forgebadger 0.1.1 → 0.1.2

package/dist/gateway/src/services/notifications/feishu-notification-worker.d.ts

@@ -0,0 +1,14 @@
+import type { Database } from '../../db/types.js';
+import { assertResolvedPublicHttpsEndpoint } from '../network-policy.js';
+export interface FeishuNotificationIO {
+    fetch?: typeof fetch;
+    validate?: typeof assertResolvedPublicHttpsEndpoint;
+}
+export declare class FeishuNotificationWorker {
+    private readonly db;
+    private readonly userId;
+    private readonly key;
+    private readonly io;
+    constructor(db: Database, userId: string, key: string, io?: FeishuNotificationIO);
+    runOnce(stop: AbortSignal): Promise<void>;
+}

package/dist/gateway/src/services/notifications/feishu-notification-worker.js

@@ -0,0 +1,117 @@
+import { z } from 'zod';
+import { FeishuChannelRepository } from '../../db/repositories/feishu-channel-repository.js';
+import { NotificationRepository } from '../../db/repositories/notification-repository.js';
+import { FeishuNotifications, FeishuNotificationError } from './feishu-notifications.js';
+import { renderFeishuNotificationCard } from './feishu-notification-card.js';
+import { assertResolvedPublicHttpsEndpoint } from '../network-policy.js';
+import { isFeishuGroupMember } from './feishu-notification-directory-client.js';
+const tokenUrl = 'https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal';
+const messageUrl = 'https://open.feishu.cn/open-apis/im/v1/messages?receive_id_type=chat_id';
+const tokenSchema = z.object({ code: z.literal(0), tenant_access_token: z.string().min(1) });
+const receiptSchema = z.object({ code: z.number(), data: z.object({ message_id: z.string().min(1) }).optional() });
+export class FeishuNotificationWorker {
+    db;
+    userId;
+    key;
+    io;
+    constructor(db, userId, key, io = {}) {
+        this.db = db;
+        this.userId = userId;
+        this.key = key;
+        this.io = io;
+    }
+    async runOnce(stop) {
+        if (stop.aborted || !this.db.open)
+            return;
+        const service = new FeishuNotifications(this.db, this.userId), records = service.records;
+        const item = records.claim();
+        if (!item)
+            return;
+        const notifications = new NotificationRepository(this.db, this.userId);
+        const signal = AbortSignal.any([stop, AbortSignal.timeout(15_000)]);
+        const authorize = () => {
+            signal.throwIfAborted();
+            if (!this.db.open || !records.owns(item))
+                throw new FeishuNotificationError('CLAIM_LOST');
+            const scope = service.assertDelivery(item);
+            if (item.notification_id && !notifications.get(item.notification_id))
+                throw new FeishuNotificationError('NOTIFICATION_REMOVED');
+            return scope;
+        };
+        const request = this.io.fetch ?? fetch, validate = this.io.validate ?? assertResolvedPublicHttpsEndpoint;
+        let attempted = false;
+        try {
+            authorize();
+            await validate(tokenUrl);
+            const { target } = authorize();
+            const credentials = new FeishuChannelRepository(this.db, this.userId, this.key).decryptAccountCredentials(target.accountId);
+            const tokenResponse = await request(tokenUrl, { method: 'POST', redirect: 'error', signal, headers: { 'content-type': 'application/json' },
+                body: JSON.stringify({ app_id: credentials.appId, app_secret: credentials.appSecret }) });
+            if (tokenResponse.status === 429 || tokenResponse.status >= 500) {
+                records.retry(item, retryDelay(tokenResponse));
+                return;
+            }
+            if (!tokenResponse.ok) {
+                records.finish(item, 'failed', 'TOKEN_REJECTED');
+                return;
+            }
+            const token = tokenSchema.parse(await tokenResponse.json()).tenant_access_token;
+            authorize();
+            if (target.kind === 'group' && !await isFeishuGroupMember(target.chatId, token, signal, this.io, () => { authorize(); })) {
+                service.targets.records.invalidate(target.id.slice(6));
+                throw new FeishuNotificationError('TARGET_UNAVAILABLE');
+            }
+            await validate(messageUrl);
+            const current = authorize();
+            const notification = item.notification_id ? notifications.get(item.notification_id) : undefined;
+            const card = renderFeishuNotificationCard(item, notification, current.config.webBaseUrl);
+            const body = JSON.stringify({ receive_id: current.target.chatId, msg_type: 'interactive', content: JSON.stringify(card), uuid: item.id });
+            authorize();
+            attempted = true;
+            const response = await request(messageUrl, { method: 'POST', redirect: 'error', signal, headers: { 'content-type': 'application/json', authorization: `Bearer ${token}` }, body });
+            if (stop.aborted || !this.db.open)
+                return;
+            if (response.status === 429) {
+                records.retry(item, retryDelay(response));
+                return;
+            }
+            if (response.status >= 500) {
+                records.finish(item, 'unknown', 'SEND_UNCERTAIN');
+                return;
+            }
+            const parsed = receiptSchema.safeParse(await response.json());
+            if (!parsed.success) {
+                records.finish(item, 'unknown', 'SEND_UNCERTAIN');
+                return;
+            }
+            if (parsed.data.code !== 0) {
+                records.finish(item, 'failed', 'SEND_REJECTED');
+                return;
+            }
+            const messageId = parsed.data.data?.message_id;
+            records.finish(item, response.ok && messageId ? 'delivered' : 'unknown', messageId ? undefined : 'SEND_UNCERTAIN', messageId);
+        }
+        catch (error) {
+            if (stop.aborted || !this.db.open)
+                return;
+            if (attempted)
+                records.finish(item, 'unknown', 'SEND_UNCERTAIN');
+            else if (error instanceof FeishuNotificationError && error.code === 'DIRECTORY_UNAVAILABLE')
+                records.retry(item, 1000);
+            else if (error instanceof FeishuNotificationError && error.code === 'DIRECTORY_PERMISSION_REQUIRED')
+                records.finish(item, 'failed', error.code);
+            else if (error instanceof FeishuNotificationError)
+                records.finish(item, 'cancelled', error.code);
+            else
+                records.retry(item, 1000);
+        }
+    }
+}
+function retryDelay(response) {
+    const header = response.headers.get('retry-after');
+    if (!header)
+        return 1000;
+    const seconds = Number(header), delay = Number.isFinite(seconds) ? seconds * 1000 : Date.parse(header) - Date.now();
+    return Number.isFinite(delay) ? Math.max(1000, delay) : 1000;
+}
+//# sourceMappingURL=feishu-notification-worker.js.map

