP_REASON,
+  classifyCloudJevReview,
+  cloudJevGate,
+  recordCloudJevResult,
+  reportCloudJevHealth,
+} from "./cloud-jev-health";
 import { DEFAULT_JEV_TIMEOUT_MS, appendVerdictLog, evaluateSemantic, verdictLogRow, type SemanticOutcome } from "./evaluator";
 import * as intentStore from "./intent";
 import { JevError, transportForConfig, type JevTransport } from "./jev-client";
 import { DEFAULT_JEV_MODE, type JevConfig } from "./jev-config";
 import * as jevThrottle from "./jev-throttle";
 import { sessionProjectRoot } from "./session-root";
-import type { SemanticInput } from "./types";
+import type { PolicyOutcome, SemanticInput } from "./types";
 
 /**
  * T5's throttle as this file calls it. §7 declares only
@@ -149,6 +167,18 @@ export interface JevCallContext {
   permissionMode?: string;
   sessionId?: string;
   cli: string;
+  /**
+   * Set when FailproofAI Cloud's Jev mode asks (CONTRACT C10.2): the call goes
+   * to Cloud with this machine's id, and the deployment it was made under
+   * scopes the answer cache (a new deployment can change Cloud's checks).
+   */
+  cloud?: { machineId: string; deployment: number | null; mode: "observe" | "enforce"; agent?: AgentIdentity | null };
+  /**
+   * A session pause is active. It suspends local policy, so no installed
+   * pack's check is asked; FailproofAI Cloud's checks are exempt from a pause
+   * (as Cloud JS assignments are) and still are. Only meaningful with `cloud`.
+   */
+  localPaused?: boolean;
 }
 
 export function resolveMode(cfg: JevConfig): JevMode {
@@ -177,6 +207,24 @@ export function resolveTimeout(cfg: JevConfig): number {
   return Math.min(MAX_JEV_TIMEOUT_MS, Math.max(MIN_JEV_TIMEOUT_MS, t));
 }
 
+/**
+ * The reviewer an outcome answers for: a FailproofAI Cloud check's is
+ * `cloud:<policyId>/<name>` (its outcome's own `origin.cloudPolicyId`, carried
+ * pack-shaped as `cloud:<id>`), which is what a Cloud `both` policy registers
+ * its `reviewedBy` as — so only that policy's own Cloud outcomes can clear it,
+ * and a Cloud outcome never clears an installed pack's policy (CONTRACT C10.5).
+ * An installed pack's check is its plain name, as it always was.
+ */
+export function reviewerKey(o: Pick<PolicyOutcome, "policy" | "origin">): string {
+  const packId = o.origin?.packId;
+  return packId !== undefined && packId.startsWith("cloud:") ? cloudReviewerName(packId.slice("cloud:".length), o.policy) : o.policy;
+}
+
+/** Whether an outcome came from FailproofAI Cloud (its `cloud:<id>` origin; see `parseCloudReply`). */
+function isCloudOutcome(o: Pick<PolicyOutcome, "origin">): boolean {
+  return o.origin?.packId?.startsWith("cloud:") === true;
+}
+
 /** The semantic policy an attributable Jev verdict is filed under. */
 function jevDecider(outcome: Extract<SemanticOutcome, { status: "ok" }>) {
   const wanted = outcome.verdict.decision === "deny" ? "deny" : "instruct";
@@ -215,6 +263,15 @@ export function toReview(outcome: SemanticOutcome, cached = false): JevReview {
   const latencyMs = sent && !cached ? outcome.latencyMs : null;
   const model = sent ? outcome.model : null;
   const outcomes = outcome.verdict.outcomes;
+  // A FailproofAI Cloud outcome is trusted only for a check the reply's own
+  // `asked` names. `parseCloudReply` already refuses a reply that contradicts
+  // itself; this keeps the review from relying on that alone, because a Cloud
+  // outcome is what clears a `both` policy's regex half. One it cannot vouch
+  // for — or a Cloud-origin outcome with no Cloud reply at all — means the
+  // picture is not one to clear anything on: the regex decides alone.
+  const cloudAsked = "cloud" in outcome ? new Set((outcome as CloudSemanticOutcome & { status: "ok" }).cloud.asked) : null;
+  const unvouched = outcomes.some((o) => isCloudOutcome(o) && !(cloudAsked?.has(o.policy) ?? false));
+  if (unvouched) return { kind: "fallback", reason: "malformed", latencyMs, model: null };
   // `null` when the injection probe was not in the request, which now means
   // only that no request was made: v1 asks it on every call it sends, with or
   // without a recorded human message (see `compile.ts`).
@@ -232,11 +289,11 @@ export function toReview(outcome: SemanticOutcome, cached = false): JevReview {
     // Every selected policy's questions were in the request, and `readAnswers`
     // refuses a response missing any of them — so selected == asked, and only
     // when a request was actually made.
-    asked: sent ? outcomes.map((o) => o.policy) : [],
+    asked: sent ? outcomes.map(reviewerKey) : [],
     // `none` found nothing, `overridden` is what the human asked for, and a
     // deny the human's task softened to a warning is that task's consent — all
     // three clear. A `deny`, or a warning nobody consented to, keeps the block.
-    notDenied: sent ? outcomes.filter((o) => o.verdict !== "deny" && !warned(o)).map((o) => o.policy) : [],
+    notDenied: sent ? outcomes.filter((o) => o.verdict !== "deny" && !warned(o)).map(reviewerKey) : [],
     injectionAsked: injection !== null,
     injected: injection !== null && injection >= DEFAULT_THRESHOLDS_V1.injection,
     // A check that CAN deny warned without consent: nothing may be cleared on
@@ -297,12 +354,30 @@ export function startJevReview(cfg: JevConfig, call: JevCallContext): TwoTierRev
   let throttled: JevTransport;
   try {
     route = transportForConfig(cfg);
-    throttled = throttle.throttleTransport(route.transport, { scope: throttleScope(cfg, route) });
+    // A Cloud answer also depends on what Cloud deployed to this machine, which
+    // the request does not show: a new deployment is a new cache scope.
+    const scope = call.cloud
+      ? `${throttleScope(cfg, route)}\u0000cloud\u0000${call.cloud.machineId}\u0000${call.cloud.deployment ?? "-"}`
+      : throttleScope(cfg, route);
+    throttled = throttle.throttleTransport(route.transport, { scope });
   } catch (err) {
     const reason = err instanceof JevError ? err.code : "config";
     return handle(Promise.resolve({ kind: "fallback", reason, latencyMs: null, model: null }));
   }
 
