fraim 2.0.202 → 2.0.204

package/dist/src/ai-hub/hosts.js

@@ -1,1664 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createHubEvent = exports.createHubMessage = exports.ScriptedHostRuntime = exports.FakeHostRuntime = exports.CliHostRuntime = void 0;
-exports.parseSeekMentoringSignal = parseSeekMentoringSignal;
-exports.parseFraimJobLoadSignal = parseFraimJobLoadSignal;
-exports.parseUsageSignal = parseUsageSignal;
-exports.parseAgentIdentitySignal = parseAgentIdentitySignal;
-exports.detectEmployees = detectEmployees;
-exports.prepareCodexBrowserHome = prepareCodexBrowserHome;
-exports.sharedBrowserHostConfig = sharedBrowserHostConfig;
-exports.buildStartPlan = buildStartPlan;
-exports.buildContinuePlan = buildContinuePlan;
-exports.supportsDirectPath = supportsDirectPath;
-exports.buildDirectStartPlan = buildDirectStartPlan;
-exports.buildDirectContinuePlan = buildDirectContinuePlan;
-exports.parseHostLine = parseHostLine;
-exports.findGeminiSessionIdForPrompt = findGeminiSessionIdForPrompt;
-const crypto_1 = require("crypto");
-const child_process_1 = require("child_process");
-const fs_1 = __importDefault(require("fs"));
-const os_1 = __importDefault(require("os"));
-const path_1 = __importDefault(require("path"));
-const manager_turns_1 = require("./manager-turns");
-const managed_agent_paths_1 = require("../cli/utils/managed-agent-paths");
-const mcp_config_generator_1 = require("../cli/setup/mcp-config-generator");
-const agent_token_prices_1 = require("../local-mcp-server/agent-token-prices");
-// Parse a single line of host stdout looking for a seekMentoring tool-use
-// signal. Returns null if the line does not contain one. Supports both
-// hosts FRAIM ships against today:
-//   - Claude Code: tool_use blocks inside message.content with name
-//     'mcp__fraim__seekMentoring' (MCP names are prefixed in Claude's
-//     stream-json output).
-//   - Codex: top-level events of type 'item.started' / 'item.completed'
-//     whose item.type === 'mcp_tool_call' and item.tool === 'seekMentoring'
-//     (Codex separates the MCP server name from the tool name).
-function parseSeekMentoringSignal(line) {
-    if (!line.includes('seekMentoring'))
-        return null;
-    let parsed;
-    try {
-        parsed = JSON.parse(line);
-    }
-    catch {
-        return null;
-    }
-    if (typeof parsed !== 'object' || parsed === null)
-        return null;
-    const obj = parsed;
-    // Codex shape: { type: 'item.started' | 'item.completed', item: { type: 'mcp_tool_call', tool: 'seekMentoring', arguments: {...} } }.
-    // Match both started + completed; the call carries the same arguments
-    // either way, so applying the signal at the earliest is fine.
-    if ((obj.type === 'item.started' || obj.type === 'item.completed') &&
-        typeof obj.item === 'object' && obj.item !== null) {
-        const item = obj.item;
-        const itemType = item.type;
-        const tool = typeof item.tool === 'string' ? item.tool : null;
-        if (itemType === 'mcp_tool_call' &&
-            (tool === 'seekMentoring' || tool === 'mcp__fraim__seekMentoring')) {
-            const args = item.arguments;
-            const sig = extractSignalFromArgs(args);
-            if (sig)
-                return sig;
-        }
-    }
-    // Claude Code shape: tool_use blocks live inside parsed.message.content.
-    // The name is MCP-prefixed (e.g. 'mcp__fraim__seekMentoring').
-    const candidates = [obj];
-    if (Array.isArray(obj.content))
-        candidates.push(...obj.content);
-    if (typeof obj.message === 'object' && obj.message !== null) {
-        const msg = obj.message;
-        if (Array.isArray(msg.content))
-            candidates.push(...msg.content);
-    }
-    for (const candidate of candidates) {
-        if (typeof candidate !== 'object' || candidate === null)
-            continue;
-        const c = candidate;
-        const isToolUse = c.type === 'tool_use' || c.type === 'function_call';
-        const nameField = typeof c.name === 'string' ? c.name : (typeof c.tool_name === 'string' ? c.tool_name : '');
-        const isSeekMentoring = nameField === 'seekMentoring' ||
-            nameField === 'mcp__fraim__seekMentoring' ||
-            nameField.endsWith('seekMentoring');
-        if (!isToolUse || !isSeekMentoring)
-            continue;
-        const input = (c.input || c.arguments || c.parameters);
-        const sig = extractSignalFromArgs(input);
-        if (sig)
-            return sig;
-    }
-    return null;
-}
-// Issue #710: extract the job name from a get_fraim_job tool call. This
-// is structured known-job evidence; the server still validates the job id
-// against the catalog before promoting any run.
-function parseFraimJobLoadSignal(line) {
-    if (!line.includes('get_fraim_job'))
-        return null;
-    let parsed;
-    try {
-        parsed = JSON.parse(line);
-    }
-    catch {
-        return null;
-    }
-    if (typeof parsed !== 'object' || parsed === null)
-        return null;
-    const obj = parsed;
-    // Codex shape: { type: 'item.started' | 'item.completed', item:
-    // { type: 'mcp_tool_call', tool: 'get_fraim_job', arguments: { job } } }.
-    if ((obj.type === 'item.started' || obj.type === 'item.completed') &&
-        typeof obj.item === 'object' && obj.item !== null) {
-        const item = obj.item;
-        const tool = typeof item.tool === 'string' ? item.tool : '';
-        if (item.type === 'mcp_tool_call' && isGetFraimJobTool(tool)) {
-            const sig = readFraimJobFromArgs(item.arguments);
-            if (sig)
-                return sig;
-        }
-    }
-    // Claude Code shape: tool_use blocks live inside message.content with
-    // an MCP-prefixed name such as mcp__fraim__get_fraim_job.
-    const candidates = [obj];
-    if (Array.isArray(obj.content))
-        candidates.push(...obj.content);
-    if (typeof obj.message === 'object' && obj.message !== null) {
-        const msg = obj.message;
-        if (Array.isArray(msg.content))
-            candidates.push(...msg.content);
-    }
-    for (const candidate of candidates) {
-        if (typeof candidate !== 'object' || candidate === null)
-            continue;
-        const c = candidate;
-        const isToolUse = c.type === 'tool_use' || c.type === 'function_call';
-        const nameField = typeof c.name === 'string' ? c.name : (typeof c.tool_name === 'string' ? c.tool_name : '');
-        if (!isToolUse || !isGetFraimJobTool(nameField))
-            continue;
-        const sig = readFraimJobFromArgs(c.input || c.arguments || c.parameters);
-        if (sig)
-            return sig;
-    }
-    return null;
-}
-// Issue #347 — extract per-turn usage from the host's JSON stream.
-// Codex: `{"type":"turn.completed","usage":{input_tokens, cached_input_tokens, output_tokens, reasoning_output_tokens}}`.
-// Claude Code: `{"type":"result", ..., "usage":{input_tokens, output_tokens, cache_creation_input_tokens, cache_read_input_tokens}, "total_cost_usd": ...}`.
-// Gemini CLI: `{"stats":{"models":{"model-id":{"tokens":{input,prompt,cached,candidates,thoughts,tool}}}}}`.
-function parseUsageSignal(line) {
-    if (!line.includes('usage') && !line.includes('"stats"'))
-        return null;
-    let parsed;
-    try {
-        parsed = JSON.parse(line);
-    }
-    catch {
-        return null;
-    }
-    if (typeof parsed !== 'object' || parsed === null)
-        return null;
-    const obj = parsed;
-    // Codex turn.completed shape. Codex's `input_tokens` is cumulative
-    // and INCLUDES the cached portion, so normalize by subtracting.
-    if (obj.type === 'turn.completed' && typeof obj.usage === 'object' && obj.usage !== null) {
-        const u = obj.usage;
-        const totalInput = numberOrNull(u.input_tokens);
-        const cachedInput = numberOrNull(u.cached_input_tokens) ?? 0;
-        const outputTokens = numberOrNull(u.output_tokens);
-        if (totalInput === null && outputTokens === null)
-            return null;
-        const nonCached = Math.max(0, (totalInput ?? 0) - cachedInput);
-        return {
-            nonCachedInputTokens: nonCached,
-            cachedInputTokens: cachedInput,
-            cacheCreationTokens: 0, // Codex does not bill cache creation separately
-            outputTokens: outputTokens ?? 0,
-            reasoningTokens: numberOrNull(u.reasoning_output_tokens) ?? undefined,
-        };
-    }
-    // Claude Code result shape. Anthropic semantics: input_tokens,
-    // cache_read_input_tokens, and cache_creation_input_tokens are
-    // mutually exclusive — pass each through to its own bucket.