package/dist/gateway/src/services/notifications/feishu-notification-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feishu-notification-worker.js","sourceRoot":"","sources":["../../../../src/services/notifications/feishu-notification-worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,kDAAkD,CAAC;AAC1F,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzF,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAGhF,MAAM,QAAQ,GAAC,uEAAuE,CAAC;AACvF,MAAM,UAAU,GAAC,yEAAyE,CAAC;AAC3F,MAAM,WAAW,GAAC,CAAC,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,mBAAmB,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC;AACtF,MAAM,aAAa,GAAC,CAAC,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,QAAQ,EAAE,EAAC,CAAC,CAAC;AACzG,MAAM,OAAO,wBAAwB;IACN;IAA6B;IAA+B;IAA4B;IAArH,YAA6B,EAAW,EAAkB,MAAa,EAAkB,GAAU,EAAkB,KAAwB,EAAE;QAAlH,OAAE,GAAF,EAAE,CAAS;QAAkB,WAAM,GAAN,MAAM,CAAO;QAAkB,QAAG,GAAH,GAAG,CAAO;QAAkB,OAAE,GAAF,EAAE,CAAwB;IAAG,CAAC;IACnJ,KAAK,CAAC,OAAO,CAAC,IAAgB;QAC5B,IAAG,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI;YAAC,OAAO;QACxC,MAAM,OAAO,GAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,EAAC,IAAI,CAAC,MAAM,CAAC,EAAC,OAAO,GAAC,OAAO,CAAC,OAAO,CAAC;QACnF,MAAM,IAAI,GAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAAA,IAAG,CAAC,IAAI;YAAC,OAAO;QAC3C,MAAM,aAAa,GAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,MAAM,GAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,SAAS,GAAC,GAAE,EAAE;YAClB,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAC,MAAM,IAAI,uBAAuB,CAAC,YAAY,CAAC,CAAC;YACxF,MAAM,KAAK,GAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACzC,IAAG,IAAI,CAAC,eAAe,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC;gBAAC,MAAM,IAAI,uBAAuB,CAAC,sBAAsB,CAAC,CAAC;YAC9H,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,MAAM,OAAO,GAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAE,KAAK,EAAC,QAAQ,GAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAE,iCAAiC,CAAC;QAChG,IAAI,SAAS,GAAC,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,SAAS,EAAE,CAAC;YAAA,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrC,MAAM,EAAC,MAAM,EAAC,GAAC,SAAS,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACxH,MAAM,aAAa,GAAC,MAAM,OAAO,CAAC,QAAQ,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC,EAAC,cAAc,EAAC,kBAAkB,EAAC;gBAC3H,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,EAAC,MAAM,EAAC,WAAW,CAAC,KAAK,EAAC,UAAU,EAAC,WAAW,CAAC,SAAS,EAAC,CAAC,EAAC,CAAC,CAAC;YACrF,IAAG,aAAa,CAAC,MAAM,KAAG,GAAG,IAAI,aAAa,CAAC,MAAM,IAAE,GAAG,EAAC,CAAC;gBAAA,OAAO,CAAC,KAAK,CAAC,IAAI,EAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAClH,IAAG,CAAC,aAAa,CAAC,EAAE,EAAC,CAAC;gBAAA,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,EAAC,gBAAgB,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC7E,MAAM,KAAK,GAAC,WAAW,CAAC,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,mBAAmB,CAAC;YAC9E,SAAS,EAAE,CAAC;YACZ,IAAG,MAAM,CAAC,IAAI,KAAG,OAAO,IAAE,CAAC,MAAM,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC,IAAI,CAAC,EAAE,EAAC,GAAE,EAAE,GAAC,SAAS,EAAE,CAAC,CAAA,CAAC,CAAC,EAAE,CAAC;gBAC5G,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,MAAM,IAAI,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;YAAA,MAAM,OAAO,GAAC,SAAS,EAAE,CAAC;YACrD,MAAM,YAAY,GAAC,IAAI,CAAC,eAAe,CAAA,CAAC,CAAA,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC;YAC1F,MAAM,IAAI,GAAC,4BAA4B,CAAC,IAAI,EAAC,YAAY,EAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACrF,MAAM,IAAI,GAAC,IAAI,CAAC,SAAS,CAAC,EAAC,UAAU,EAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAC,QAAQ,EAAC,aAAa,EAAC,OAAO,EAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,IAAI,CAAC,EAAE,EAAC,CAAC,CAAC;YAC/H,SAAS,EAAE,CAAC;YAAA,SAAS,GAAC,IAAI,CAAC;YAC3B,MAAM,QAAQ,GAAC,MAAM,OAAO,CAAC,UAAU,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC,EAAC,cAAc,EAAC,kBAAkB,EAAC,aAAa,EAAC,UAAU,KAAK,EAAE,EAAC,EAAC,IAAI,EAAC,CAAC,CAAC;YAClK,IAAG,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI;gBAAC,OAAO;YACxC,IAAG,QAAQ,CAAC,MAAM,KAAG,GAAG,EAAC,CAAC;gBAAA,OAAO,CAAC,KAAK,CAAC,IAAI,EAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC3E,IAAG,QAAQ,CAAC,MAAM,IAAE,GAAG,EAAC,CAAC;gBAAA,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,SAAS,EAAC,gBAAgB,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YACjF,MAAM,MAAM,GAAC,aAAa,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5D,IAAG,CAAC,MAAM,CAAC,OAAO,EAAC,CAAC;gBAAA,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,SAAS,EAAC,gBAAgB,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC5E,IAAG,MAAM,CAAC,IAAI,CAAC,IAAI,KAAG,CAAC,EAAC,CAAC;gBAAA,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,EAAC,eAAe,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC/E,MAAM,SAAS,GAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;YAC7C,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,CAAC,EAAE,IAAI,SAAS,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,SAAS,EAAC,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,gBAAgB,EAAC,SAAS,CAAC,CAAC;QACrH,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YACZ,IAAG,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI;gBAAC,OAAO;YACxC,IAAG,SAAS;gBAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,SAAS,EAAC,gBAAgB,CAAC,CAAC;iBACxD,IAAG,KAAK,YAAY,uBAAuB,IAAE,KAAK,CAAC,IAAI,KAAG,uBAAuB;gBAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;iBAC3G,IAAG,KAAK,YAAY,uBAAuB,IAAE,KAAK,CAAC,IAAI,KAAG,+BAA+B;gBAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;iBACnI,IAAG,KAAK,YAAY,uBAAuB;gBAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,WAAW,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;gBACxF,OAAO,CAAC,KAAK,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CACF;AACD,SAAS,UAAU,CAAC,QAAiB;IACnC,MAAM,MAAM,GAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAAA,IAAG,CAAC,MAAM;QAAC,OAAO,IAAI,CAAC;IACxE,MAAM,OAAO,GAAC,MAAM,CAAC,MAAM,CAAC,EAAC,KAAK,GAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA,CAAC,CAAA,OAAO,GAAC,IAAI,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACvG,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,IAAI,EAAC,KAAK,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;AAC1D,CAAC"}

package/dist/gateway/src/services/notifications/feishu-notifications.d.ts

@@ -0,0 +1,32 @@
+import type { Database } from '../../db/types.js';
+import { FeishuNotificationTargets } from './feishu-notification-targets.js';
+export { FeishuNotificationError } from './feishu-notification-error.js';
+import { FeishuNotificationRepository, type FeishuNotificationConfig, type FeishuNotificationDelivery, type FeishuNotificationType } from '../../db/repositories/feishu-notification-repository.js';
+import type { Notification } from '../../db/repositories/notification-repository.js';
+export declare class FeishuNotifications {
+    private readonly db;
+    private readonly userId;
+    readonly records: FeishuNotificationRepository;
+    readonly targets: FeishuNotificationTargets;
+    constructor(db: Database, userId: string);
+    authority(config?: FeishuNotificationConfig): import("./feishu-notification-targets.js").FeishuNotificationTarget;
+    state(): {
+        config: FeishuNotificationConfig;
+        ready: boolean;
+        blocker: string | null;
+        targets: import("./feishu-notification-targets.js").FeishuNotificationTarget[];
+    };
+    update(input: unknown): {
+        config: FeishuNotificationConfig;
+        ready: boolean;
+        blocker: string | null;
+        targets: import("./feishu-notification-targets.js").FeishuNotificationTarget[];
+    };
+    enqueue(notification: Notification): void;
+    test(input: unknown): FeishuNotificationDelivery;
+    assertDelivery(item: FeishuNotificationDelivery): {
+        target: import("./feishu-notification-targets.js").FeishuNotificationTarget;
+        config: FeishuNotificationConfig;
+    };
+}
+export declare function notificationType(notification: Notification): FeishuNotificationType | undefined;