+  // FailproofAI Cloud Jev that keeps failing is skipped for a while, so every
+  // tool call does not wait out its timeout (`cloud-jev-health.ts`).
+  const cloud = call.cloud;
+  const healthScope = cloud ? JSON.stringify([cfg.baseUrl ?? null, cloud.machineId]) : "";
+  let probe = false;
+  if (cloud) {
+    const gate = cloudJevGate(healthScope);
+    if (!gate.ask) {
+      return handle(Promise.resolve({ kind: "fallback", reason: BREAKER_SKIP_REASON, latencyMs: null, model: null }));
+    }
+    probe = gate.probe;
+  }
+
   let intent: ReturnType<IntentStore["readIntent"]>;
   try {
     intent = intentReader.readIntent(call.sessionId);
@@ -326,6 +401,8 @@ export function startJevReview(cfg: JevConfig, call: JevCallContext): TwoTierRev
 
   /** Set when the answer came from T5's cache (a hit carries the original `usage` and no real latency). */
   let cached = false;
+  /** A local inert allow or a cached reply cannot prove Cloud is healthy now. */
+  let reachedCloud = false;
   const transport: JevTransport = async (request, signal) => {
     const response = await throttled(request, signal);
     cached = servedFromCache(response);
@@ -335,21 +412,51 @@ export function startJevReview(cfg: JevConfig, call: JevCallContext): TwoTierRev
   const timeoutMs = resolveTimeout(cfg);
   /** Set once the backstop below gave up on the answer: a late one is logged, never applied. */
   let abandoned = false;
-  const answered = evaluateSemantic(input, {
+  const options = {
     transport,
     cli: call.cli,
     via: route.via,
     model: route.model,
     timeoutMs,
-    intent: "v1",
+    intent: "v1" as const,
     v1: { thresholds: DEFAULT_THRESHOLDS_V1 },
     signal: controller.signal,
     // No `contextTruncated`: nothing reports a store cut out of band, so the
     // evaluator's own (narrower) guess stands. See `IntentStore` above.
-  })
+  };
+  const evaluated: Promise<SemanticOutcome | CloudSemanticOutcome> = cloud
+    ? evaluateCloudSemantic(input, {
+        ...options,
+        machineId: cloud.machineId,
+        agent: cloud.agent,
+        // Paused: no installed pack's check is sent, only the globals, and
+        // Cloud's own checks are selected and decided on Cloud as ever.
+        ...(call.localPaused ? { policies: [] } : {}),
+      })
+    : evaluateSemantic(input, options);
+  const answered = evaluated
     .then((outcome): JevReview => {
       const hit = cached && outcome.status === "ok";
+      reachedCloud = outcome.status === "ok" && !hit && outcome.via !== "none";
       const review = toReview(outcome, hit);
+      // The machine's own pack checks Cloud dropped from this request
+      // (CONTRACT C10.5), reported for the deployment it happened under. Only
+      // from an answer that arrived in time: one the backstop abandoned is not
+      // applied, and neither is anything it said. A group dropped because a
+      // Cloud check of the same name was selected (Cloud wins the name, D-S-2)
+      // is told apart from a budget drop: that Cloud check is in `asked`, or in
+      // `droppedCloud` when the budget then dropped it too.
+      if (cloud && !abandoned && outcome.status === "ok" && "cloud" in outcome && outcome.cloud.droppedLocal.length > 0) {
+        const cloudNames = new Set([...outcome.cloud.asked, ...outcome.cloud.droppedCloud]);
+        recordJevBudgetDrops(
+          { machineId: cloud.machineId, deployment: cloud.deployment, jevMode: cloud.mode },
+          outcome.cloud.droppedLocal.map((d) => ({
+            packId: d.packId ?? "unknown",
+            name: d.name,
+            ...(cloudNames.has(d.name) ? { clash: true } : {}),
+          })),
+        );
+      }
       // An aborted request has nothing worth replaying; everything else goes
       // to the local verdict log (never shipped), so any verdict can be
       // re-derived offline from its recorded probabilities. A cache hit is
@@ -361,7 +468,8 @@ export function startJevReview(cfg: JevConfig, call: JevCallContext): TwoTierRev
           eventType: call.eventType,
           applied: abandoned || review.kind !== "answered" ? "legacy-fallback" : mode === "observe" ? "observe" : "two-tier",
         });
-        appendVerdictLog(hit ? { ...row, cached: true } : row);
+        const withCloud = outcome.status === "ok" && "cloud" in outcome ? { ...row, cloud: outcome.cloud } : row;
+        appendVerdictLog(hit ? { ...withCloud, cached: true } : withCloud);
       }
       return review;
     })
@@ -381,9 +489,20 @@ export function startJevReview(cfg: JevConfig, call: JevCallContext): TwoTierRev
       resolve({ kind: "fallback", reason: "timeout", latencyMs: timeoutMs + JEV_DEADLINE_GRACE_MS, model: null });
     }, timeoutMs + JEV_DEADLINE_GRACE_MS);
   });
+  const raced = Promise.race([answered, expired]).finally(() => {
+    if (deadline !== undefined) clearTimeout(deadline);
+  });
+  if (!cloud) return handle(raced);
   return handle(
-    Promise.race([answered, expired]).finally(() => {
-      if (deadline !== undefined) clearTimeout(deadline);
+    raced.then((review) => {
+      recordCloudJevResult(
+        healthScope,
+        classifyCloudJevReview(review, { reachedCloud }),
+        review.kind === "fallback" ? review.reason : null,
+        probe,
+      );
+      reportCloudJevHealth();
+      return review;
     }),
   );
 }