-    if (obj.type === 'result' && typeof obj.usage === 'object' && obj.usage !== null) {
-        const u = obj.usage;
-        const inputTokens = numberOrNull(u.input_tokens);
-        const outputTokens = numberOrNull(u.output_tokens);
-        if (inputTokens === null && outputTokens === null)
-            return null;
-        const costUsd = numberOrNull(obj.total_cost_usd);
-        return {
-            nonCachedInputTokens: inputTokens ?? 0,
-            cachedInputTokens: numberOrNull(u.cache_read_input_tokens) ?? 0,
-            cacheCreationTokens: numberOrNull(u.cache_creation_input_tokens) ?? 0,
-            outputTokens: outputTokens ?? 0,
-            costUsd: costUsd ?? undefined,
-        };
-    }
-    // Gemini CLI JSON output reports per-model stats. Its `input` bucket is
-    // fresh prompt input, `cached` is prompt-cache reads, and `thoughts` are
-    // billable output/reasoning tokens.
-    if (typeof obj.stats === 'object' && obj.stats !== null) {
-        const stats = obj.stats;
-        const models = stats.models;
-        if (models && typeof models === 'object') {
-            let sawTokens = false;
-            let nonCachedInputTokens = 0;
-            let cachedInputTokens = 0;
-            let outputTokens = 0;
-            let reasoningTokens = 0;
-            let costUsd = 0;
-            let hasCompletePricing = true;
-            for (const [modelId, modelStats] of Object.entries(models)) {
-                if (typeof modelStats !== 'object' || modelStats === null)
-                    continue;
-                const tokens = modelStats.tokens;
-                if (!tokens || typeof tokens !== 'object')
-                    continue;
-                const freshInput = numberOrNull(tokens.input) ?? 0;
-                const cachedInput = numberOrNull(tokens.cached) ?? 0;
-                const candidates = numberOrNull(tokens.candidates) ?? 0;
-                const thoughts = numberOrNull(tokens.thoughts) ?? 0;
-                const toolTokens = numberOrNull(tokens.tool) ?? 0;
-                const modelOutput = candidates + thoughts + toolTokens;
-                if (freshInput === 0 && cachedInput === 0 && modelOutput === 0)
-                    continue;
-                sawTokens = true;
-                nonCachedInputTokens += freshInput;
-                cachedInputTokens += cachedInput;
-                outputTokens += modelOutput;
-                reasoningTokens += thoughts;
-                const price = (0, agent_token_prices_1.lookupPrice)('gemini', modelId.toLowerCase());
-                if (price) {
-                    costUsd +=
-                        (freshInput / 1_000_000) * price.inputPerMTok +
-                            (cachedInput / 1_000_000) * price.cacheReadPerMTok +
-                            (modelOutput / 1_000_000) * price.outputPerMTok;
-                }
-                else {
-                    hasCompletePricing = false;
-                }
-            }
-            if (!sawTokens)
-                return null;
-            return {
-                nonCachedInputTokens,
-                cachedInputTokens,
-                cacheCreationTokens: 0,
-                outputTokens,
-                reasoningTokens: reasoningTokens || undefined,
-                costUsd: hasCompletePricing ? costUsd : undefined,
-            };
-        }
-    }
-    return null;
-}
-// Issue #347 — extract agent identity from the fraim_connect tool call.
-// Both hosts pass `agent: { name, model }` in the call's arguments.
-function parseAgentIdentitySignal(line) {
-    if (!line.includes('fraim_connect'))
-        return null;
-    let parsed;
-    try {
-        parsed = JSON.parse(line);
-    }
-    catch {
-        return null;
-    }
-    if (typeof parsed !== 'object' || parsed === null)
-        return null;
-    const obj = parsed;
-    // Codex shape.
-    if ((obj.type === 'item.started' || obj.type === 'item.completed') && typeof obj.item === 'object' && obj.item !== null) {
-        const item = obj.item;
-        if (item.type === 'mcp_tool_call' && item.tool === 'fraim_connect') {
-            return readAgentFromArgs(item.arguments);
-        }
-    }
-    // Claude Code shape.
-    const candidates = [obj];
-    if (typeof obj.message === 'object' && obj.message !== null) {
-        const msg = obj.message;
-        if (Array.isArray(msg.content))
-            candidates.push(...msg.content);
-    }
-    for (const candidate of candidates) {
-        if (typeof candidate !== 'object' || candidate === null)
-            continue;
-        const c = candidate;
-        if (c.type !== 'tool_use' && c.type !== 'function_call')
-            continue;
-        const name = typeof c.name === 'string' ? c.name : '';
-        if (!name.endsWith('fraim_connect'))
-            continue;
-        const sig = readAgentFromArgs((c.input || c.arguments));
-        if (sig)
-            return sig;
-    }
-    return null;
-}
-function readAgentFromArgs(args) {
-    if (!args || typeof args.agent !== 'object' || args.agent === null)
-        return null;
-    const agent = args.agent;
-    const agentName = typeof agent.name === 'string' ? agent.name : null;
-    const agentModel = typeof agent.model === 'string' ? agent.model : null;
-    if (!agentName || !agentModel)
-        return null;
-    return { agentName, agentModel };
-}
-function isGetFraimJobTool(toolName) {
-    return toolName === 'get_fraim_job' ||
-        toolName === 'mcp__fraim__get_fraim_job' ||
-        toolName.endsWith('get_fraim_job');
-}
-function readFraimJobFromArgs(rawArgs) {
-    const args = normalizeToolArgs(rawArgs);
-    if (!args)
-        return null;
-    const rawJob = stringValue(args.job) ||
-        stringValue(args.jobName) ||
-        stringValue(args.job_id) ||
-        stringValue(args.name);
-    const jobId = rawJob.trim().toLowerCase();
-    if (!jobId)
-        return null;
-    return { jobId, source: 'get_fraim_job' };
-}
-function normalizeToolArgs(rawArgs) {
-    if (rawArgs && typeof rawArgs === 'object' && !Array.isArray(rawArgs)) {
-        return rawArgs;
-    }
-    if (typeof rawArgs !== 'string' || rawArgs.trim().length === 0)
-        return null;
-    try {
-        const parsed = JSON.parse(rawArgs);
-        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
-            return parsed;
-        }
-    }
-    catch {
-        return null;
-    }
-    return null;
-}
-function numberOrNull(v) {
-    return typeof v === 'number' && Number.isFinite(v) ? v : null;
-}
-function extractSignalFromArgs(args) {
-    if (!args)
-        return null;
-    const phaseId = typeof args.currentPhase === 'string' ? args.currentPhase : null;
-    const rawStatus = typeof args.status === 'string' ? args.status : null;
-    if (!phaseId || !rawStatus)
-        return null;
-    const phaseStatus = ['starting', 'complete', 'incomplete', 'failure'].includes(rawStatus)
-        ? rawStatus
-        : 'starting';
-    const findings = args.findings;
-    const findingsText = findings && typeof findings.summary === 'string' ? findings.summary : undefined;
-    const discriminant = typeof args.runDiscriminant === 'string' ? args.runDiscriminant : undefined;
-    const jobName = typeof args.jobName === 'string' ? args.jobName : undefined;
-    const jobId = typeof args.jobId === 'string' ? args.jobId : undefined;
-    const reviewHandoff = extractReviewHandoffFromArgs(args);
-    const delegationLedger = extractDelegationLedgerFromArgs(args);
-    return {
-        phaseId,
-        phaseStatus,
-        findingsText,
-        discriminant,
-        jobName,
-        jobId,
-        ...(reviewHandoff ? { reviewHandoff } : {}),
-        ...(delegationLedger ? { delegationLedger } : {}),
-    };
-}
-function extractDelegationLedgerFromArgs(args) {
-    const direct = readDelegationLedgerCandidate(args.delegationGraph) ||
-        readDelegationLedgerCandidate(args.delegationLedger) ||
-        readDelegationLedgerCandidate(args.delegation_ledger);
-    if (direct)
-        return direct;
-    const evidence = args.evidence;
-    if (!evidence || typeof evidence !== 'object' || Array.isArray(evidence))
-        return null;
-    const e = evidence;
-    const nested = readDelegationLedgerCandidate(e.delegationGraph) ||
-        readDelegationLedgerCandidate(e.delegationLedger) ||
-        readDelegationLedgerCandidate(e.delegation_ledger);
-    if (nested)
-        return nested;
-    const objective = stringValue(e.goal) || stringValue(e.objective) || stringValue(e.parentObjective) || stringValue(args.jobName) || 'Delegated manager objective';
-    return ledgerFromExecutionPlan(e.execution_plan, objective) || ledgerFromApprovedPlan(e.approved_plan, objective);
-}
-function readDelegationLedgerCandidate(value) {
-    let candidate = value;
-    if (typeof candidate === 'string') {
-        try {
-            candidate = JSON.parse(candidate);
-        }