package/dist/gateway/src/services/notifications/feishu-notifications.js

@@ -0,0 +1,139 @@
+import { z } from 'zod';
+import { FeishuNotificationTargets } from './feishu-notification-targets.js';
+import { FeishuNotificationError } from './feishu-notification-error.js';
+export { FeishuNotificationError } from './feishu-notification-error.js';
+import { FeishuNotificationRepository } from '../../db/repositories/feishu-notification-repository.js';
+const types = z.enum(['attention', 'failure', 'completion', 'lifecycle', 'app_action', 'automation']);
+// Accept retired clients' field without making basic result content optional.
+const configSchema = z.object({ enabled: z.boolean(), contentLevel: z.enum(['status', 'summary']).default('summary').transform(() => 'summary'), targetId: z.string().min(1).max(160).nullable().optional(), identityId: z.string().min(1).max(128).nullable().optional(), types: z.array(types).max(6),
+    webBaseUrl: z.string().trim().max(2048).transform(value => {
+        if (!value)
+            return '';
+        let url;
+        try {
+            url = new URL(value);
+        }
+        catch {
+            throw new FeishuNotificationError('WEB_URL_INVALID');
+        }
+        if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.search || url.hash || value.includes('\\'))
+            throw new FeishuNotificationError('WEB_URL_INVALID');
+        return url.toString().replace(/\/+$/, '');
+    }), revision: z.number().int().min(0) }).strict();
+export class FeishuNotifications {
+    db;
+    userId;
+    records;
+    targets;
+    constructor(db, userId) {
+        this.db = db;
+        this.userId = userId;
+        this.records = new FeishuNotificationRepository(db, userId);
+        this.targets = new FeishuNotificationTargets(db, userId);
+    }
+    authority(config = this.records.config()) {
+        return this.targets.authority(config.targetId);
+    }
+    state() {
+        const config = this.records.config();
+        let blocker = null;
+        try {
+            this.authority(config);
+        }
+        catch (error) {
+            blocker = error instanceof FeishuNotificationError ? error.code : 'CONFIG_INVALID';
+        }
+        return { config, ready: blocker === null, blocker, targets: this.targets.list() };
+    }
+    update(input) {
+        const parsed = configSchema.parse(input);
+        const targetId = parsed.targetId === undefined ? (parsed.identityId ? `private:${parsed.identityId}` : null) : parsed.targetId;
+        if (parsed.identityId && targetId !== `private:${parsed.identityId}`)
+            throw new FeishuNotificationError('TARGET_CONFLICT');
+        const next = { ...parsed, targetId, identityId: targetId?.startsWith('private:') ? targetId.slice(8) : null, types: [...new Set(parsed.types)].sort() };
+        return this.db.transaction(() => {
+            const previous = this.records.config();
+            if (previous.revision !== next.revision)
+                throw new FeishuNotificationError('CONFIG_CONFLICT');
+            if (next.enabled) {
+                if (!next.types.length)
+                    throw new FeishuNotificationError('TYPES_REQUIRED');
+                this.authority(next);
+            }
+            if (previous.enabled === next.enabled && previous.targetId === next.targetId && previous.webBaseUrl === next.webBaseUrl && previous.contentLevel === next.contentLevel
+                && [...previous.types].sort().join(',') === next.types.join(','))
+                return this.state();
+            this.records.save(next);
+            return this.state();
+        }).immediate();
+    }
+    enqueue(notification) {
+        const config = this.records.config();
+        const eventType = notificationType(notification);
+        if (!config.enabled || !eventType || !config.types.includes(eventType))
+            return;
+        try {
+            const target = this.authority(config);
+            this.records.enqueue({ notificationId: notification.id, eventType, subscriptionRevision: config.revision, identityRevision: target.kind === 'private' ? target.revision : 0, targetId: target.id, targetRevision: target.revision,
+                ttlMs: eventType === 'attention' ? 10 * 60_000 : 24 * 60 * 60_000 });
+        }
+        catch (error) {
+            if (!(error instanceof FeishuNotificationError))
+                throw error;
+        }
+    }
+    test(input) {
+        const { requestId } = z.object({ requestId: z.string().uuid() }).strict().parse(input);
+        return this.db.transaction(() => {
+            const config = this.records.config();
+            if (!config.enabled)
+                throw new FeishuNotificationError('SUBSCRIPTION_DISABLED');
+            const target = this.authority(config);
+            const existing = this.records.getTest(requestId);
+            if (existing)
+                return existing;
+            if (this.records.pendingCount() >= 100)
+                throw new FeishuNotificationError('QUEUE_FULL');
+            return this.records.enqueue({ testKey: requestId, eventType: 'test', subscriptionRevision: config.revision, identityRevision: target.kind === 'private' ? target.revision : 0, targetId: target.id, targetRevision: target.revision, ttlMs: 10 * 60_000 });
+        }).immediate();
+    }
+    assertDelivery(item) {
+        const config = this.records.config();
+        if (!config.enabled || config.revision !== item.subscription_revision)
+            throw new FeishuNotificationError('SUBSCRIPTION_CHANGED');
+        if (item.expires_at <= Date.now())
+            throw new FeishuNotificationError('EXPIRED');
+        const target = this.authority(config);
+        if (target.id !== item.target_id || target.revision !== item.target_revision)
+            throw new FeishuNotificationError('TARGET_CHANGED');
+        return { target, config };
+    }
+}
+export function notificationType(notification) {
+    let payload = {};
+    try {
+        payload = JSON.parse(notification.payload ?? '{}');
+    }
+    catch {
+        return;
+    }
+    if (!payload || typeof payload !== 'object')
+        return;
+    if (notification.type === 'copilot_automation')
+        return 'automation';
+    if (notification.type === 'app_action_notification')
+        return 'app_action';
+    if (notification.type !== 'claude_notification')
+        return;
+    switch (payload.notification_type) {
+        case 'attention':
+        case 'permission_prompt': return 'attention';
+        case 'task_failed':
+        case 'permission_denied': return 'failure';
+        case 'task_completed': return 'completion';
+        case 'task_interrupted':
+        case 'session_ended': return 'lifecycle';
+        default: return;
+    }
+}
+//# sourceMappingURL=feishu-notifications.js.map