package/src/hooks/semantic/pack-policies.ts

@@ -142,7 +142,8 @@ export interface ResolvedSemanticPolicies {
 }
 
 /** Turn one validated manifest entry into a policy the compiler can use. */
-function toSemanticPolicy(entry: SemanticManifestEntry, pack: { id: string; version?: string }): SemanticPolicy {
+/** Exported for the FailproofAI Cloud Jev parity replay (`__tests__/hooks/cloud-jev-parity.test.ts`). */
+export function toSemanticPolicy(entry: SemanticManifestEntry, pack: { id: string; version?: string }): SemanticPolicy {
   // An unknown precondition name DROPS the policy (the caller catches this),
   // rather than compiling it with no gate at all. Ungating would be the wider
   // direction, not the weaker one, but it is not what the author asked for: a

package/src/hooks/semantic/types.ts

@@ -21,6 +21,12 @@ export interface JevRequest {
   model: string;
   state: Record<string, unknown>;
   questions: Record<string, NoulQuestion>;
+  /**
+   * FailproofAI Cloud only: the tool-call metadata Cloud decides this
+   * machine's deployed Jev checks on (CONTRACT C10.3, `cloud-jev.ts`). Cloud
+   * strips it before anything reaches TypeSafe.
+   */
+  cloud?: Record<string, unknown>;
 }
 
 export interface JevNoulAnswer {
@@ -34,6 +40,8 @@ export interface JevResponse {
   usage?: { input_tokens?: number; output_tokens?: number };
   /** Set when the provider did not report which Jev version answered (Cloudflare's unversioned alias). */
   modelUnverified?: boolean;
+  /** FailproofAI Cloud only: its verdict for this machine's Cloud checks, unvalidated (`parseCloudReply`). */
+  cloud?: unknown;
 }
 
 /** A yes/no probe. A policy fires only when every one of its probes holds. */

package/src/hooks/session-pause-cli.ts

@@ -195,7 +195,7 @@ export function runPauseCommand(opts: PauseCommandOptions): PauseCommandResult {
       ...(capped
         ? [`${INDENT}Capped at ${pauseDurationWords(PAUSE_CEILING_MS)} from when this pause began.`]
         : []),
-      `${INDENT}Cloud-managed policies keep enforcing.`,
+      `${INDENT}Cloud-managed policies, and FailproofAI Cloud's Jev checks, keep enforcing.`,
       `${INDENT}Resume early:  ${kit.cmd(resume)}`,
     ],
     affected: 1,

package/src/hooks/worker-server.ts

@@ -36,6 +36,7 @@ interface WorkerHookRequest {
   cli: IntegrationType;
   stdin: string;
   cwd?: string;
+  agentSettingsPath?: string;
 }
 
 function isWorkerHookRequest(msg: unknown): msg is WorkerHookRequest {
@@ -54,7 +55,9 @@ function isWorkerHookRequest(msg: unknown): msg is WorkerHookRequest {
     // `failproofai config` aborted with "its worker process could not be run"
     // against a daemon and worker that were both perfectly healthy. On a
     // daemonConfigured machine the same mismatch denies the tool call.
-    (m.cwd === undefined || m.cwd === null || typeof m.cwd === "string")
+    (m.cwd === undefined || m.cwd === null || typeof m.cwd === "string") &&
+    (m.agentSettingsPath === undefined || m.agentSettingsPath === null ||
+      typeof m.agentSettingsPath === "string")
   );
 }
 