-        catch {
-            return null;
-        }
-    }
-    if (!candidate || typeof candidate !== 'object' || Array.isArray(candidate))
-        return null;
-    const obj = candidate;
-    const rawJobs = Array.isArray(obj.jobs) ? obj.jobs : Array.isArray(obj.tasks) ? obj.tasks : [];
-    if (obj.delegationRequired !== true || !rawJobs.length)
-        return null;
-    const objective = stringValue(obj.objective) || 'Delegated manager objective';
-    const tasks = rawJobs.map((task, index) => normalizeDelegationTaskCandidate(task, index)).filter(Boolean);
-    if (!tasks.length)
-        return null;
-    return {
-        delegationRequired: true,
-        objective,
-        orchestratorPersonaKey: stringValue(obj.orchestratorPersonaKey) || 'mandy',
-        latestSummary: stringValue(obj.latestSummary) || undefined,
-        tasks,
-    };
-}
-function ledgerFromExecutionPlan(value, objective) {
-    if (!value || typeof value !== 'object' || Array.isArray(value))
-        return null;
-    const plan = value;
-    const tasks = [];
-    for (const [groupKey, groupValue] of Object.entries(plan)) {
-        if (!Array.isArray(groupValue))
-            continue;
-        for (const rawTask of groupValue) {
-            const task = normalizeExecutionPlanTask(rawTask, tasks.length, groupKey);
-            if (task)
-                tasks.push(task);
-        }
-    }
-    if (!tasks.length)
-        return null;
-    return {
-        delegationRequired: true,
-        objective,
-        orchestratorPersonaKey: 'mandy',
-        latestSummary: stringValue(plan.dependencies) || undefined,
-        tasks,
-    };
-}
-function ledgerFromApprovedPlan(value, objective) {
-    if (!Array.isArray(value))
-        return null;
-    const tasks = value.map((entry, index) => normalizeApprovedPlanEntry(entry, index)).filter(Boolean);
-    if (!tasks.length)
-        return null;
-    return {
-        delegationRequired: true,
-        objective,
-        orchestratorPersonaKey: 'mandy',
-        tasks,
-    };
-}
-function normalizeExecutionPlanTask(value, index, groupKey) {
-    if (!value || typeof value !== 'object' || Array.isArray(value))
-        return null;
-    const obj = value;
-    const personaKey = normalizePersonaKey(stringValue(obj.persona) || stringValue(obj.personaKey));
-    const jobId = normalizeJobId(stringValue(obj.job) || stringValue(obj.jobId));
-    const scope = stringValue(obj.scope) || stringValue(obj.instructions) || stringValue(obj.summary);
-    const title = stringValue(obj.title) || humanizeJobId(jobId || `workstream-${index + 1}`);
-    if (!jobId)
-        return null;
-    return {
-        taskId: stringValue(obj.jobKey) || stringValue(obj.taskId) || uniqueTaskId(`${personaKey || 'job'}-${jobId}`, index),
-        title,
-        status: 'planned',
-        personaKey,
-        jobId,
-        dependsOn: dependenciesForGroup(groupKey),
-        reviewJobId: normalizeJobId(stringValue(obj.reviewJobId) || stringValue(obj.review?.jobId || '')),
-        reviewType: stringValue(obj.reviewType) || stringValue(obj.review?.type || '') || null,
-        instructions: scope || `Complete ${title} and return a concise deliverable to Mandy for review.`,
-    };
-}
-function normalizeApprovedPlanEntry(value, index) {
-    const text = stringValue(value);
-    if (!text)
-        return null;
-    const match = text.match(/^\s*(?:(\w+)\s*[/]\s*)?([a-z0-9][a-z0-9-]*)\s*:?\s*(.*)$/i);
-    if (!match)
-        return null;
-    const personaKey = normalizePersonaKey(match[1] || '');
-    const jobId = normalizeJobId(match[2]);
-    const scope = match[3]?.trim() || '';
-    if (!jobId)
-        return null;
-    const title = scope ? titleFromScope(scope, jobId) : humanizeJobId(jobId);
-    return {
-        taskId: uniqueTaskId(`${personaKey || 'job'}-${jobId}`, index),
-        title,
-        status: 'planned',
-        personaKey,
-        jobId,
-        dependsOn: [],
-        instructions: scope || `Complete ${title} and return a concise deliverable to Mandy for review.`,
-    };
-}
-function normalizeDelegationTaskCandidate(value, index) {
-    if (!value || typeof value !== 'object' || Array.isArray(value))
-        return null;
-    const obj = value;
-    const title = stringValue(obj.title) || humanizeJobId(stringValue(obj.jobId) || stringValue(obj.job) || `workstream-${index + 1}`);
-    const personaKey = normalizePersonaKey(stringValue(obj.personaKey) || stringValue(obj.persona));
-    const jobId = normalizeJobId(stringValue(obj.jobId) || stringValue(obj.job));
-    if (!title || !jobId)
-        return null;
-    const review = obj.review && typeof obj.review === 'object' && !Array.isArray(obj.review)
-        ? obj.review
-        : {};
-    return {
-        taskId: stringValue(obj.jobKey) || stringValue(obj.taskId) || uniqueTaskId(`${personaKey || 'job'}-${jobId}`, index),
-        title,
-        status: 'planned',
-        personaKey,
-        jobId,
-        reviewJobId: normalizeJobId(stringValue(obj.reviewJobId) || stringValue(review.jobId)),
-        reviewType: stringValue(obj.reviewType) || stringValue(review.type) || null,
-        instructions: stringValue(obj.instructions) || stringValue(obj.scope) || undefined,
-        latestSummary: stringValue(obj.latestSummary) || undefined,
-        dependsOn: Array.isArray(obj.dependsOn) ? obj.dependsOn.map(stringValue).filter(Boolean) : [],
-    };
-}
-function stringValue(value) {
-    return typeof value === 'string' ? value.trim() : '';
-}
-function normalizePersonaKey(value) {
-    const cleaned = value.trim().replace(/^\[|\]$/g, '').toLowerCase();
-    if (!cleaned)
-        return null;
-    const aliases = {
-        beza: 'beza',
-        pam: 'pam',
-        gautam: 'gautam',
-        swen: 'swen',
-        qasm: 'qasm',
-        huxley: 'huxley',
-        recardo: 'recardo',
-        hari: 'hari',
-        mandy: 'mandy',
-    };
-    return aliases[cleaned] || cleaned.replace(/[^a-z0-9-]/g, '');
-}
-function normalizeJobId(value) {
-    const cleaned = value.trim().toLowerCase().replace(/[^a-z0-9-]/g, '-').replace(/^-+|-+$/g, '');
-    return cleaned || null;
-}
-function uniqueTaskId(base, index) {
-    const cleaned = normalizeJobId(base) || `task-${index + 1}`;
-    return `${cleaned}-${index + 1}`;
-}
-function humanizeJobId(value) {
-    return value
-        .split(/[-_\s]+/)
-        .filter(Boolean)
-        .map((part) => `${part[0]?.toUpperCase() || ''}${part.slice(1)}`)
-        .join(' ') || 'Delegated workstream';
-}
-function titleFromScope(scope, jobId) {
-    const trimmed = scope.trim();
-    if (!trimmed)
-        return humanizeJobId(jobId);
-    const sentence = trimmed.split(/[.;]/)[0]?.trim();
-    if (!sentence)
-        return humanizeJobId(jobId);
-    return sentence.length <= 80 ? sentence : sentence.slice(0, 77).trimEnd() + '...';
-}
-function dependenciesForGroup(groupKey) {
-    const match = groupKey.match(/group[_-\s]*(\d+)/i);
-    if (!match)
-        return [];
-    const group = Number(match[1]);
-    if (!Number.isFinite(group) || group <= 1)
-        return [];
-    return [`group-${group - 1}`];
-}
-function extractReviewHandoffFromArgs(args) {
-    const direct = readReviewHandoffCandidate(args.reviewHandoff);
-    if (direct)
-        return direct;
-    const evidence = args.evidence;
-    if (evidence && typeof evidence === 'object') {
-        return readReviewHandoffCandidate(evidence.reviewHandoff);
-    }
-    return null;
-}
-function readReviewHandoffCandidate(value) {
-    let candidate = value;
-    if (typeof candidate === 'string') {
-        try {
-            candidate = JSON.parse(candidate);
-        }
-        catch {
-            return null;
-        }
-    }
-    if (!candidate || typeof candidate !== 'object' || Array.isArray(candidate))
-        return null;
-    const obj = candidate;
-    if (typeof obj.reviewRequired !== 'boolean')
-        return null;
-    const artifacts = Array.isArray(obj.artifacts)
-        ? obj.artifacts.filter((artifact) => artifact && typeof artifact === 'object')
-        : [];
-    return {
-        reviewRequired: obj.reviewRequired,
-        reviewTarget: obj.reviewTarget && typeof obj.reviewTarget === 'object'
-            ? obj.reviewTarget
-            : null,
-        artifacts,
-        ...(typeof obj.summary === 'string' ? { summary: obj.summary } : {}),
-        ...(typeof obj.feedbackMode === 'string' ? { feedbackMode: obj.feedbackMode } : {}),
-    };
-}
-const EMPLOYEE_LABELS = {
-    codex: 'Codex',
-    claude: 'Claude Code',
-    gemini: 'Gemini CLI',
-    copilot: 'GitHub Copilot CLI',
-};
-// GitHub Copilot CLI binary name after `npm install -g @github/copilot`.
-// The @github/copilot package installs a binary named `copilot` on PATH.
-// Note: the package name is @github/copilot (NOT @github/copilot-cli which
-// does not exist on npm). The binary is `copilot` (NOT `github-copilot-cli`).