package/dist/gateway/src/services/notifications/feishu-notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feishu-notifications.js","sourceRoot":"","sources":["../../../../src/services/notifications/feishu-notifications.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,4BAA4B,EAA+F,MAAM,yDAAyD,CAAC;AAGpM,MAAM,KAAK,GAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAC,SAAS,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,EAAC,YAAY,CAAC,CAAC,CAAC;AAC/F,8EAA8E;AAC9E,MAAM,YAAY,GAAC,CAAC,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,CAAC,CAAC,OAAO,EAAE,EAAC,YAAY,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAE,EAAE,CAAA,SAAkB,CAAC,EAAC,QAAQ,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAC,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAC,KAAK,EAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/R,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAA,EAAE;QACtD,IAAG,CAAC,KAAK;YAAC,OAAO,EAAE,CAAC;QACpB,IAAI,GAAO,CAAC;QACZ,IAAG,CAAC;YAAA,GAAG,GAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC;QAAA,MAAK,CAAC;YAAA,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QAAA,CAAC;QACpF,IAAG,CAAC,CAAC,OAAO,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,MAAM,IAAE,GAAG,CAAC,IAAI,IAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAC,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QAC3K,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAC,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,EAAC,QAAQ,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AACjD,MAAM,OAAO,mBAAmB;IAGD;IAA6B;IAFjD,OAAO,CAA8B;IACrC,OAAO,CAA2B;IAC3C,YAA6B,EAAW,EAAkB,MAAa;QAA1C,OAAE,GAAF,EAAE,CAAS;QAAkB,WAAM,GAAN,MAAM,CAAO;QACrE,IAAI,CAAC,OAAO,GAAC,IAAI,4BAA4B,CAAC,EAAE,EAAC,MAAM,CAAC,CAAC;QAAA,IAAI,CAAC,OAAO,GAAC,IAAI,yBAAyB,CAAC,EAAE,EAAC,MAAM,CAAC,CAAC;IACjH,CAAC;IACD,SAAS,CAAC,MAAM,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;IACD,KAAK;QACH,MAAM,MAAM,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,IAAI,OAAO,GAAa,IAAI,CAAC;QAC7B,IAAG,CAAC;YAAA,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,OAAO,GAAC,KAAK,YAAY,uBAAuB,CAAA,CAAC,CAAA,KAAK,CAAC,IAAI,CAAA,CAAC,CAAA,gBAAgB,CAAC;QAAA,CAAC;QACvH,OAAO,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,KAAG,IAAI,EAAC,OAAO,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAC,CAAC;IAC3E,CAAC;IACD,MAAM,CAAC,KAAa;QAClB,MAAM,MAAM,GAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAC,MAAM,CAAC,QAAQ,KAAG,SAAS,CAAA,CAAC,CAAA,CAAC,MAAM,CAAC,UAAU,CAAA,CAAC,CAAA,WAAW,MAAM,CAAC,UAAU,EAAE,CAAA,CAAC,CAAA,IAAI,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC,QAAQ,CAAC;QACnH,IAAG,MAAM,CAAC,UAAU,IAAE,QAAQ,KAAG,WAAW,MAAM,CAAC,UAAU,EAAE;YAAC,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QACrH,MAAM,IAAI,GAAC,EAAC,GAAG,MAAM,EAAC,QAAQ,EAAC,UAAU,EAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,CAAA,CAAC,CAAA,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,KAAK,EAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,CAAC;QAC3I,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;YAC7B,MAAM,QAAQ,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACrC,IAAG,QAAQ,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ;gBAAC,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;YAC1F,IAAG,IAAI,CAAC,OAAO,EAAC,CAAC;gBAAA,IAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;oBAAC,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;gBAAA,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAAA,CAAC;YACjH,IAAG,QAAQ,CAAC,OAAO,KAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAG,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,YAAY,KAAG,IAAI,CAAC,YAAY;mBACxJ,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;YACrF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACjB,CAAC;IACD,OAAO,CAAC,YAAyB;QAC/B,MAAM,MAAM,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,SAAS,GAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC/C,IAAG,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAC,OAAO;QAC7E,IAAI,CAAC;YACH,MAAM,MAAM,GAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,cAAc,EAAC,YAAY,CAAC,EAAE,EAAC,SAAS,EAAC,oBAAoB,EAAC,MAAM,CAAC,QAAQ,EAAC,gBAAgB,EAAC,MAAM,CAAC,IAAI,KAAG,SAAS,CAAA,CAAC,CAAA,MAAM,CAAC,QAAQ,CAAA,CAAC,CAAA,CAAC,EAAC,QAAQ,EAAC,MAAM,CAAC,EAAE,EAAC,cAAc,EAAC,MAAM,CAAC,QAAQ;gBAC9M,KAAK,EAAC,SAAS,KAAG,WAAW,CAAA,CAAC,CAAA,EAAE,GAAC,MAAM,CAAA,CAAC,CAAA,EAAE,GAAC,EAAE,GAAC,MAAM,EAAC,CAAC,CAAC;QAC3D,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAG,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC;gBAAC,MAAM,KAAK,CAAC;QAAA,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,KAAa;QAChB,MAAM,EAAC,SAAS,EAAC,GAAC,CAAC,CAAC,MAAM,CAAC,EAAC,SAAS,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;YAC7B,MAAM,MAAM,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,IAAG,CAAC,MAAM,CAAC,OAAO;gBAAC,MAAM,IAAI,uBAAuB,CAAC,uBAAuB,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,QAAQ,GAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/C,IAAG,QAAQ;gBAAC,OAAO,QAAQ,CAAC;YAC5B,IAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAE,GAAG;gBAAC,MAAM,IAAI,uBAAuB,CAAC,YAAY,CAAC,CAAC;YACpF,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,MAAM,EAAC,oBAAoB,EAAC,MAAM,CAAC,QAAQ,EAAC,gBAAgB,EAAC,MAAM,CAAC,IAAI,KAAG,SAAS,CAAA,CAAC,CAAA,MAAM,CAAC,QAAQ,CAAA,CAAC,CAAA,CAAC,EAAC,QAAQ,EAAC,MAAM,CAAC,EAAE,EAAC,cAAc,EAAC,MAAM,CAAC,QAAQ,EAAC,KAAK,EAAC,EAAE,GAAC,MAAM,EAAC,CAAC,CAAC;QACtO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACjB,CAAC;IACD,cAAc,CAAC,IAA+B;QAC5C,MAAM,MAAM,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,IAAG,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAG,IAAI,CAAC,qBAAqB;YAAC,MAAM,IAAI,uBAAuB,CAAC,sBAAsB,CAAC,CAAC;QAC7H,IAAG,IAAI,CAAC,UAAU,IAAE,IAAI,CAAC,GAAG,EAAE;YAAC,MAAM,IAAI,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACpC,IAAG,MAAM,CAAC,EAAE,KAAG,IAAI,CAAC,SAAS,IAAE,MAAM,CAAC,QAAQ,KAAG,IAAI,CAAC,eAAe;YAAC,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;QAC1H,OAAO,EAAC,MAAM,EAAC,MAAM,EAAC,CAAC;IACzB,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,YAAyB;IACxD,IAAI,OAAO,GAAwB,EAAE,CAAC;IACtC,IAAG,CAAC;QAAA,OAAO,GAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,IAAE,IAAI,CAA2B,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,OAAO;IAAA,CAAC;IAC5F,IAAG,CAAC,OAAO,IAAI,OAAO,OAAO,KAAG,QAAQ;QAAC,OAAO;IAChD,IAAG,YAAY,CAAC,IAAI,KAAG,oBAAoB;QAAC,OAAO,YAAY,CAAC;IAChE,IAAG,YAAY,CAAC,IAAI,KAAG,yBAAyB;QAAC,OAAO,YAAY,CAAC;IACrE,IAAG,YAAY,CAAC,IAAI,KAAG,qBAAqB;QAAC,OAAO;IACpD,QAAO,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACjC,KAAK,WAAW,CAAC;QAAA,KAAK,mBAAmB,CAAC,CAAA,OAAO,WAAW,CAAC;QAC7D,KAAK,aAAa,CAAC;QAAA,KAAK,mBAAmB,CAAC,CAAA,OAAO,SAAS,CAAC;QAC7D,KAAK,gBAAgB,CAAC,CAAA,OAAO,YAAY,CAAC;QAC1C,KAAK,kBAAkB,CAAC;QAAA,KAAK,eAAe,CAAC,CAAA,OAAO,WAAW,CAAC;QAChE,OAAO,CAAC,CAAA,OAAO;IACjB,CAAC;AACH,CAAC"}