@@ -278,6 +281,7 @@ function handleConnection(socket: Socket, shutdown: () => void): void {
             // Normalised here so no consumer has to know the wire spells
             // "absent" as null.
             fallbackCwd: request.cwd ?? undefined,
+            agentSettingsPath: request.agentSettingsPath ?? undefined,
             releaseRegistry: release,
           });
           deliver(

package/.next/standalone/.next/server/chunks/[externals]__0hjaw70fchx66._.js

@@ -1,3 +0,0 @@
-module.exports=[54799,(e,r,t)=>{r.exports=e.x("crypto",()=>require("crypto"))},70406,(e,r,t)=>{r.exports=e.x("next/dist/compiled/@opentelemetry/api",()=>require("next/dist/compiled/@opentelemetry/api"))},18622,(e,r,t)=>{r.exports=e.x("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js",()=>require("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js"))},20635,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/action-async-storage.external.js",()=>require("next/dist/server/app-render/action-async-storage.external.js"))},24725,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/after-task-async-storage.external.js",()=>require("next/dist/server/app-render/after-task-async-storage.external.js"))},56704,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/work-async-storage.external.js",()=>require("next/dist/server/app-render/work-async-storage.external.js"))},32319,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/work-unit-async-storage.external.js",()=>require("next/dist/server/app-render/work-unit-async-storage.external.js"))},59043,(e,r,t)=>{r.exports=e.x("next/dist/server/runtime-reacts.external.js",()=>require("next/dist/server/runtime-reacts.external.js"))},78500,(e,r,t)=>{r.exports=e.x("node:async_hooks",()=>require("node:async_hooks"))},50227,(e,r,t)=>{r.exports=e.x("node:path",()=>require("node:path"))},81111,(e,r,t)=>{r.exports=e.x("node:stream",()=>require("node:stream"))},14747,(e,r,t)=>{r.exports=e.x("path",()=>require("path"))}];
-
-//# sourceMappingURL=%5Bexternals%5D__0hjaw70fchx66._.js.map

package/.next/standalone/.next/server/chunks/[root-of-the-server]__07l68zv0hqdiu._.js