-const COPILOT_BINARY = 'copilot';
-const executableName = (command) => command;
-function quoteWindowsArg(value) {
-    if (value.length === 0) {
-        return '""';
-    }
-    return `"${value.replace(/(\\*)"/g, '$1$1\\"').replace(/(\\+)$/g, '$1$1')}"`;
-}
-function escapeWindowsArg(value) {
-    return /[\s"]/u.test(value) ? quoteWindowsArg(value) : value;
-}
-function resolveHostInvocation(plan) {
-    if (process.platform !== 'win32') {
-        return plan;
-    }
-    const [command, ...args] = [plan.command, ...plan.args];
-    return {
-        command: 'cmd.exe',
-        args: ['/d', '/s', '/c', [command, ...args.map(escapeWindowsArg)].join(' ')],
-    };
-}
-const availableByVersionProbe = (command) => {
-    const invocation = resolveHostInvocation({ command, args: ['--version'] });
-    const result = (0, child_process_1.spawnSync)(invocation.command, invocation.args, {
-        encoding: 'utf8',
-        env: { ...process.env, PATH: (0, managed_agent_paths_1.buildPathWithManagedAgentBins)(process.env.PATH) },
-    });
-    return result.status === 0;
-};
-// Resolve the binary name for each agent tool.
-function agentBinaryName(id) {
-    if (id === 'copilot')
-        return COPILOT_BINARY;
-    return executableName(id);
-}
-function detectEmployees() {
-    return Object.keys(EMPLOYEE_LABELS).map((id) => {
-        const available = availableByVersionProbe(agentBinaryName(id));
-        return {
-            id,
-            label: EMPLOYEE_LABELS[id],
-            available,
-            detail: available ? 'Installed and ready on this machine.' : 'CLI not detected on this machine.',
-            supportsRaw: supportsDirectPath(id),
-        };
-    });
-}
-function parseFraimInvocation(message) {
-    const trimmed = message.trim();
-    if (!trimmed)
-        return null;
-    const match = trimmed.match(/^[$/@]fraim(?:\s+(\S+))?\s*([\s\S]*)$/);
-    if (!match)
-        return null;
-    return {
-        jobId: match[1] || null,
-        remainder: (match[2] || '').trim(),
-    };
-}
-// Rewrite UI-facing /fraim or $fraim invocations into direct MCP tool
-// instructions for headless hosts. The Hub still shows the familiar
-// invocation in the manager timeline, but the actual CLI child process
-// receives an explicit instruction that works in non-interactive mode.
-//
-// Important: continue turns must preserve the named FRAIM job. Manager
-// coaching such as `/fraim follow-your-mentor` is not generic advice for
-// the active employee job; it is a new FRAIM workflow that must survive
-// the headless transform.
-function transformHeadlessFraimMessage(message, kind) {
-    const parsed = parseFraimInvocation(message);
-    if (!parsed)
-        return message;
-    if (!parsed.jobId) {
-        // Issue #732: single-source the same-job continue wording via
-        // buildSameJobContinueMessage so the server (prepareContinueMessage) and
-        // this headless transform stay in lock-step.
-        if (kind === 'continue') {
-            return (0, manager_turns_1.buildSameJobContinueMessage)(parsed.remainder);
-        }
-        return message;
-    }
-    const parts = [
-        `Call the get_fraim_job MCP tool with job "${parsed.jobId}" to get the full job instructions, then follow them exactly.`,
-    ];
-    if (kind === 'continue') {
-        parts.push('\n\nThis is a manager follow-up inside an existing FRAIM session. Continue by running that named FRAIM job, not by freeforming or by resuming a different FRAIM workflow.');
-    }
-    if (parsed.remainder) {
-        parts.push(`\n\nManager instructions: ${parsed.remainder}`);
-    }
-    const storageGuard = machineLevelStorageGuard(parsed.jobId);
-    if (storageGuard) {
-        parts.push(`\n\n${storageGuard}`);
-    }
-    return parts.join('');
-}
-function machineLevelStorageGuard(jobId) {
-    const normalized = jobId.toLowerCase();
-    const userFraim = path_1.default.join(os_1.default.homedir(), '.fraim');
-    if (normalized === 'manager-agreements') {
-        const managerContext = path_1.default.join(userFraim, 'personalized-employee', 'context', 'manager_context.md');
-        const managerRules = path_1.default.join(userFraim, 'personalized-employee', 'rules', 'manager_rules.md');
-        return [
-            'Storage scope guardrail:',
-            '- Manager agreements artifacts are machine-level, not repo-level.',
-            `- Required write targets: ${managerContext} and ${managerRules}.`,
-            '- Keep the split crisp: manager_context.md is what is true about the manager; manager_rules.md is how employees must behave because of those truths.',
-            '- Do not write, validate, call canonical, commit, or open a PR for repo-local fraim/personalized-employee/context/manager_context.md or fraim/personalized-employee/rules/manager_rules.md as substitutes.',
-            '- If the exact machine-level paths cannot be written, fail the phase and report the concrete filesystem error.',
-        ].join('\n');
-    }
-    // organization-onboarding intentionally has no guardrail here: the job's
-    // submit phase is backend-aware and owns the write-path procedure (git PR /
-    // cloud publish / machine-level fallback), so duplicating it in runtime
-    // prompt text would be redundant (issue #563 review).
-    return null;
-}
-// If ~/.gemini/settings.json has a wrong/test FRAIM_API_KEY, patch it with the
-// real key from ~/.fraim/config.json so the FRAIM MCP server can authenticate.
-// This self-heals when a test run accidentally writes a test key to global config.
-function ensureGeminiApiKey() {
-    try {
-        const home = os_1.default.homedir();
-        const fraimConfigPath = path_1.default.join(home, '.fraim', 'config.json');
-        const geminiSettingsPath = path_1.default.join(home, '.gemini', 'settings.json');
-        if (!fs_1.default.existsSync(fraimConfigPath) || !fs_1.default.existsSync(geminiSettingsPath))
-            return;
-        const fraim = JSON.parse(fs_1.default.readFileSync(fraimConfigPath, 'utf8'));
-        const realKey = fraim.apiKey;
-        if (!realKey)
-            return;
-        const settings = JSON.parse(fs_1.default.readFileSync(geminiSettingsPath, 'utf8'));
-        const fraimServer = settings?.mcpServers?.fraim;
-        if (!fraimServer?.env)
-            return;
-        if (fraimServer.env.FRAIM_API_KEY !== realKey) {
-            fraimServer.env.FRAIM_API_KEY = realKey;
-            fs_1.default.writeFileSync(geminiSettingsPath, JSON.stringify(settings, null, 2) + '\n', 'utf8');
-        }
-    }
-    catch { /* best-effort: never crash the Hub over a config patch */ }
-}
-// Build (idempotently) a Hub-managed CODEX_HOME so `codex exec` drives the shared
-// browser. config.toml = user's real config + a playwright→cdp override; auth is
-// copied; the sessions dir is junctioned to the real one so resume + new sessions
-// keep working. The user's real ~/.codex is never modified. Returns the temp home
-// path, or null on any failure (caller then leaves Codex on its own browser).
-function prepareCodexBrowserHome(cdp, env = process.env) {
-    try {
-        const real = env['CODEX_HOME'] || path_1.default.join(os_1.default.homedir(), '.codex');
-        // Derive the temp-home path from the real home so different real homes (e.g.
-        // a test's fake home vs the user's ~/.codex) never share — and pollute — one
-        // temp home (a stale sessions junction breaks resume).
-        const homeKey = (0, crypto_1.createHash)('sha1').update(real).digest('hex').slice(0, 12);
-        const home = path_1.default.join(os_1.default.tmpdir(), 'fraim-codex-home-' + homeKey);
-        fs_1.default.mkdirSync(home, { recursive: true });
-        // config.toml = real config with the playwright server redirected to the CDP endpoint.
-        const realConfig = path_1.default.join(real, 'config.toml');
-        const existing = fs_1.default.existsSync(realConfig) ? fs_1.default.readFileSync(realConfig, 'utf8') : '';
-        const pwBlock = `[mcp_servers.playwright]\ncommand = "npx"\nargs = ["-y", "@playwright/mcp@latest", "--cdp-endpoint", "${cdp}"]\n`;
-        const merged = (0, mcp_config_generator_1.mergeTomlMCPServers)(existing, pwBlock, ['playwright']).content;
-        fs_1.default.writeFileSync(path_1.default.join(home, 'config.toml'), merged, 'utf8');
-        // Auth + the session index (so resume can find existing rollouts by thread id).
-        for (const f of ['auth.json', 'session_index.jsonl', 'history.jsonl']) {
-            const src = path_1.default.join(real, f);
-            if (fs_1.default.existsSync(src)) {
-                try {
-                    fs_1.default.copyFileSync(src, path_1.default.join(home, f));
-                }
-                catch { /* best effort */ }
-            }
-        }
-        // Sessions: junction temp/sessions -> real/sessions so resume (existing sessions)
-        // works and new sessions persist alongside the user's. Re-point if the existing
-        // junction targets the wrong dir.