package/dist/gateway/src/services/notifications/observe-cli-hook.d.ts

@@ -0,0 +1,6 @@
+import type { Database } from '../../db/types.js';
+import type { Session } from '../../db/repositories/session-repository.js';
+import { type CliSummary } from './cli-observation.js';
+/** Synchronous, bounded direct-field enrichment BEFORE emitEvent. No filesystem
+ * reads or waits; optional enrichment failure never suppresses lifecycle. */
+export declare function observeCliHook(db: Database, session: Session, event: Record<string, unknown>, adapter: string): CliSummary | undefined;

package/dist/gateway/src/services/notifications/observe-cli-hook.js

@@ -0,0 +1,55 @@
+import { nativePromptIdentity } from '../../db/repositories/session-notification-prompt-repository.js';
+import { CliObservationRepository } from '../../db/repositories/cli-observation-repository.js';
+import { cliText, directCliFields, toolObservation } from './cli-observation.js';
+/** Synchronous, bounded direct-field enrichment BEFORE emitEvent. No filesystem
+ * reads or waits; optional enrichment failure never suppresses lifecycle. */
+export function observeCliHook(db, session, event, adapter) {
+    if (event.agent_id !== undefined && event.agent_id !== null && event.agent_id !== '')
+        return;
+    const hook = event.hook_event_name;
+    if (!['UserPromptSubmit', 'TurnStarted', 'TaskStarted', 'PostToolUse', 'PostToolUseFailure', 'Stop', 'StopFailure', 'Notification', 'PermissionRequest'].includes(String(hook)))
+        return;
+    const records = new CliObservationRepository(db, session.userId);
+    const epoch = records.runtime(session.id, session.attachToken);
+    if (!epoch)
+        return;
+    const native = nativePromptIdentity(event.session_id, event.turn_id);
+    const exact = Boolean(native?.turnId);
+    const prior = exact ? records.find(session.id, epoch, native.sessionId, native.turnId) : undefined;
+    // Late tool/request events cannot rewrite the terminal summary of this round.
+    if (prior?.endedAt)
+        return ['Stop', 'StopFailure'].includes(String(hook)) ? prior : undefined;
+    const now = Date.now();
+    const summary = { version: 1, runtimeEpoch: epoch, identityQuality: exact ? 'exact_turn' : native ? 'session_only' : 'unknown',
+        ...(native ? { nativeSessionId: native.sessionId, ...(native.turnId ? { turnId: native.turnId } : {}) } : {}),
+        state: 'working', observedAt: now, progress: [], verification: [], ...prior };
+    summary.observedAt = now;
+    if (['UserPromptSubmit', 'TurnStarted', 'TaskStarted'].includes(String(hook))) {
+        summary.startedAt ??= now;
+        const prompt = cliText(event.prompt, 160, true);
+        if (prompt && exact)
+            summary.request = prompt;
+    }
+    else if (['PostToolUse', 'PostToolUseFailure'].includes(String(hook))) {
+        if (!exact)
+            return; // no evidence association without a causal round
+        const detail = toolObservation(event);
+        summary.progress = [...summary.progress, ...detail.progress].filter((p, i, all) => all.findIndex(other => other.text === p.text) === i).slice(-3);
+    }
+    else {
+        summary.state = hook === 'Stop' ? 'task_completed' : hook === 'StopFailure' ? 'task_failed'
+            : hook === 'PermissionRequest' ? 'permission_prompt' : cliText(event.notification_type, 80) || 'attention';
+        Object.assign(summary, directCliFields(adapter, event));
+        if (['Stop', 'StopFailure'].includes(String(hook)))
+            summary.endedAt = now;
+        // Remove literal echoed request paragraphs without altering the result facts.
+        if (summary.result && summary.request) {
+            summary.result.text = summary.result.text.split('\n').filter(line => line.trim() !== summary.request).join('\n').trim();
+            if (!summary.result.text)
+                delete summary.result;
+        }
+    }
+    records.save(session.id, summary, !prior && ['UserPromptSubmit', 'TurnStarted', 'TaskStarted'].includes(String(hook)));
+    return summary;
+}
+//# sourceMappingURL=observe-cli-hook.js.map

package/dist/gateway/src/services/notifications/observe-cli-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observe-cli-hook.js","sourceRoot":"","sources":["../../../../src/services/notifications/observe-cli-hook.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iEAAiE,CAAC;AACvG,OAAO,EAAE,wBAAwB,EAAE,MAAM,qDAAqD,CAAC;AAC/F,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAmB,MAAM,sBAAsB,CAAC;AAElG;6EAC6E;AAC7E,MAAM,UAAU,cAAc,CAAC,EAAY,EAAE,OAAgB,EAAE,KAA8B,EAAE,OAAe;IAC5G,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE;QAAE,OAAO;IAC7F,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,CAAC;IACnC,IAAI,CAAC,CAAC,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO;IACxL,MAAM,OAAO,GAAG,IAAI,wBAAwB,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAO,CAAC,SAAS,EAAE,MAAO,CAAC,MAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,8EAA8E;IAC9E,IAAI,KAAK,EAAE,OAAO;QAAE,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QACxI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC;IAChF,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC;IACzB,IAAI,CAAC,kBAAkB,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC9E,OAAO,CAAC,SAAS,KAAK,GAAG,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,MAAM,IAAI,KAAK;YAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC;IAChD,CAAC;SAAM,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,iDAAiD;QACrE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa;YACzF,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC;QAC7G,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,OAAO,GAAG,GAAG,CAAC;QAC1E,8EAA8E;QAC9E,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACtC,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACxH,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,IAAI,CAAC,kBAAkB,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/gateway/src/services/opencode-notification-settings.d.ts