@@ -1,3 +0,0 @@
-module.exports=[54799,(s,e,r)=>{e.exports=s.x("crypto",()=>require("crypto"))},22734,(s,e,r)=>{e.exports=s.x("fs",()=>require("fs"))},24868,(s,e,r)=>{e.exports=s.x("fs/promises",()=>require("fs/promises"))},70406,(s,e,r)=>{e.exports=s.x("next/dist/compiled/@opentelemetry/api",()=>require("next/dist/compiled/@opentelemetry/api"))},18622,(s,e,r)=>{e.exports=s.x("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js",()=>require("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js"))},20635,(s,e,r)=>{e.exports=s.x("next/dist/server/app-render/action-async-storage.external.js",()=>require("next/dist/server/app-render/action-async-storage.external.js"))},24725,(s,e,r)=>{e.exports=s.x("next/dist/server/app-render/after-task-async-storage.external.js",()=>require("next/dist/server/app-render/after-task-async-storage.external.js"))},56704,(s,e,r)=>{e.exports=s.x("next/dist/server/app-render/work-async-storage.external.js",()=>require("next/dist/server/app-render/work-async-storage.external.js"))},32319,(s,e,r)=>{e.exports=s.x("next/dist/server/app-render/work-unit-async-storage.external.js",()=>require("next/dist/server/app-render/work-unit-async-storage.external.js"))},59043,(s,e,r)=>{e.exports=s.x("next/dist/server/runtime-reacts.external.js",()=>require("next/dist/server/runtime-reacts.external.js"))},93695,(s,e,r)=>{e.exports=s.x("next/dist/shared/lib/no-fallback-error.external.js",()=>require("next/dist/shared/lib/no-fallback-error.external.js"))},12714,(s,e,r)=>{e.exports=s.x("node:fs/promises",()=>require("node:fs/promises"))},50227,(s,e,r)=>{e.exports=s.x("node:path",()=>require("node:path"))},81111,(s,e,r)=>{e.exports=s.x("node:stream",()=>require("node:stream"))},46786,(s,e,r)=>{e.exports=s.x("os",()=>require("os"))},14747,(s,e,r)=>{e.exports=s.x("path",()=>require("path"))},91301,s=>{s.v(e=>Promise.all(["server/chunks/[externals]__08d8xc5bifn8z._.js","server/chunks/lib_antigravity-projects_ts_0hdx6fkrln72c._.js","server/chunks/lib_antigravity-sessions_ts_0jayregp7h3h5._.js","server/chunks/_1vslkoe35wok6._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js"].map(e=>s.l(e))).then(()=>e(30441)))},16341,s=>{s.v(e=>Promise.all(["server/chunks/[externals]__105ihae9i2b_d._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js","server/chunks/lib_antigravity-sessions_ts_0jayregp7h3h5._.js"].map(e=>s.l(e))).then(()=>e(93114)))},37352,s=>{s.v(e=>Promise.all(["server/chunks/[externals]_node_os_0by37l-11q5ls._.js","server/chunks/lib_codex-projects_ts_0di6zenec7h7n._.js"].map(e=>s.l(e))).then(()=>e(36203)))},18944,s=>{s.v(e=>Promise.all(["server/chunks/[externals]__105ihae9i2b_d._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js","server/chunks/src_hooks_fp-home_ts_09kv0bn_4twyh._.js","server/chunks/lib_codex-sessions_ts_17znrhpys8lz9._.js"].map(e=>s.l(e))).then(()=>e(57232)))},71809,s=>{"use strict";async function e(s,e){let r=Array(s.length),n=0;async function _(){for(;n<s.length;){let e=n++;try{r[e]={status:"fulfilled",value:await s[e]()}}catch(s){r[e]={status:"rejected",reason:s}}}}let t=Array.from({length:Math.min(e,s.length)},()=>_());return await Promise.all(t),r}s.s(["f",0,e])},5807,s=>{s.v(e=>Promise.all(["server/chunks/[externals]_node_os_0by37l-11q5ls._.js","server/chunks/lib_copilot-projects_ts_00-tojoja20ke._.js"].map(e=>s.l(e))).then(()=>e(55851)))},21476,s=>{s.v(e=>Promise.all(["server/chunks/[externals]__105ihae9i2b_d._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js","server/chunks/lib_copilot-sessions_ts_200_qjwcll3_i._.js"].map(e=>s.l(e))).then(()=>e(78166)))},97452,s=>{s.v(e=>Promise.all(["server/chunks/[externals]_node_os_0by37l-11q5ls._.js","server/chunks/lib_cursor-projects_ts_1carno5mv3ix_._.js"].map(e=>s.l(e))).then(()=>e(46413)))},23414,s=>{s.v(e=>Promise.all(["server/chunks/[externals]__105ihae9i2b_d._.js","server/chunks/lib_cursor-sessions_ts_1lq8fkhczl3_y._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js"].map(e=>s.l(e))).then(()=>e(72094)))},52400,s=>{s.v(e=>Promise.all(["server/chunks/[root-of-the-server]__0jz5xqu-p_lfc._.js","server/chunks/lib_devin-sessions_ts_0kirblxnhsnmd._.js","server/chunks/_1vslkoe35wok6._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js"].map(e=>s.l(e))).then(()=>e(79364)))},53229,s=>{s.v(e=>Promise.all(["server/chunks/[externals]__08d8xc5bifn8z._.js","server/chunks/lib_devin-sessions_ts_0kirblxnhsnmd._.js","server/chunks/_1vslkoe35wok6._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js"].map(e=>s.l(e))).then(()=>e(40375)))},62998,s=>{s.v(e=>Promise.all(["server/chunks/[root-of-the-server]__1ey11fel2q2qw._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js","server/chunks/lib_factory-sessions_ts_0lwe8buimuthh._.js"].map(e=>s.l(e))).then(()=>e(69391)))},95231,s=>{s.v(e=>Promise.all(["server/chunks/[externals]__105ihae9i2b_d._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js","server/chunks/lib_factory-sessions_ts_0lwe8buimuthh._.js"].map(e=>s.l(e))).then(()=>e(28246)))},31854,s=>{s.v(e=>Promise.all(["server/chunks/[root-of-the-server]__1ztigqa01tigq._.js","server/chunks/lib_goose-sessions_ts_15jnf4alr5isl._.js","server/chunks/_1vslkoe35wok6._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js"].map(e=>s.l(e))).then(()=>e(69164)))},49081,s=>{s.v(e=>Promise.all(["server/chunks/[externals]__08d8xc5bifn8z._.js","server/chunks/lib_goose-sessions_ts_15jnf4alr5isl._.js","server/chunks/_1vslkoe35wok6._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js"].map(e=>s.l(e))).then(()=>e(36618)))},67347,s=>{s.v(e=>Promise.all(["server/chunks/[externals]__08d8xc5bifn8z._.js","server/chunks/lib_hermes-projects_ts_0h9ny-woruqft._.js","server/chunks/lib_hermes-profiles_ts_0jki1620x7wxh._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js","server/chunks/_1vslkoe35wok6._.js","server/chunks/lib_hermes-sessions_ts_1bo14h38efuti._.js"].map(e=>s.l(e))).then(()=>e(64828)))},32359,s=>{s.v(e=>Promise.all(["server/chunks/[externals]__08d8xc5bifn8z._.js","server/chunks/lib_hermes-profiles_ts_0jki1620x7wxh._.js","server/chunks/lib_hermes-sessions_ts_1bo14h38efuti._.js","server/chunks/_1vslkoe35wok6._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js"].map(e=>s.l(e))).then(()=>e(3605)))},3959,s=>{s.v(e=>Promise.all(["server/chunks/[externals]__1k8s9m68ew993._.js","server/chunks/_1vslkoe35wok6._.js","server/chunks/lib_openclaw-db_ts_0nax8ld9h9ii8._.js"].map(e=>s.l(e))).then(()=>e(96878)))},38978,s=>{s.v(e=>Promise.all(["server/chunks/[externals]__08d8xc5bifn8z._.js","server/chunks/lib_openclaw-projects_ts_0gc-p24z7gzy8._.js","server/chunks/lib_openclaw-db_ts_0nax8ld9h9ii8._.js","server/chunks/lib_openclaw-sessions_ts_06lc8rgfj4huq._.js","server/chunks/_1vslkoe35wok6._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js"].map(e=>s.l(e))).then(()=>e(90624)))},26435,s=>{s.v(e=>Promise.all(["server/chunks/[externals]__08d8xc5bifn8z._.js","server/chunks/lib_openclaw-db_ts_0nax8ld9h9ii8._.js","server/chunks/_1vslkoe35wok6._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js","server/chunks/lib_openclaw-sessions_ts_06lc8rgfj4huq._.js"].map(e=>s.l(e))).then(()=>e(64199)))},82978,s=>{s.v(e=>Promise.all(["server/chunks/[root-of-the-server]__168oo8wb5n23f._.js","server/chunks/_1vslkoe35wok6._.js","server/chunks/lib_opencode-projects_ts_1r-bu98cz4660._.js"].map(e=>s.l(e))).then(()=>e(35435)))},82859,s=>{s.v(e=>Promise.all(["server/chunks/[root-of-the-server]__168oo8wb5n23f._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js","server/chunks/_1vslkoe35wok6._.js","server/chunks/lib_opencode-sessions_ts_0fdxj6q_np7ll._.js"].map(e=>s.l(e))).then(()=>e(99440)))},45093,s=>{s.v(e=>Promise.all(["server/chunks/[externals]_node_os_0by37l-11q5ls._.js","server/chunks/lib_pi-projects_ts_1_cy5lfxd21kv._.js"].map(e=>s.l(e))).then(()=>e(19791)))},41330,s=>{s.v(e=>Promise.all(["server/chunks/[externals]__105ihae9i2b_d._.js","server/chunks/lib_pi-sessions_ts_09ha0x-gi38y1._.js","server/chunks/lib_log-entries_ts_0e1mnh5npsol1._.js"].map(e=>s.l(e))).then(()=>e(85116)))}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__07l68zv0hqdiu._.js.map