-        const realSessions = path_1.default.join(real, 'sessions');
-        fs_1.default.mkdirSync(realSessions, { recursive: true });
-        const tmpSessions = path_1.default.join(home, 'sessions');
-        try {
-            let ok = false;
-            if (fs_1.default.existsSync(tmpSessions)) {
-                const st = fs_1.default.lstatSync(tmpSessions);
-                if (st.isSymbolicLink()) {
-                    ok = path_1.default.resolve(fs_1.default.readlinkSync(tmpSessions)) === path_1.default.resolve(realSessions);
-                    if (!ok)
-                        fs_1.default.unlinkSync(tmpSessions); // wrong target → drop the junction (not the target)
-                }
-            }
-            if (!ok && !fs_1.default.existsSync(tmpSessions))
-                fs_1.default.symlinkSync(realSessions, tmpSessions, 'junction');
-        }
-        catch { /* junction best-effort; new runs still work without resuming old sessions */ }
-        return home;
-    }
-    catch {
-        return null;
-    }
-}
-function sharedBrowserHostConfig(hostId, env = process.env) {
-    const cdp = env['FRAIM_BROWSER_CDP_ENDPOINT'];
-    if (!cdp)
-        return { args: [] };
-    const pwArgs = ['-y', '@playwright/mcp@latest', '--cdp-endpoint', cdp];
-    const mcpServers = { playwright: { command: 'npx', args: pwArgs } };
-    if (hostId === 'claude') {
-        // Claude Code's --mcp-config takes a FILE path (inline JSON is rejected by the
-        // CLI's schema). Write the ephemeral config to a temp file and pass its path —
-        // per-invocation; never touches the user's persisted ~/.claude.json.
-        const file = path_1.default.join(os_1.default.tmpdir(), 'fraim-shared-browser-mcp.json');
-        try {
-            fs_1.default.writeFileSync(file, JSON.stringify({ mcpServers }), 'utf8');
-        }
-        catch {
-            return { args: [] };
-        }
-        return { args: ['--mcp-config', file] };
-    }
-    if (hostId === 'codex') {
-        // Codex `exec` ignores -c overrides of mcp_servers, so we point CODEX_HOME at a
-        // Hub-managed temp dir whose config.toml merges the user's real config with a
-        // playwright→cdp override. Auth is copied and the sessions dir is junctioned to
-        // ~/.codex/sessions, so resume (incl. existing sessions) still works and new
-        // sessions persist there. The user's real ~/.codex/config.toml is never touched.
-        const home = prepareCodexBrowserHome(cdp, env);
-        return home ? { args: [], env: { CODEX_HOME: home } } : { args: [] };
-    }
-    if (hostId === 'gemini') {
-        // Gemini CLI has no per-invocation MCP flag, but it loads a SYSTEM settings
-        // file from GEMINI_CLI_SYSTEM_SETTINGS_PATH which overrides the same-named
-        // server. Point it at an ephemeral temp file — per-invocation via env; the
-        // user's ~/.gemini/settings.json is untouched.
-        const file = path_1.default.join(os_1.default.tmpdir(), 'fraim-gemini-browser-settings.json');
-        try {
-            fs_1.default.writeFileSync(file, JSON.stringify({ mcpServers }), 'utf8');
-        }
-        catch {
-            return { args: [] };
-        }
-        return { args: [], env: { GEMINI_CLI_SYSTEM_SETTINGS_PATH: file } };
-    }
-    if (hostId === 'copilot') {
-        // GitHub Copilot CLI does not yet publish a documented per-invocation
-        // settings-file env var analogous to GEMINI_CLI_SYSTEM_SETTINGS_PATH.
-        // If one is discovered in a future release, write the ephemeral file here
-        // and return { args: [], env: { <COPILOT_SETTINGS_ENV_VAR>: file } }.
-        // Until then, return the Option-B no-op per spec R5.2 — the Hub's
-        // start-payload builder will inject a browser-guidance note instead.
-        return { args: [] };
-    }
-    return { args: [] };
-}
-function buildStartPlan(hostId, message, sessionId) {
-    if (hostId === 'codex') {
-        const browser = sharedBrowserHostConfig('codex');
-        return {
-            command: executableName('codex'),
-            args: ['exec', '--json', '--skip-git-repo-check', '--dangerously-bypass-approvals-and-sandbox', ...browser.args],
-            stdin: transformHeadlessFraimMessage(message, 'start'),
-            env: browser.env,
-        };
-    }
-    if (hostId === 'gemini') {
-        ensureGeminiApiKey();
-        const prompt = transformHeadlessFraimMessage(message, 'start');
-        const browser = sharedBrowserHostConfig('gemini');
-        return {
-            command: executableName('gemini'),
-            // Gemini CLI creates the durable session id itself. Hub captures
-            // that real id from Gemini's chat log after start; pre-seeded UUIDs
-            // are not reliably accepted by `gemini --resume`.
-            args: ['--yolo', '--skip-trust', '-p', 'stdin', ...browser.args],
-            stdin: prompt,
-            env: browser.env,
-        };
-    }
-    if (hostId === 'copilot') {
-        // GitHub Copilot CLI headless invocation.
-        // --yolo auto-approves all tool permissions (analogous to
-        // --dangerously-skip-permissions for Claude Code). The task is provided
-        // via stdin; -p/--prompt requires inline text which is cumbersome for
-        // multi-line FRAIM instructions. The session id is self-assigned by the
-        // binary on first run; Hub captures it from the stream output
-        // (parseHostLine 'copilot' branch).
-        const browser = sharedBrowserHostConfig('copilot');
-        return {
-            command: COPILOT_BINARY,
-            args: ['--yolo', ...browser.args],
-            stdin: transformHeadlessFraimMessage(message, 'start'),
-            env: browser.env,
-        };
-    }
-    const browser = sharedBrowserHostConfig('claude');
-    return {
-        command: executableName('claude'),
-        args: ['-p', '--verbose', '--output-format', 'stream-json', '--dangerously-skip-permissions', ...browser.args],
-        stdin: transformHeadlessFraimMessage(message, 'start'),
-        env: browser.env,
-    };
-}
-function buildContinuePlan(hostId, sessionId, message) {
-    if (hostId === 'codex') {
-        const browser = sharedBrowserHostConfig('codex');
-        return {
-            command: executableName('codex'),
-            args: ['exec', 'resume', '--json', '--skip-git-repo-check', '--dangerously-bypass-approvals-and-sandbox', sessionId, ...browser.args],
-            stdin: transformHeadlessFraimMessage(message, 'continue'),
-            env: browser.env,
-        };
-    }
-    if (hostId === 'gemini') {
-        ensureGeminiApiKey();
-        const prompt = transformHeadlessFraimMessage(message, 'continue');
-        const browser = sharedBrowserHostConfig('gemini');
-        return {
-            command: executableName('gemini'),
-            args: ['--resume', sessionId, '--yolo', '--skip-trust', '-p', 'stdin', ...browser.args],
-            stdin: prompt,
-            env: browser.env,
-        };
-    }
-    if (hostId === 'copilot') {
-        // Resume an existing GitHub Copilot CLI session.
-        // --resume <sessionId> accepts the session id returned on the first run.
-        const browser = sharedBrowserHostConfig('copilot');
-        return {
-            command: COPILOT_BINARY,
-            args: ['--yolo', '--resume', sessionId, ...browser.args],
-            stdin: transformHeadlessFraimMessage(message, 'continue'),
-            env: browser.env,
-        };
-    }
-    const browser = sharedBrowserHostConfig('claude');
-    return {
-        command: executableName('claude'),
-        args: ['-p', '--verbose', '--output-format', 'stream-json', '--dangerously-skip-permissions', '-r', sessionId, ...browser.args],
-        stdin: transformHeadlessFraimMessage(message, 'continue'),
-        env: browser.env,
-    };
-}
-// Issue #442: all agents support a direct-path invocation (no FRAIM, no
-// transformHeadlessFraimMessage). Claude uses --strict-mcp-config for isolation;
-// Codex and Gemini simply omit the FRAIM preamble and run raw.
-function supportsDirectPath(_hostId) {
-    return true;
-}
-// Empty MCP config for Direct runs. Always overwritten on each use so a
-// pre-existing file in tmp cannot inject MCP server definitions (SEC-A04).
-const EMPTY_MCP_CONFIG_PATH = path_1.default.join(os_1.default.tmpdir(), 'fraim-direct-empty-mcp.json');
-function ensureEmptyMcpConfig() {
-    fs_1.default.writeFileSync(EMPTY_MCP_CONFIG_PATH, '{"mcpServers":{}}', { encoding: 'utf8', mode: 0o600 });
-    return EMPTY_MCP_CONFIG_PATH;
-}
-// Issue #442: --append-system-prompt overrides CLAUDE.md instructions at the
-// system-prompt level (CLAUDE.md is prepended to the system prompt; appending
-// after it gives the Direct-mode directive precedence). --strict-mcp-config
-// blocks MCP servers (FRAIM excluded). Both are required:
-// --append-system-prompt alone doesn't block MCP tools; --strict-mcp-config
-// alone doesn't suppress CLAUDE.md's "scan job stubs" instruction.
-const DIRECT_SYSTEM_PROMPT_OVERRIDE = 'DO NOT USE FRAIM FOR THIS SESSION. ' +
-    'You are operating in Direct mode for an A/B comparison — no FRAIM, no phases, no seekMentoring, ' +
-    'no job stubs, no structured workflow. Ignore all CLAUDE.md instructions to scan fraim/ or call get_fraim_job. ' +
-    'Answer the user directly and conversationally.';
-const DIRECT_PREAMBLE = 'DO NOT USE FRAIM FOR THIS SESSION. No phases, no seekMentoring, no structured workflow.\n\n';
-// Issue #442: builds a CLI plan for the Direct (B) side of an A/B run.
-// All agents supported: Codex and Gemini run raw (no FRAIM preamble);
-// Claude uses --strict-mcp-config + --append-system-prompt for full isolation.