@@ -1,5 +1,5 @@
 export declare const FORGEBADGER_OPENCODE_PLUGIN_RELATIVE = ".opencode/plugins/forgebadger-permission-notify.js";
-export declare const FORGEBADGER_OPENCODE_PLUGIN_TEMPLATE = "// ForgeBadger managed plugin \u2014 do not edit by hand\nconst GATEWAY_URL = process.env.FORGEBADGER_GATEWAY_URL || \"\";\nconst SESSION_ID = process.env.FORGEBADGER_SESSION_ID || \"\";\nconst ATTACH_TOKEN = process.env.FORGEBADGER_ATTACH_TOKEN || \"\";\n\nfunction permissionText(props) {\n  if (!props || typeof props !== \"object\") return \"OpenCode permission request\";\n  const name = typeof props.permission === \"string\" ? props.permission : \"permission\";\n  const paths = Array.isArray(props.patterns) && props.patterns.length > 0\n    ? \" \" + props.patterns.join(\", \")\n    : \"\";\n  return `${name}${paths}`;\n}\n\nfunction toolName(props) {\n  if (!props || typeof props !== \"object\") return \"OpenCode\";\n  if (typeof props.tool === \"string\") return props.tool;\n  if (props.metadata && typeof props.metadata.tool === \"string\") return props.metadata.tool;\n  return \"OpenCode\";\n}\n\nfunction lifecyclePayload(event) {\n  if (event.type === \"permission.asked\") {\n    return {\n      hook_event_name: \"PermissionRequest\",\n      notification_type: \"permission_prompt\",\n      message: permissionText(event.properties),\n      tool_name: toolName(event.properties)\n    };\n  }\n  if (event.type === \"session.idle\") {\n    return {\n      hook_event_name: \"Stop\",\n      notification_type: \"task_completed\",\n      message: \"OpenCode task completed\"\n    };\n  }\n  if (event.type === \"session.error\") {\n    return {\n      hook_event_name: \"StopFailure\",\n      notification_type: \"task_failed\",\n      message: \"OpenCode task failed\"\n    };\n  }\n  return null;\n}\n\nasync function notify(event) {\n  if (!GATEWAY_URL || !SESSION_ID || !ATTACH_TOKEN) return;\n  const lifecycle = event ? lifecyclePayload(event) : null;\n  if (!lifecycle) return;\n  try {\n    await fetch(\n      `${GATEWAY_URL.replace(/\\/+$/u, \"\")}/api/v1/session-hooks/claude-notification/${encodeURIComponent(SESSION_ID)}`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n          \"x-forgebadger-session-id\": SESSION_ID,\n          \"x-forgebadger-session-token\": ATTACH_TOKEN\n        },\n        body: JSON.stringify({ ...lifecycle, adapter: \"opencode\" }),\n        signal: AbortSignal.timeout(4500)\n      }\n    );\n  } catch {\n    // non-fatal; must never break OpenCode\n  }\n}\n\nexport const ForgeBadgerPermissionNotify = async () => ({\n  event: async ({ event }) => {\n    if (\n      event &&\n      (event.type === \"permission.asked\" || event.type === \"session.idle\" || event.type === \"session.error\")\n    ) await notify(event);\n  }\n});\n";
+export declare const FORGEBADGER_OPENCODE_PLUGIN_TEMPLATE = "// ForgeBadger managed plugin \u2014 do not edit by hand\nconst GATEWAY_URL = process.env.FORGEBADGER_GATEWAY_URL || \"\";\nconst SESSION_ID = process.env.FORGEBADGER_SESSION_ID || \"\";\nconst ATTACH_TOKEN = process.env.FORGEBADGER_ATTACH_TOKEN || \"\";\n\nfunction permissionText(props) {\n  if (!props || typeof props !== \"object\") return \"OpenCode permission request\";\n  const name = typeof props.permission === \"string\" ? props.permission : \"permission\";\n  const paths = Array.isArray(props.patterns) && props.patterns.length > 0\n    ? \" \" + props.patterns.join(\", \")\n    : \"\";\n  return `${name}${paths}`;\n}\n\nfunction toolName(props) {\n  if (!props || typeof props !== \"object\") return \"OpenCode\";\n  if (typeof props.tool === \"string\") return props.tool;\n  if (props.metadata && typeof props.metadata.tool === \"string\") return props.metadata.tool;\n  return \"OpenCode\";\n}\n\nfunction lifecyclePayload(event) {\n  if (event.type === \"session.status\") {\n    return { hook_event_name: \"TaskStarted\" };\n  }\n  if (event.type === \"permission.asked\") {\n    return {\n      hook_event_name: \"PermissionRequest\",\n      notification_type: \"permission_prompt\",\n      message: permissionText(event.properties),\n      tool_name: toolName(event.properties)\n    };\n  }\n  if (event.type === \"session.idle\") {\n    return {\n      hook_event_name: \"Stop\",\n      notification_type: \"task_completed\",\n      message: \"OpenCode task completed\"\n    };\n  }\n  if (event.type === \"session.error\") {\n    return {\n      hook_event_name: \"StopFailure\",\n      notification_type: \"task_failed\",\n      message: \"OpenCode task failed\",\n      ...(typeof event.properties?.error?.name === \"string\" ? { error_type: event.properties.error.name } : {}),\n      ...(typeof event.properties?.error?.data?.message === \"string\" ? { error_message: event.properties.error.data.message } : {})\n    };\n  }\n  return null;\n}\n\nasync function notify(event) {\n  if (!GATEWAY_URL || !SESSION_ID || !ATTACH_TOKEN) return;\n  const lifecycle = event ? event.hookPayload || lifecyclePayload(event) : null;\n  if (!lifecycle) return;\n  try {\n    const response = await fetch(\n      `${GATEWAY_URL.replace(/\\/+$/u, \"\")}/api/v1/session-hooks/claude-notification/${encodeURIComponent(SESSION_ID)}`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n          \"x-forgebadger-session-id\": SESSION_ID,\n          \"x-forgebadger-session-token\": ATTACH_TOKEN\n        },\n        body: JSON.stringify({ ...lifecycle, adapter: \"opencode\", session_id: event.session_id, ...event.summaryFields }),\n        signal: AbortSignal.timeout(4500)\n      }\n    );\n    if (!response.ok) {\n      const hint = response.status === 401\n        ? \" Restart this CLI session from ForgeBadger to refresh its notification identity.\"\n        : \" Check that the ForgeBadger Gateway is available.\";\n      console.warn(\"[ForgeBadger notifications] Delivery failed (HTTP \" + response.status + \").\" + hint);\n    }\n  } catch {\n    // Fail-open; never print credentials, response bodies, or exception messages.\n    console.warn(\"[ForgeBadger notifications] Delivery failed: could not reach Gateway.\");\n  }\n}\n\n// Pending UI state, not approval policy names, decides whether a person is needed.\nexport const ForgeBadgerPermissionNotify = async ({ client } = {}) => {\n  const active = new Set();\n  const pending = new Map();\n  const messages = new Map();\n  const latestUser = new Map();\n  const rounds = new Map();\n  const generations = new Map();\n  const omittedMessages = new Set();\n  let detailsDisabled = false;\n  const boundedSet = (map, key, value, max = 128) => {\n    map.set(key, value);\n    if (map.size > max) map.delete(map.keys().next().value);\n  };\n  const messageText = (message) => message && !message.omitted ? [...message.parts.values()].join(\"\\n\") : \"\";\n  const capture = (event) => {\n    if (detailsDisabled) return;\n    const info = event.properties?.info;\n    const part = event.properties?.part;\n    const value = info || part;\n    const id = info?.id || part?.messageID;\n    if (!value || typeof id !== \"string\" || typeof value.sessionID !== \"string\") return;\n    const key = value.sessionID + \":\" + id;\n    const cached = messages.get(key) || { parts: new Map(), id, sessionID: value.sessionID };\n    if (omittedMessages.has(key)) { cached.omitted = true; cached.parts.clear(); }\n    if (event.type === \"message.updated\" && info) {\n      // Copy identity/finality only; never cache the full message or reasoning.\n      Object.assign(cached, { role: info.role, parentID: info.parentID, finish: info.finish,\n        completed: info.time?.completed, error: Boolean(info.error) });\n      if (info.role === \"user\") boundedSet(latestUser, info.sessionID, id);\n    } else if (event.type === \"message.part.updated\" && part?.type === \"text\") {\n      // Oversized fields are omitted whole, before any Gateway-side redaction.\n      if (part.synthetic || typeof part.text !== \"string\" || typeof part.id !== \"string\"\n        || Buffer.byteLength(part.text, \"utf8\") > 32 * 1024 || (!cached.parts.has(part.id) && cached.parts.size >= 8)) {\n        cached.omitted = true; cached.parts.clear();\n      } else if (!cached.omitted) cached.parts.set(part.id, part.text);\n    }\n    messages.set(key, cached);\n    if (messages.size > 32) {\n      const evicted = messages.keys().next().value;\n      messages.delete(evicted); omittedMessages.add(evicted);\n      // Tombstones prevent an evicted first part from being reconstructed as\n      // a tail-only reply. If even tombstones fill, disable details fail-closed.\n      if (omittedMessages.size > 128) { detailsDisabled = true; messages.clear(); omittedMessages.clear(); }\n    }\n  };\n  const remember = (id) => {\n    active.add(id);\n    if (active.size > 256) active.delete(active.values().next().value);\n  };\n  const rootSession = async (id) => {\n    try {\n      // v1 SDK uses path.id; v2 uses sessionID. Each ignores the other key.\n      const response = await client.session.get({ path: { id }, sessionID: id }, { signal: AbortSignal.timeout(1500) });\n      return response.data?.id === id && !response.data.parentID;\n    } catch { return false; }\n  };\n  return { event: async ({ event }) => {\n    if ([\"message.updated\", \"message.part.updated\"].includes(event?.type)) { capture(event); return; }\n    const props = event?.properties;\n    const id = props?.sessionID;\n    if (!event || !props || typeof id !== \"string\") return;\n    if (event.type === \"session.status\" && [\"busy\", \"retry\"].includes(props.status?.type)) {\n      const first = !active.has(id);\n      const turn = first ? latestUser.get(id) : rounds.get(id);\n      const generation = first ? {} : generations.get(id);\n      if (first) { boundedSet(generations, id, generation); if (turn) boundedSet(rounds, id, turn); }\n      const fields = turn ? { turn_id: turn } : {};\n      const prompt = first && turn ? messageText(messages.get(id + \":\" + turn)) : \"\";\n      remember(id);\n      if (await rootSession(id)) {\n        if (!active.has(id) || generations.get(id) !== generation) return;\n        if (prompt) {\n          await notify({ session_id: id, summaryFields: fields,\n            hookPayload: { hook_event_name: \"UserPromptSubmit\", prompt } });\n        }\n        if (!active.has(id) || generations.get(id) !== generation) return;\n        await notify({ ...event, session_id: id, summaryFields: fields });\n      }\n      return;\n    }\n    if (event.type === \"permission.replied\") {\n      const timer = pending.get(props.requestID);\n      if (timer) clearTimeout(timer);\n      pending.delete(props.requestID);\n      return;\n    }\n    if (event.type === \"permission.asked\") {\n      if (typeof props.id !== \"string\" || pending.has(props.id) || pending.size >= 128) return;\n      const timer = setTimeout(async () => {\n        try {\n          const response = await client.permission.list({}, { signal: AbortSignal.timeout(1500) });\n          // An auto responder may have consumed the request without a reply\n          // event reaching this plugin. Check the current server pending list.\n          if (pending.get(props.id) !== timer || !Array.isArray(response.data)\n            || !response.data.some(request => request.id === props.id && request.sessionID === id)) return;\n          await notify({ ...event, properties: props, session_id: id });\n        } catch { /* No confirmed pending request: do not invent an approval. */ }\n        finally { if (pending.get(props.id) === timer) pending.delete(props.id); }\n      }, 1000);\n      timer.unref?.();\n      pending.set(props.id, timer);\n      return;\n    }\n    if (event.type !== \"session.idle\" && event.type !== \"session.error\") return;\n    if (!active.delete(id)) return;\n    const generation = generations.get(id);\n    const turn = rounds.get(id);\n    const final = turn && [...messages.values()].filter(message => message.sessionID === id && message.parentID === turn\n      && message.role === \"assistant\" && message.finish === \"stop\" && typeof message.completed === \"number\" && !message.error)\n      .sort((a, b) => b.completed - a.completed)[0];\n    const text = messageText(final);\n    const summaryFields = { ...(turn ? { turn_id: turn } : {}),\n      ...(event.type === \"session.idle\" && text ? { last_assistant_message: text } : {}) };\n    // Freeze before awaiting network I/O. A new round cannot change this card.\n    rounds.delete(id);\n    if (latestUser.get(id) === turn) latestUser.delete(id);\n    for (const [key, message] of messages) if (message.sessionID === id && (message.id === turn || message.parentID === turn)) messages.delete(key);\n    if (!(await rootSession(id))) return;\n    // Preserve an old identified result only when the new round is identified\n    // too: the Gateway can then reject its stale work-state transition.\n    if (generations.get(id) !== generation && (!turn || !rounds.get(id))) return;\n    await notify({ ...event, session_id: id, summaryFields });\n  } };\n};\n\n";
 export declare function ensureForgeBadgerOpenCodePlugin(projectRoot: string): Promise<{
     path: string;
     changed: boolean;