package/.next/standalone/.next/server/chunks/[root-of-the-server]__0car70pylmvor._.js

@@ -1,3 +0,0 @@
-module.exports=[24868,(e,t,s)=>{t.exports=e.x("fs/promises",()=>require("fs/promises"))},66680,(e,t,s)=>{t.exports=e.x("node:crypto",()=>require("node:crypto"))},2157,(e,t,s)=>{t.exports=e.x("node:fs",()=>require("node:fs"))},12714,(e,t,s)=>{t.exports=e.x("node:fs/promises",()=>require("node:fs/promises"))},60526,(e,t,s)=>{t.exports=e.x("node:os",()=>require("node:os"))},50227,(e,t,s)=>{t.exports=e.x("node:path",()=>require("node:path"))},46786,(e,t,s)=>{t.exports=e.x("os",()=>require("os"))},14747,(e,t,s)=>{t.exports=e.x("path",()=>require("path"))},71809,e=>{"use strict";async function t(e,t){let s=Array(e.length),i=0;async function r(){for(;i<e.length;){let t=i++;try{s[t]={status:"fulfilled",value:await e[t]()}}catch(e){s[t]={status:"rejected",reason:e}}}}let o=Array.from({length:Math.min(t,e.length)},()=>r());return await Promise.all(o),s}e.s(["f",0,t])},79364,e=>{"use strict";var t=e.i(79708),s=e.i(40375),i=e.i(81580),r=e.i(83534),o=e.i(28557);async function n(){let e=await (0,t.f)((0,s.devinDbPath)());if(!e)return[];try{return e.query("SELECT id, working_directory, title, created_at, last_activity_at, hidden FROM sessions ORDER BY last_activity_at DESC").filter(e=>!e.hidden).map(e=>{let t=e.working_directory??void 0;return{sessionId:e.id,cwd:t,title:e.title??void 0,projectName:t?(0,i.f)(t):"devin",mtimeMs:(0,s.devinEpochToMs)(e.last_activity_at??e.created_at)}})}catch{return[]}finally{e.close()}}let a=(0,r.f)(n,2);async function d(){let e=await n(),t=new Map;for(let s of e){if(!s.cwd)continue;let e=t.get(s.projectName);(!e||s.mtimeMs>e.latest)&&t.set(s.projectName,{latest:s.mtimeMs,cwd:s.cwd,name:s.projectName})}let s=[];for(let{name:e,cwd:i,latest:r}of t.values()){let t=new Date(r);s.push({name:e,path:i,isDirectory:!0,lastModified:t,lastModifiedFormatted:(0,o.f)(t),cli:["devin"]})}return s.sort((e,t)=>t.lastModified.getTime()-e.lastModified.getTime()),s}async function l(e){let t=(await n()).filter(t=>t.cwd&&t.projectName===e);if(0===t.length)return{cwd:null,sessions:[]};let s=[...t].sort((e,t)=>t.mtimeMs-e.mtimeMs);return{cwd:s[0].cwd??null,sessions:s.map(e=>{let t=new Date(e.mtimeMs);return{name:e.title??e.sessionId,path:`devin-db://${e.sessionId}`,lastModified:t,lastModifiedFormatted:(0,o.f)(t),sessionId:e.sessionId,cli:"devin"}})}}let c=(0,r.f)(d,2),f=(0,r.f)(e=>l(e),2,{maxSize:50});e.s(["getCachedDevinProjects",0,c,"getCachedDevinSessions",0,a,"getCachedDevinSessionsByEncodedName",0,f,"getDevinProjects",0,d,"getDevinSessions",0,n,"getDevinSessionsByEncodedName",0,l])}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__0car70pylmvor._.js.map

package/.next/standalone/.next/server/chunks/[root-of-the-server]__0u3i025_setk_._.js