-function buildDirectStartPlan(hostId, message, sessionId) {
-    if (hostId === 'codex') {
-        return {
-            command: executableName('codex'),
-            args: ['exec', '--json', '--skip-git-repo-check', '--dangerously-bypass-approvals-and-sandbox'],
-            stdin: DIRECT_PREAMBLE + message,
-        };
-    }
-    if (hostId === 'gemini') {
-        ensureGeminiApiKey();
-        return {
-            command: executableName('gemini'),
-            args: ['--yolo', '--skip-trust', '-p', 'stdin'],
-            stdin: DIRECT_PREAMBLE + message,
-        };
-    }
-    if (hostId === 'copilot') {
-        // Direct (A/B) mode for Copilot: headless, no FRAIM MCP wiring.
-        return {
-            command: COPILOT_BINARY,
-            args: ['--yolo'],
-            stdin: DIRECT_PREAMBLE + message,
-        };
-    }
-    return {
-        command: executableName('claude'),
-        args: [
-            '-p',
-            '--verbose',
-            '--output-format', 'stream-json',
-            '--dangerously-skip-permissions',
-            '--strict-mcp-config',
-            '--mcp-config', ensureEmptyMcpConfig(),
-            '--append-system-prompt', DIRECT_SYSTEM_PROMPT_OVERRIDE,
-        ],
-        stdin: DIRECT_PREAMBLE + message,
-    };
-}
-function buildDirectContinuePlan(hostId, sessionId, message) {
-    if (hostId === 'codex') {
-        return {
-            command: executableName('codex'),
-            args: ['exec', 'resume', '--json', '--skip-git-repo-check', '--dangerously-bypass-approvals-and-sandbox', sessionId],
-            stdin: DIRECT_PREAMBLE + message,
-        };
-    }
-    if (hostId === 'gemini') {
-        ensureGeminiApiKey();
-        return {
-            command: executableName('gemini'),
-            args: ['--resume', sessionId, '--yolo', '--skip-trust', '-p', 'stdin'],
-            stdin: DIRECT_PREAMBLE + message,
-        };
-    }
-    if (hostId === 'copilot') {
-        // Direct continue mode for Copilot: resume session, no FRAIM MCP wiring.
-        return {
-            command: COPILOT_BINARY,
-            args: ['--yolo', '--resume', sessionId],
-            stdin: DIRECT_PREAMBLE + message,
-        };
-    }
-    return {
-        command: executableName('claude'),
-        args: [
-            '-p',
-            '--verbose',
-            '--output-format', 'stream-json',
-            '--dangerously-skip-permissions',
-            '--resume', sessionId,
-            '--strict-mcp-config',
-            '--mcp-config', ensureEmptyMcpConfig(),
-        ],
-        stdin: message,
-    };
-}
-function parseHostLine(hostId, line) {
-    const trimmed = line.trim();
-    if (!trimmed)
-        return {};
-    // Scan every line for structured signals the Hub UI cares about:
-    // seekMentoring (tracker), get_fraim_job (job identity promotion),
-    // turn-level usage (totals), and fraim_connect agent identity
-    // (cost lookup when the host doesn't emit it).
-    const seekMentoring = parseSeekMentoringSignal(trimmed);
-    const fraimJob = parseFraimJobLoadSignal(trimmed);
-    const usage = parseUsageSignal(trimmed);
-    const agentIdentity = parseAgentIdentitySignal(trimmed);
-    const withSignal = (event) => {
-        if (!seekMentoring && !fraimJob && !usage && !agentIdentity)
-            return event;
-        return {
-            ...event,
-            ...(seekMentoring ? { seekMentoring } : {}),
-            ...(fraimJob ? { fraimJob } : {}),
-            ...(usage ? { usage } : {}),
-            ...(agentIdentity ? { agentIdentity } : {}),
-        };
-    };
-    if (hostId === 'codex') {
-        try {
-            const parsed = JSON.parse(trimmed);
-            if (parsed.type === 'thread.started' && parsed.thread_id) {
-                return withSignal({ sessionId: parsed.thread_id, raw: trimmed });
-            }
-            if (parsed.type === 'item.completed' && parsed.item?.type === 'agent_message' && parsed.item.text) {
-                return withSignal({ message: parsed.item.text, raw: trimmed });
-            }
-            // turn_context carries the active model — capture it as agentIdentity so
-            // direct runs (which never call fraim_connect) can still compute cost.
-            if (parsed.type === 'turn_context' && typeof parsed.payload?.model === 'string') {
-                return withSignal({ raw: trimmed, agentIdentity: { agentName: 'codex', agentModel: parsed.payload.model } });
-            }
-            return withSignal({ raw: trimmed });
-        }
-        catch {
-            return withSignal({ raw: trimmed });
-        }
-    }
-    // Gemini CLI output: if the line is valid JSON, apply signal scanning and
-    // capture the raw line. Plain-text output (non-JSON) is captured as a raw
-    // message so it still surfaces in the Hub timeline.
-    if (hostId === 'gemini') {
-        try {
-            const parsed = JSON.parse(trimmed);
-            if (typeof parsed.session_id === 'string' && parsed.session_id.trim().length > 0) {
-                return withSignal({ sessionId: parsed.session_id.trim(), raw: trimmed });
-            }
-            return withSignal({ raw: trimmed });
-        }
-        catch {
-            if (isGeminiCliNotice(trimmed)) {
-                return withSignal({ raw: trimmed });
-            }
-            const message = scrubGeminiAssistantLine(trimmed);
-            return withSignal(message ? { message, raw: trimmed } : { raw: trimmed });
-        }
-    }
-    // GitHub Copilot CLI output: JSON stream where each event carries a `type`
-    // field. Known event shapes (from the agentic CLI stream):
-    //   { "type": "session.started", "session_id": "..." }  — session id
-    //   { "type": "message", "role": "assistant", "content": "..." }  — reply text
-    //   { "type": "turn.completed", "usage": { ... } }  — token usage (same shape as Codex)
-    // For any JSON event not matching the above, signal scanning (seekMentoring,
-    // agent identity) still runs because withSignal is applied to every parsed result.
-    // Non-JSON lines from Copilot are treated as plain-text employee messages.
-    if (hostId === 'copilot') {
-        try {
-            const parsed = JSON.parse(trimmed);
-            if (parsed.type === 'session.started' && typeof parsed.session_id === 'string' && parsed.session_id.length > 0) {
-                return withSignal({ sessionId: parsed.session_id, raw: trimmed });
-            }
-            if (parsed.type === 'message' && parsed.role === 'assistant' && typeof parsed.content === 'string') {
-                return withSignal({ message: parsed.content, raw: trimmed });
-            }
-            // All other JSON events: apply signal scanning and surface as raw.
-            return withSignal({ raw: trimmed });
-        }
-        catch {
-            // Non-JSON line from Copilot: treat as a plain-text employee message,
-            // same pattern as Gemini CLI's non-JSON output.
-            return withSignal({ message: trimmed, raw: trimmed });
-        }
-    }
-    try {
-        const parsed = JSON.parse(trimmed);
-        if (parsed.type === 'system' && parsed.session_id) {
-            return withSignal({ sessionId: parsed.session_id, raw: trimmed });
-        }
-        if (parsed.type === 'assistant') {
-            const text = parsed.message?.content?.find((entry) => entry.type === 'text')?.text;
-            if (text) {
-                return withSignal({ message: text, sessionId: parsed.session_id, raw: trimmed });
-            }
-        }
-        if (parsed.type === 'result') {
-            // Don't emit message — the 'assistant' event already captured the turn text.
-            // result carries usage data (parsed by parseUsageSignal above via withSignal).