package/dist/gateway/src/services/opencode-notification-settings.js

@@ -24,6 +24,9 @@ function toolName(props) {
 }
 
 function lifecyclePayload(event) {
+  if (event.type === "session.status") {
+    return { hook_event_name: "TaskStarted" };
+  }
   if (event.type === "permission.asked") {
     return {
       hook_event_name: "PermissionRequest",
@@ -43,7 +46,9 @@ function lifecyclePayload(event) {
     return {
       hook_event_name: "StopFailure",
       notification_type: "task_failed",
-      message: "OpenCode task failed"
+      message: "OpenCode task failed",
+      ...(typeof event.properties?.error?.name === "string" ? { error_type: event.properties.error.name } : {}),
+      ...(typeof event.properties?.error?.data?.message === "string" ? { error_message: event.properties.error.data.message } : {})
     };
   }
   return null;
@@ -51,10 +56,10 @@ function lifecyclePayload(event) {
 
 async function notify(event) {
   if (!GATEWAY_URL || !SESSION_ID || !ATTACH_TOKEN) return;
-  const lifecycle = event ? lifecyclePayload(event) : null;
+  const lifecycle = event ? event.hookPayload || lifecyclePayload(event) : null;
   if (!lifecycle) return;
   try {
-    await fetch(
+    const response = await fetch(
       \`\${GATEWAY_URL.replace(/\\/+$/u, "")}/api/v1/session-hooks/claude-notification/\${encodeURIComponent(SESSION_ID)}\`,
       {
         method: "POST",
@@ -63,23 +68,148 @@ async function notify(event) {
           "x-forgebadger-session-id": SESSION_ID,
           "x-forgebadger-session-token": ATTACH_TOKEN
         },
-        body: JSON.stringify({ ...lifecycle, adapter: "opencode" }),
+        body: JSON.stringify({ ...lifecycle, adapter: "opencode", session_id: event.session_id, ...event.summaryFields }),
         signal: AbortSignal.timeout(4500)
       }
     );
+    if (!response.ok) {
+      const hint = response.status === 401
+        ? " Restart this CLI session from ForgeBadger to refresh its notification identity."
+        : " Check that the ForgeBadger Gateway is available.";
+      console.warn("[ForgeBadger notifications] Delivery failed (HTTP " + response.status + ")." + hint);
+    }
   } catch {
-    // non-fatal; must never break OpenCode
+    // Fail-open; never print credentials, response bodies, or exception messages.
+    console.warn("[ForgeBadger notifications] Delivery failed: could not reach Gateway.");
   }
 }
 