@@ -1,3 +0,0 @@
-module.exports=[54799,(e,r,t)=>{r.exports=e.x("crypto",()=>require("crypto"))},70406,(e,r,t)=>{r.exports=e.x("next/dist/compiled/@opentelemetry/api",()=>require("next/dist/compiled/@opentelemetry/api"))},18622,(e,r,t)=>{r.exports=e.x("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js",()=>require("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js"))},20635,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/action-async-storage.external.js",()=>require("next/dist/server/app-render/action-async-storage.external.js"))},24725,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/after-task-async-storage.external.js",()=>require("next/dist/server/app-render/after-task-async-storage.external.js"))},56704,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/work-async-storage.external.js",()=>require("next/dist/server/app-render/work-async-storage.external.js"))},32319,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/work-unit-async-storage.external.js",()=>require("next/dist/server/app-render/work-unit-async-storage.external.js"))},59043,(e,r,t)=>{r.exports=e.x("next/dist/server/runtime-reacts.external.js",()=>require("next/dist/server/runtime-reacts.external.js"))},93695,(e,r,t)=>{r.exports=e.x("next/dist/shared/lib/no-fallback-error.external.js",()=>require("next/dist/shared/lib/no-fallback-error.external.js"))},74533,(e,r,t)=>{r.exports=e.x("node:child_process",()=>require("node:child_process"))},66680,(e,r,t)=>{r.exports=e.x("node:crypto",()=>require("node:crypto"))},2157,(e,r,t)=>{r.exports=e.x("node:fs",()=>require("node:fs"))},60526,(e,r,t)=>{r.exports=e.x("node:os",()=>require("node:os"))},50227,(e,r,t)=>{r.exports=e.x("node:path",()=>require("node:path"))},81111,(e,r,t)=>{r.exports=e.x("node:stream",()=>require("node:stream"))},14747,(e,r,t)=>{r.exports=e.x("path",()=>require("path"))},94930,e=>{"use strict";var r=e.i(2157),t=e.i(50227),s=e.i(66680);e.s(["f",0,function(e,n,o={}){let a=o.mode??384,i=o.dirMode??448,x=(0,t.dirname)(e);(0,r.existsSync)(x)||(0,r.mkdirSync)(x,{recursive:!0,mode:i});let p=`${e}.${process.pid}.${(0,s.randomBytes)(6).toString("hex")}.tmp`;try{(0,r.writeFileSync)(p,JSON.stringify(n,null,2),{mode:a});try{(63&(0,r.statSync)(p).mode)!=0&&(0,r.chmodSync)(p,a)}catch{}(0,r.renameSync)(p,e);try{(63&(0,r.statSync)(e).mode)!=0&&(0,r.chmodSync)(e,a)}catch{}}catch(e){try{(0,r.rmSync)(p,{force:!0})}catch{}throw e}}])}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__0u3i025_setk_._.js.map

package/.next/standalone/.next/server/chunks/[root-of-the-server]__10a2f6s636yc7._.js

@@ -1,3 +0,0 @@
-module.exports=[54799,(e,r,t)=>{r.exports=e.x("crypto",()=>require("crypto"))},70406,(e,r,t)=>{r.exports=e.x("next/dist/compiled/@opentelemetry/api",()=>require("next/dist/compiled/@opentelemetry/api"))},18622,(e,r,t)=>{r.exports=e.x("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js",()=>require("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js"))},20635,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/action-async-storage.external.js",()=>require("next/dist/server/app-render/action-async-storage.external.js"))},24725,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/after-task-async-storage.external.js",()=>require("next/dist/server/app-render/after-task-async-storage.external.js"))},56704,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/work-async-storage.external.js",()=>require("next/dist/server/app-render/work-async-storage.external.js"))},32319,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/work-unit-async-storage.external.js",()=>require("next/dist/server/app-render/work-unit-async-storage.external.js"))},59043,(e,r,t)=>{r.exports=e.x("next/dist/server/runtime-reacts.external.js",()=>require("next/dist/server/runtime-reacts.external.js"))},93695,(e,r,t)=>{r.exports=e.x("next/dist/shared/lib/no-fallback-error.external.js",()=>require("next/dist/shared/lib/no-fallback-error.external.js"))},66680,(e,r,t)=>{r.exports=e.x("node:crypto",()=>require("node:crypto"))},2157,(e,r,t)=>{r.exports=e.x("node:fs",()=>require("node:fs"))},60526,(e,r,t)=>{r.exports=e.x("node:os",()=>require("node:os"))},50227,(e,r,t)=>{r.exports=e.x("node:path",()=>require("node:path"))},81111,(e,r,t)=>{r.exports=e.x("node:stream",()=>require("node:stream"))},14747,(e,r,t)=>{r.exports=e.x("path",()=>require("path"))},94930,e=>{"use strict";var r=e.i(2157),t=e.i(50227),s=e.i(66680);e.s(["f",0,function(e,n,o={}){let a=o.mode??384,i=o.dirMode??448,x=(0,t.dirname)(e);(0,r.existsSync)(x)||(0,r.mkdirSync)(x,{recursive:!0,mode:i});let p=`${e}.${process.pid}.${(0,s.randomBytes)(6).toString("hex")}.tmp`;try{(0,r.writeFileSync)(p,JSON.stringify(n,null,2),{mode:a});try{(63&(0,r.statSync)(p).mode)!=0&&(0,r.chmodSync)(p,a)}catch{}(0,r.renameSync)(p,e);try{(63&(0,r.statSync)(e).mode)!=0&&(0,r.chmodSync)(e,a)}catch{}}catch(e){try{(0,r.rmSync)(p,{force:!0})}catch{}throw e}}])}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__10a2f6s636yc7._.js.map

package/.next/standalone/.next/server/chunks/[root-of-the-server]__1qt5u58xrcuk6._.js