-            return withSignal({ sessionId: parsed.session_id, raw: trimmed });
-        }
-        return withSignal({ raw: trimmed });
-    }
-    catch {
-        return withSignal({ raw: trimmed });
-    }
-}
-function isGeminiCliNotice(line) {
-    return line === 'YOLO mode is enabled. All tool calls will be automatically approved.' ||
-        line === 'Ripgrep is not available. Falling back to GrepTool.';
-}
-function scrubGeminiAssistantLine(line) {
-    const scrubbed = line.replace(/\[Thought:\s*true\]\s*/gi, '').trim();
-    return scrubbed.length > 0 ? scrubbed : null;
-}
-function wireHostProcess(hostId, child, handlers) {
-    const wire = (buffer, channel) => {
-        let pending = '';
-        buffer.on('data', (chunk) => {
-            pending += chunk.toString();
-            const lines = pending.split(/\r?\n/);
-            pending = lines.pop() || '';
-            for (const line of lines) {
-                const parsed = parseHostLine(hostId, line);
-                if (parsed.message || parsed.sessionId || parsed.raw) {
-                    handlers.onEvent(parsed, channel);
-                }
-            }
-        });
-        buffer.on('end', () => {
-            if (pending.trim().length > 0) {
-                const parsed = parseHostLine(hostId, pending);
-                if (parsed.message || parsed.sessionId || parsed.raw) {
-                    handlers.onEvent(parsed, channel);
-                }
-            }
-        });
-    };
-    wire(child.stdout, 'stdout');
-    wire(child.stderr, 'stderr');
-    child.on('close', (code) => handlers.onExit(code));
-    return child;
-}
-function spawnHostProcess(hostId, plan, projectPath, handlers) {
-    const invocation = resolveHostInvocation(plan);
-    const startedAtMs = Date.now();
-    const child = (0, child_process_1.spawn)(invocation.command, invocation.args, {
-        cwd: projectPath,
-        stdio: ['pipe', 'pipe', 'pipe'],
-        env: plan.env ? { ...process.env, ...plan.env } : process.env,
-    });
-    if (typeof plan.stdin === 'string') {
-        child.stdin.write(plan.stdin);
-    }
-    child.stdin.end();
-    if (typeof plan.stdin === 'string' && !plan.args.includes('--resume')) {
-        child.once('close', () => {
-            const sessionId = discoverSessionIdAfterStart(hostId, projectPath, plan.stdin || '', startedAtMs);
-            if (sessionId) {
-                handlers.onEvent({ sessionId, raw: `${hostId}-session:${sessionId}` }, 'system');
-            }
-        });
-    }
-    return wireHostProcess(hostId, child, handlers);
-}
-function discoverSessionIdAfterStart(hostId, projectPath, prompt, startedAtMs) {
-    if (hostId !== 'gemini')
-        return null;
-    return findGeminiSessionIdForPrompt(projectPath, prompt, startedAtMs);
-}
-function findGeminiSessionIdForPrompt(_projectPath, prompt, startedAtMs) {
-    const promptNeedle = normalizeGeminiPromptForMatch(prompt).slice(0, 160);
-    const records = readGeminiSessionRecords();
-    const recent = records
-        .filter((record) => record.updatedAtMs >= startedAtMs - 10_000)
-        .filter((record) => {
-        if (!promptNeedle)
-            return true;
-        const userText = normalizeGeminiPromptForMatch(record.userText);
-        return userText.includes(promptNeedle) || promptNeedle.includes(userText.slice(0, 80));
-    })
-        .sort((a, b) => b.updatedAtMs - a.updatedAtMs);
-    if (recent[0])
-        return recent[0].sessionId;
-    const fallback = records
-        .filter((record) => record.updatedAtMs >= startedAtMs - 10_000)
-        .sort((a, b) => b.updatedAtMs - a.updatedAtMs)[0];
-    return fallback?.sessionId || null;
-}
-function readGeminiSessionRecords() {
-    const root = path_1.default.join(os_1.default.homedir(), '.gemini', 'tmp');
-    if (!fs_1.default.existsSync(root))
-        return [];
-    const records = [];
-    for (const filePath of collectGeminiSessionFiles(root)) {
-        try {
-            const stat = fs_1.default.statSync(filePath);
-            const lines = fs_1.default.readFileSync(filePath, 'utf8').split(/\r?\n/).filter(Boolean);
-            const metadata = JSON.parse(lines[0] || '{}');
-            const sessionId = typeof metadata.sessionId === 'string' ? metadata.sessionId.trim() : '';
-            if (!sessionId)
-                continue;
-            const userText = lines
-                .slice(1, 8)
-                .map((line) => {
-                try {
-                    const entry = JSON.parse(line);
-                    if (entry.type !== 'user' || !Array.isArray(entry.content))
-                        return '';
-                    return entry.content.map((part) => typeof part.text === 'string' ? part.text : '').join('\n');
-                }
-                catch {
-                    return '';
-                }
-            })
-                .filter(Boolean)
-                .join('\n');
-            records.push({ sessionId, filePath, updatedAtMs: stat.mtimeMs, userText });
-        }
-        catch {
-            // Ignore malformed or concurrently-written session files.
-        }
-    }
-    return records;
-}
-function collectGeminiSessionFiles(root) {
-    const files = [];
-    const visit = (dir) => {
-        let entries;
-        try {
-            entries = fs_1.default.readdirSync(dir, { withFileTypes: true });
-        }
-        catch {
-            return;
-        }
-        for (const entry of entries) {
-            const fullPath = path_1.default.join(dir, entry.name);
-            if (entry.isDirectory()) {
-                visit(fullPath);
-            }
-            else if (/^session-.*\.jsonl$/i.test(entry.name)) {
-                files.push(fullPath);
-            }
-        }
-    };
-    visit(root);
-    return files;
-}
-function normalizeGeminiPromptForMatch(value) {
-    return String(value || '').replace(/\s+/g, ' ').trim();
-}
-class CliHostRuntime {
-    detectEmployees() {
-        return detectEmployees();
-    }
-    startRun(hostId, projectPath, message, handlers, sessionId) {
-        return spawnHostProcess(hostId, buildStartPlan(hostId, message, sessionId), projectPath, handlers);
-    }
-    continueRun(hostId, projectPath, sessionId, message, handlers) {
-        return spawnHostProcess(hostId, buildContinuePlan(hostId, sessionId, message), projectPath, handlers);
-    }
-    startDirectRun(hostId, message, projectPath, handlers, sessionId) {
-        return spawnHostProcess(hostId, buildDirectStartPlan(hostId, message, sessionId), projectPath, handlers);
-    }
-    continueDirectRun(hostId, sessionId, message, projectPath, handlers) {
-        return spawnHostProcess(hostId, buildDirectContinuePlan(hostId, sessionId, message), projectPath, handlers);
-    }
-}
-exports.CliHostRuntime = CliHostRuntime;
-class FakeHostRuntime {
-    constructor() {
-        this.employees = [
-            { id: 'codex', label: 'Codex', available: true, detail: 'Test double employee.', supportsRaw: true },
-            { id: 'claude', label: 'Claude Code', available: true, detail: 'Test double employee.', supportsRaw: true },
-            { id: 'gemini', label: 'Gemini CLI', available: true, detail: 'Test double employee.', supportsRaw: true },
-            { id: 'copilot', label: 'GitHub Copilot CLI', available: true, detail: 'Test double agent tool.', supportsRaw: true },
-        ];
-        // Remembered across turns like a resumed agent session: the job label from the
-        // start turn. Issue #732 — a same-job continue no longer carries a /fraim <job>
-        // invocation, so the fake falls back to this to stay job-aware on continue.
-        this.lastJobLabel = null;
-    }
-    detectEmployees() {
-        return this.employees;
-    }
-    startRun(hostId, _projectPath, message, handlers, _sessionId) {
-        this.lastStartMessage = message;
-        return this.fakeProcess(hostId, this.fakeEmployeeReply('start', message), handlers);
-    }
-    continueRun(hostId, _projectPath, sessionId, message, handlers) {
-        this.lastContinueMessage = message;
-        return this.fakeProcess(hostId, this.fakeEmployeeReply('continue', message), handlers);
-    }
-    startDirectRun(hostId, _message, _projectPath, handlers, _sessionId) {
-        return this.fakeProcess(hostId, 'Understood. Working directly on that now.', handlers);
-    }
-    continueDirectRun(hostId, _sessionId, _message, _projectPath, handlers) {
-        return this.fakeProcess(hostId, 'Got it. Continuing directly.', handlers);
-    }
-    fakeProcess(_hostId, text, handlers) {
-        handlers.onEvent({ sessionId: (0, crypto_1.randomUUID)() }, 'system');
-        handlers.onEvent({ message: text }, 'stdout');
-        setTimeout(() => handlers.onExit(0), 25);
-        return {
-            stdout: process.stdout,
-            stderr: process.stderr,
-            stdin: process.stdin,
-            kill: () => true,
-            on: () => ({}),
-            once: () => ({}),
-            emit: () => true,
-            addListener: () => ({}),
-            removeListener: () => ({}),
-            removeAllListeners: () => ({}),
-            setMaxListeners: () => ({}),
-            getMaxListeners: () => 0,
-            listeners: () => [],
-            rawListeners: () => [],
-            listenerCount: () => 0,
-            prependListener: () => ({}),
-            prependOnceListener: () => ({}),
-            eventNames: () => [],
-            pid: 0,
-            connected: false,
-            disconnect: () => undefined,
-            exitCode: 0,
-            killed: false,
-            signalCode: null,
-            spawnargs: [],
-            spawnfile: '',
-            stdio: [],
-            unref: () => undefined,
-            ref: () => undefined,
-        };
-    }
-    fakeEmployeeReply(kind, message) {
-        const parsed = parseFraimInvocation(message);
-        const parsedLabel = parsed?.jobId
-            ? parsed.jobId.split('-').map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join(' ')
-            : null;
-        if (parsedLabel)
-            this.lastJobLabel = parsedLabel;
-        const label = parsedLabel || (kind === 'continue' ? this.lastJobLabel : null);
-        if (kind === 'continue') {
-            return label
-                ? `Understood. I'm taking another pass with ${label}.`
-                : 'Understood. I am incorporating your coaching now.';
-        }
-        return label
-            ? `Understood. I'm starting ${label} now.`
-            : 'Understood. I am working on that now.';
-    }
-}
-exports.FakeHostRuntime = FakeHostRuntime;
-// Issue #347 — test-only host that lets a test inject seekMentoring
-// signals on a runId-by-runId basis. The Hub server treats it like any
-// HostRuntime; the test holds a reference and calls emitPhase() to
-// drive deterministic phase transitions. Outside tests, prefer
-// FakeHostRuntime (smaller surface, no seekMentoring).