-export const ForgeBadgerPermissionNotify = async () => ({
-  event: async ({ event }) => {
-    if (
-      event &&
-      (event.type === "permission.asked" || event.type === "session.idle" || event.type === "session.error")
-    ) await notify(event);
-  }
-});
+// Pending UI state, not approval policy names, decides whether a person is needed.
+export const ForgeBadgerPermissionNotify = async ({ client } = {}) => {
+  const active = new Set();
+  const pending = new Map();
+  const messages = new Map();
+  const latestUser = new Map();
+  const rounds = new Map();
+  const generations = new Map();
+  const omittedMessages = new Set();
+  let detailsDisabled = false;
+  const boundedSet = (map, key, value, max = 128) => {
+    map.set(key, value);
+    if (map.size > max) map.delete(map.keys().next().value);
+  };
+  const messageText = (message) => message && !message.omitted ? [...message.parts.values()].join("\\n") : "";
+  const capture = (event) => {
+    if (detailsDisabled) return;
+    const info = event.properties?.info;
+    const part = event.properties?.part;
+    const value = info || part;
+    const id = info?.id || part?.messageID;
+    if (!value || typeof id !== "string" || typeof value.sessionID !== "string") return;
+    const key = value.sessionID + ":" + id;
+    const cached = messages.get(key) || { parts: new Map(), id, sessionID: value.sessionID };
+    if (omittedMessages.has(key)) { cached.omitted = true; cached.parts.clear(); }
+    if (event.type === "message.updated" && info) {
+      // Copy identity/finality only; never cache the full message or reasoning.
+      Object.assign(cached, { role: info.role, parentID: info.parentID, finish: info.finish,
+        completed: info.time?.completed, error: Boolean(info.error) });
+      if (info.role === "user") boundedSet(latestUser, info.sessionID, id);
+    } else if (event.type === "message.part.updated" && part?.type === "text") {
+      // Oversized fields are omitted whole, before any Gateway-side redaction.
+      if (part.synthetic || typeof part.text !== "string" || typeof part.id !== "string"
+        || Buffer.byteLength(part.text, "utf8") > 32 * 1024 || (!cached.parts.has(part.id) && cached.parts.size >= 8)) {
+        cached.omitted = true; cached.parts.clear();
+      } else if (!cached.omitted) cached.parts.set(part.id, part.text);
+    }
+    messages.set(key, cached);
+    if (messages.size > 32) {
+      const evicted = messages.keys().next().value;
+      messages.delete(evicted); omittedMessages.add(evicted);
+      // Tombstones prevent an evicted first part from being reconstructed as
+      // a tail-only reply. If even tombstones fill, disable details fail-closed.
+      if (omittedMessages.size > 128) { detailsDisabled = true; messages.clear(); omittedMessages.clear(); }
+    }
+  };
+  const remember = (id) => {
+    active.add(id);
+    if (active.size > 256) active.delete(active.values().next().value);
+  };
+  const rootSession = async (id) => {
+    try {
+      // v1 SDK uses path.id; v2 uses sessionID. Each ignores the other key.
+      const response = await client.session.get({ path: { id }, sessionID: id }, { signal: AbortSignal.timeout(1500) });
+      return response.data?.id === id && !response.data.parentID;
+    } catch { return false; }
+  };
+  return { event: async ({ event }) => {
+    if (["message.updated", "message.part.updated"].includes(event?.type)) { capture(event); return; }
+    const props = event?.properties;
+    const id = props?.sessionID;
+    if (!event || !props || typeof id !== "string") return;
+    if (event.type === "session.status" && ["busy", "retry"].includes(props.status?.type)) {
+      const first = !active.has(id);
+      const turn = first ? latestUser.get(id) : rounds.get(id);
+      const generation = first ? {} : generations.get(id);
+      if (first) { boundedSet(generations, id, generation); if (turn) boundedSet(rounds, id, turn); }
+      const fields = turn ? { turn_id: turn } : {};
+      const prompt = first && turn ? messageText(messages.get(id + ":" + turn)) : "";
+      remember(id);
+      if (await rootSession(id)) {
+        if (!active.has(id) || generations.get(id) !== generation) return;
+        if (prompt) {
+          await notify({ session_id: id, summaryFields: fields,
+            hookPayload: { hook_event_name: "UserPromptSubmit", prompt } });
+        }
+        if (!active.has(id) || generations.get(id) !== generation) return;
+        await notify({ ...event, session_id: id, summaryFields: fields });
+      }
+      return;
+    }
+    if (event.type === "permission.replied") {
+      const timer = pending.get(props.requestID);
+      if (timer) clearTimeout(timer);
+      pending.delete(props.requestID);
+      return;
+    }
+    if (event.type === "permission.asked") {
+      if (typeof props.id !== "string" || pending.has(props.id) || pending.size >= 128) return;
+      const timer = setTimeout(async () => {
+        try {
+          const response = await client.permission.list({}, { signal: AbortSignal.timeout(1500) });
+          // An auto responder may have consumed the request without a reply
+          // event reaching this plugin. Check the current server pending list.
+          if (pending.get(props.id) !== timer || !Array.isArray(response.data)
+            || !response.data.some(request => request.id === props.id && request.sessionID === id)) return;
+          await notify({ ...event, properties: props, session_id: id });
+        } catch { /* No confirmed pending request: do not invent an approval. */ }
+        finally { if (pending.get(props.id) === timer) pending.delete(props.id); }
+      }, 1000);
+      timer.unref?.();
+      pending.set(props.id, timer);
+      return;
+    }
+    if (event.type !== "session.idle" && event.type !== "session.error") return;
+    if (!active.delete(id)) return;
+    const generation = generations.get(id);
+    const turn = rounds.get(id);
+    const final = turn && [...messages.values()].filter(message => message.sessionID === id && message.parentID === turn
+      && message.role === "assistant" && message.finish === "stop" && typeof message.completed === "number" && !message.error)
+      .sort((a, b) => b.completed - a.completed)[0];
+    const text = messageText(final);
+    const summaryFields = { ...(turn ? { turn_id: turn } : {}),
+      ...(event.type === "session.idle" && text ? { last_assistant_message: text } : {}) };
+    // Freeze before awaiting network I/O. A new round cannot change this card.
+    rounds.delete(id);
+    if (latestUser.get(id) === turn) latestUser.delete(id);
+    for (const [key, message] of messages) if (message.sessionID === id && (message.id === turn || message.parentID === turn)) messages.delete(key);
+    if (!(await rootSession(id))) return;
+    // Preserve an old identified result only when the new round is identified
+    // too: the Gateway can then reject its stale work-state transition.
+    if (generations.get(id) !== generation && (!turn || !rounds.get(id))) return;
+    await notify({ ...event, session_id: id, summaryFields });
+  } };
+};
+
 `;
 export async function ensureForgeBadgerOpenCodePlugin(projectRoot) {
     // Throws on path traversal / denied roots / symlink escapes. Security