@@ -1,3 +0,0 @@
-module.exports=[[94930,e=>{var t=e.i(2157),r=e.i(50227),s=e.i(66680);e.s(["f",0,function(e,n,o={}){let i=o.mode??384,a=o.dirMode??448,d=(0,r.dirname)(e);(0,t.existsSync)(d)||(0,t.mkdirSync)(d,{recursive:!0,mode:a});let c=`${e}.${process.pid}.${(0,s.randomBytes)(6).toString("hex")}.tmp`;try{(0,t.writeFileSync)(c,JSON.stringify(n,null,2),{mode:i});try{(63&(0,t.statSync)(c).mode)!=0&&(0,t.chmodSync)(c,i)}catch{}(0,t.renameSync)(c,e);try{(63&(0,t.statSync)(e).mode)!=0&&(0,t.chmodSync)(e,i)}catch{}}catch(e){try{(0,t.rmSync)(c,{force:!0})}catch{}throw e}}])},69164,e=>{var t=e.i(79708),r=e.i(36618),s=e.i(81580),n=e.i(83534),o=e.i(28557);async function i(){let e=await (0,t.f)((0,r.gooseDbPath)());if(!e)return[];try{return e.query("SELECT id, working_dir, description, name, session_type, created_at, updated_at FROM sessions ORDER BY updated_at DESC").filter(e=>"hidden"!==e.session_type).map(e=>{let t=e.working_dir??void 0,n=(e.description&&e.description.length>0?e.description:e.name)??void 0;return{sessionId:e.id,cwd:t,title:n&&n.length>0?n:void 0,projectName:t?(0,s.f)(t):"goose",mtimeMs:(0,r.gooseTimestampToMs)(e.updated_at??e.created_at)}})}catch{return[]}finally{e.close()}}let a=(0,n.f)(i,2);async function d(){let e=await i(),t=new Map;for(let r of e){if(!r.cwd)continue;let e=t.get(r.projectName);(!e||r.mtimeMs>e.latest)&&t.set(r.projectName,{latest:r.mtimeMs,cwd:r.cwd,name:r.projectName})}let r=[];for(let{name:e,cwd:s,latest:n}of t.values()){let t=new Date(n);r.push({name:e,path:s,isDirectory:!0,lastModified:t,lastModifiedFormatted:(0,o.f)(t),cli:["goose"]})}return r.sort((e,t)=>t.lastModified.getTime()-e.lastModified.getTime()),r}async function c(e){let t=(await i()).filter(t=>t.cwd&&t.projectName===e);if(0===t.length)return{cwd:null,sessions:[]};let r=[...t].sort((e,t)=>t.mtimeMs-e.mtimeMs);return{cwd:r[0].cwd??null,sessions:r.map(e=>{let t=new Date(e.mtimeMs);return{name:e.title??e.sessionId,path:`goose-db://${e.sessionId}`,lastModified:t,lastModifiedFormatted:(0,o.f)(t),sessionId:e.sessionId,cli:"goose"}})}}let l=(0,n.f)(d,2),p=(0,n.f)(e=>c(e),2,{maxSize:50});e.s(["getCachedGooseProjects",0,l,"getCachedGooseSessions",0,a,"getCachedGooseSessionsByEncodedName",0,p,"getGooseProjects",0,d,"getGooseSessions",0,i,"getGooseSessionsByEncodedName",0,c])},40759,e=>{var t=e.i(60526),r=e.i(50227),s=e.i(79708);async function n(e){let n=await (0,s.f)(function(){if(process.env.OPENCODE_DB_PATH)return process.env.OPENCODE_DB_PATH;let e=process.env.OPENCODE_HOME??(0,r.join)((0,t.homedir)(),".local","share","opencode");return(0,r.join)(e,"opencode.db")}());if(!n)return null;try{return e(n)}catch{return null}finally{try{n.close()}catch{}}}async function o(e,t=[]){return n(r=>r.query(e,t))}e.s(["h",0,o,"x",0,n])}],54799,(e,t,r)=>{t.exports=e.x("crypto",()=>require("crypto"))},70406,(e,t,r)=>{t.exports=e.x("next/dist/compiled/@opentelemetry/api",()=>require("next/dist/compiled/@opentelemetry/api"))},18622,(e,t,r)=>{t.exports=e.x("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js",()=>require("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js"))},20635,(e,t,r)=>{t.exports=e.x("next/dist/server/app-render/action-async-storage.external.js",()=>require("next/dist/server/app-render/action-async-storage.external.js"))},24725,(e,t,r)=>{t.exports=e.x("next/dist/server/app-render/after-task-async-storage.external.js",()=>require("next/dist/server/app-render/after-task-async-storage.external.js"))},56704,(e,t,r)=>{t.exports=e.x("next/dist/server/app-render/work-async-storage.external.js",()=>require("next/dist/server/app-render/work-async-storage.external.js"))},32319,(e,t,r)=>{t.exports=e.x("next/dist/server/app-render/work-unit-async-storage.external.js",()=>require("next/dist/server/app-render/work-unit-async-storage.external.js"))},59043,(e,t,r)=>{t.exports=e.x("next/dist/server/runtime-reacts.external.js",()=>require("next/dist/server/runtime-reacts.external.js"))},93695,(e,t,r)=>{t.exports=e.x("next/dist/shared/lib/no-fallback-error.external.js",()=>require("next/dist/shared/lib/no-fallback-error.external.js"))},74533,(e,t,r)=>{t.exports=e.x("node:child_process",()=>require("node:child_process"))},81111,(e,t,r)=>{t.exports=e.x("node:stream",()=>require("node:stream"))}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__1qt5u58xrcuk6._.js.map