-class ScriptedHostRuntime {
-    constructor() {
-        this.employees = [
-            { id: 'codex', label: 'Codex', available: true, detail: 'Scripted test double.', supportsRaw: true },
-            { id: 'claude', label: 'Claude Code', available: true, detail: 'Scripted test double.', supportsRaw: true },
-            { id: 'gemini', label: 'Gemini CLI', available: true, detail: 'Scripted test double.', supportsRaw: true },
-            { id: 'copilot', label: 'GitHub Copilot CLI', available: true, detail: 'Scripted test double.', supportsRaw: true },
-        ];
-        // Track each active run so the test can emit signals at it. The Hub
-        // passes the run id as the requested start session id in test/demo paths;
-        // real resume flows still use the host session id. Resolving by the
-        // supplied id first lets concurrent scripted runs receive targeted events.
-        this.handlersBySession = new Map();
-        // Tracks runDiscriminant per sessionId so consecutive emitPhase calls
-        // can resolve onSuccess routing without each test having to repeat it.
-        this.discriminantBySession = new Map();
-        // Issue #732: capture the exact message the Hub sent on the most recent
-        // continue turn so tests can assert whether it would re-trigger get_fraim_job.
-        this.lastContinueMessage = null;
-    }
-    detectEmployees() {
-        return this.employees;
-    }
-    startRun(_hostId, _projectPath, _message, handlers, requestedSessionId) {
-        const sessionId = requestedSessionId || (0, crypto_1.randomUUID)();
-        this.handlersBySession.set(sessionId, handlers);
-        handlers.onEvent({ sessionId, raw: 'scripted-session-start' }, 'system');
-        return this.spawnDouble();
-    }
-    continueRun(_hostId, _projectPath, sessionId, message, handlers) {
-        this.lastContinueMessage = message;
-        this.handlersBySession.set(sessionId, handlers);
-        handlers.onEvent({ sessionId, raw: 'scripted-session-resume' }, 'system');
-        return this.spawnDouble();
-    }
-    startDirectRun(_hostId, _message, _projectPath, handlers, requestedSessionId) {
-        const sessionId = requestedSessionId || (0, crypto_1.randomUUID)();
-        this.handlersBySession.set(sessionId, handlers);
-        handlers.onEvent({ sessionId, raw: 'scripted-direct-session-start' }, 'system');
-        return this.spawnDouble();
-    }
-    continueDirectRun(_hostId, sessionId, _message, _projectPath, handlers) {
-        this.handlersBySession.set(sessionId, handlers);
-        handlers.onEvent({ sessionId, raw: 'scripted-direct-session-resume' }, 'system');
-        return this.spawnDouble();
-    }
-    // Test API — fire a seekMentoring tool-use event for the most recent
-    // active run. The phaseId is the raw FSM phase id (e.g.,
-    // 'implement-validate'); the parser will turn it into a friendly
-    // tracker label downstream.
-    emitPhase(runId, phaseId, status, findingsText) {
-        const target = this.resolveSession(runId);
-        if (!target)
-            return;
-        target.handlers.onEvent({
-            sessionId: target.sessionId,
-            raw: `scripted-seekMentoring:${phaseId}:${status}`,
-            seekMentoring: { phaseId, phaseStatus: status, findingsText },
-        }, 'stdout');
-    }
-    // Test API — set the runDiscriminant for a run so onSuccess routing
-    // resolves correctly (e.g., 'feature' vs 'bug' for feature-implementation).
-    emitDiscriminant(runId, discriminant) {
-        const target = this.resolveSession(runId);
-        if (!target)
-            return;
-        this.discriminantBySession.set(target.sessionId, discriminant);
-        target.handlers.onEvent({
-            sessionId: target.sessionId,
-            raw: `scripted-discriminant:${discriminant}`,
-            seekMentoring: {
-                phaseId: '__discriminant__',
-                phaseStatus: 'starting',
-                discriminant,
-            },
-        }, 'system');
-    }
-    // Test API — emit a seekMentoring signal for a job *other* than the
-    // one this run is tracking. Used to verify the cross-job pollution
-    // filter in applySeekMentoringSignal.
-    emitForeignPhase(runId, foreignJobId, phaseId, status) {
-        const target = this.resolveSession(runId);
-        if (!target)
-            return;
-        target.handlers.onEvent({
-            sessionId: target.sessionId,
-            raw: `scripted-foreign-seekMentoring:${foreignJobId}:${phaseId}`,
-            seekMentoring: {
-                phaseId,
-                phaseStatus: status,
-                jobId: foreignJobId,
-                jobName: foreignJobId,
-            },
-        }, 'stdout');
-    }
-    // Test API — emit a same-job seekMentoring signal that carries BOTH the
-    // stable jobName slug and a per-invocation UUID jobId, exactly as a real
-    // agent does after get_fraim_job (which mints a fresh randomUUID each call).
-    // Issue #732: the tracker must key off jobName, not the UUID jobId.
-    emitPhaseWithJobIds(runId, phaseId, status, jobName, jobId, findingsText) {
-        const target = this.resolveSession(runId);
-        if (!target)
-            return;
-        target.handlers.onEvent({
-            sessionId: target.sessionId,
-            raw: `scripted-seekMentoring-ids:${phaseId}:${status}`,
-            seekMentoring: { phaseId, phaseStatus: status, jobName, jobId, findingsText },
-        }, 'stdout');
-    }
-    // Test API — emit the structured job-load signal that get_fraim_job
-    // produces before the first seekMentoring phase call.
-    emitFraimJobLoad(runId, jobId) {
-        const target = this.resolveSession(runId);
-        if (!target)
-            return;
-        target.handlers.onEvent({
-            sessionId: target.sessionId,
-            raw: `scripted-get_fraim_job:${jobId}`,
-            fraimJob: { jobId, source: 'get_fraim_job' },
-        }, 'stdout');
-    }
-    // Test API — emit a per-turn usage signal in the normalized shape
-    // the server expects. Mirrors what parseUsageSignal would produce
-    // from a real host's stream.
-    emitUsage(runId, usage) {
-        const target = this.resolveSession(runId);
-        if (!target)
-            return;
-        target.handlers.onEvent({
-            sessionId: target.sessionId,
-            raw: `scripted-usage:${JSON.stringify(usage)}`,
-            usage: {
-                nonCachedInputTokens: usage.nonCachedInputTokens ?? 0,
-                cachedInputTokens: usage.cachedInputTokens ?? 0,
-                cacheCreationTokens: usage.cacheCreationTokens ?? 0,
-                outputTokens: usage.outputTokens ?? 0,
-                costUsd: usage.costUsd,
-            },
-        }, 'stdout');
-    }
-    // Test API — emit the agent-identity signal that fraim_connect would
-    // produce, so applyUsageSignal's price-table lookup has identity to
-    // work with.
-    emitAgentIdentity(runId, agentName, agentModel) {
-        const target = this.resolveSession(runId);
-        if (!target)
-            return;
-        target.handlers.onEvent({
-            sessionId: target.sessionId,
-            raw: `scripted-agent-identity:${agentName}:${agentModel}`,
-            agentIdentity: { agentName, agentModel },
-        }, 'stdout');
-    }
-    // Test API — emit a message from the employee (appears in the thread as an employee bubble).
-    emitEmployeeMessage(runId, text) {
-        const target = this.resolveSession(runId);
-        if (!target)
-            return;
-        target.handlers.onEvent({ sessionId: target.sessionId, message: text, raw: `scripted-employee:${text.slice(0, 40)}` }, 'stdout');
-    }
-    // Reset between tests (called from beforeEach).
-    reset() {
-        this.handlersBySession.clear();
-        this.discriminantBySession.clear();
-    }
-    // The Hub passes run.id as the requested session id for scripted starts,
-    // so tests/demo controls can target a specific run even when multiple runs
-    // are active. Fall back to the latest handler for older callers that do not
-    // provide a known id.
-    resolveSession(runId) {
-        if (this.handlersBySession.size === 0)
-            return null;
-        const direct = this.handlersBySession.get(runId);
-        if (direct)
-            return { sessionId: runId, handlers: direct };
-        const entries = [...this.handlersBySession.entries()];
-        const [sessionId, handlers] = entries[entries.length - 1];
-        return { sessionId, handlers };
-    }
-    spawnDouble() {
-        return {
-            stdout: process.stdout,
-            stderr: process.stderr,
-            stdin: process.stdin,
-            kill: () => true,
-            on: () => ({}),
-            once: () => ({}),
-            emit: () => true,
-            addListener: () => ({}),
-            removeListener: () => ({}),
-            removeAllListeners: () => ({}),
-            setMaxListeners: () => ({}),
-            getMaxListeners: () => 0,
-            listeners: () => [],
-            rawListeners: () => [],
-            listenerCount: () => 0,
-            prependListener: () => ({}),
-            prependOnceListener: () => ({}),
-            eventNames: () => [],
-            pid: 0,
-            connected: false,
-            disconnect: () => undefined,
-            exitCode: 0,
-            killed: false,
-            signalCode: null,
-            spawnargs: [],
-            spawnfile: '',
-            stdio: [],
-            unref: () => undefined,
-            ref: () => undefined,
-        };
-    }
-}
-exports.ScriptedHostRuntime = ScriptedHostRuntime;
-const createHubMessage = (role, text) => ({
-    id: (0, crypto_1.randomUUID)(),
-    role,
-    text,
-    createdAt: new Date().toISOString(),
-});
-exports.createHubMessage = createHubMessage;
-const createHubEvent = (channel, text) => ({
-    id: (0, crypto_1.randomUUID)(),
-    channel,
-    text,
-    createdAt: new Date().toISOString(),
-});
-exports.createHubEvent = createHubEvent;