harnery 0.32.0 → 0.34.0

package/dist/core/hooks/events/emit.js

@@ -1,93 +0,0 @@
-import { appendFileSync, closeSync, mkdirSync, openSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { maybeRotateEventStream } from "./rotate.js";
-import { SCHEMA_VERSION, } from "./schema.js";
-import { ulid } from "./ulid.js";
-const LOCK_FILE = ".harnery/events.ndjson.lock";
-const STREAM_FILE = ".harnery/events.ndjson";
-const MAX_LINE_BYTES = 64 * 1024;
-/**
- * Build a canonical envelope around the caller's `data` payload. Pure;
- * doesn't touch the filesystem. Useful for tests + replay fixtures.
- */
-export function buildEnvelope(input) {
-    return {
-        schema_version: SCHEMA_VERSION,
-        event_id: ulid(),
-        event_type: input.event_type,
-        ts: input.ts ?? new Date().toISOString(),
-        instance_id: input.instance_id,
-        session_id: input.session_id,
-        parent_session_id: input.parent_session_id,
-        turn_id: input.turn_id,
-        parent_turn_id: input.parent_turn_id,
-        adapter: input.adapter,
-        source: input.source ?? "agent-hooks",
-        data: input.data,
-    };
-}
-/**
- * Append one canonical event to `.harnery/events.ndjson` under a file lock.
- * Append-only, one JSON object per line, lock-serialized.
- *
- * Synchronous because hooks are short-lived processes: we want the append to
- * land before the binary exits, and async/await across a tiny write is just
- * latency for no benefit.
- *
- * Returns the envelope so callers can chain off it (debug logs, post-emit
- * verdict requests).
- */
-export function emit(coordRoot, input) {
-    const envelope = buildEnvelope(input);
-    const streamPath = join(coordRoot, STREAM_FILE);
-    const lockPath = join(coordRoot, LOCK_FILE);
-    // Size-triggered rotation: roll the active file to a dated archive when it
-    // crosses the cap, so this append lands in a bounded fresh file. Fail-soft.
-    maybeRotateEventStream(coordRoot);
-    ensureDir(dirname(streamPath));
-    ensureFile(lockPath);
-    let line = `${JSON.stringify(envelope)}\n`;
-    if (Buffer.byteLength(line, "utf8") > MAX_LINE_BYTES) {
-        // lines >64KB are a schema bug. Phase 2 hard-truncates the `data`
-        // payload + sets `truncated: true` so we keep audit visibility without
-        // breaking downstream consumers.
-        const truncated = `${JSON.stringify({
-            ...envelope,
-            data: { __over_size_limit: true, original_bytes: Buffer.byteLength(line, "utf8") },
-            // eslint-disable-next-line @typescript-eslint/naming-convention
-        })}\n`;
-        line = truncated;
-    }
-    const lockFd = openSync(lockPath, "r+");
-    try {
-        // flock isn't directly exposed in node fs; use fcntl-like via shelling out
-        // would be slower than POSIX flock(2) inside the kernel. Bun exposes
-        // `Bun.flock` in recent builds, but a simple fs-level append is atomic
-        // for lines <PIPE_BUF (4KB on Linux) anyway. For larger lines we rely on
-        // append-mode flag (O_APPEND) which kernels serialize per-fd.
-        //
-        // The `events.ndjson.lock` file is kept around for forward
-        // compatibility: Phase 4+ helpers acquire it before multi-write batches.
-        appendFileSync(streamPath, line, { encoding: "utf8", flag: "a" });
-    }
-    finally {
-        closeSync(lockFd);
-    }
-    return envelope;
-}
-function ensureDir(path) {
-    try {
-        mkdirSync(path, { recursive: true });
-    }
-    catch {
-        /* swallow */
-    }
-}
-function ensureFile(path) {
-    try {
-        closeSync(openSync(path, "a"));
-    }
-    catch {
-        /* swallow */
-    }
-}

package/dist/core/hooks/events/rotate.d.ts

@@ -1,43 +0,0 @@
-/**
- * Size-triggered rotation for the canonical event stream
- * `.harnery/events.ndjson`.
- *
- * The stream is a deliberately-immutable, append-only ledger. Left unbounded it
- * grows past V8's ~512MB max string length, at which point any code that does a
- * whole-file `readFileSync` throws ("Cannot create a string longer than
- * 0x1fffffe8 characters"). Rather than police every current + future reader,
- * we bound the *active* file: once it crosses a byte cap we rename it to a dated
- * archive (`events-YYYY-MM-DD.ndjson`) and start a fresh active file. Archives
- * are kept — the audit trail is preserved, just spread across files that readers
- * glob newest-first.
- *
- * Both independent append paths (agent-hooks `hooks/events/emit.ts` and
- * agent-coord `agents/events/emit.ts`) call `maybeRotateEventStream` before
- * appending, so a roll is triggered continuously, not only at session
- * boundaries.
- *
- * Concurrency: many short-lived hook processes append at once. The rename itself
- * is atomic — a concurrent appender opening the path by name lands its line in
- * whichever inode the name currently resolves to (old archive or new active
- * file), never nowhere. The only hazard is two processes both renaming (the
- * second would move the fresh empty file to a second archive name), which an
- * `O_EXCL` roll-lock prevents.
- *
- * Design + rationale: harnery ADR 0009; decision docket
- * `should-harnery-adopt-a-retention-2026-07-07-ed07`.
- */
-/** Archive glob prefix. Readers enumerate `events-*.ndjson` newest-first.
- * The pre-existing manual `events-legacy.ndjson` matches and is picked up for
- * free. Kept in sync with the reader-side pattern in web/lib/coord-reader.ts. */
-export declare const ARCHIVE_PREFIX = "events-";
-export declare const ARCHIVE_SUFFIX = ".ndjson";
-/**
- * Roll `events.ndjson` to a dated archive when it exceeds the byte cap. Cheap
- * no-op (a single `statSync`) below the cap. Fail-soft: any error is swallowed
- * so a rotation problem can never break the append that triggered it.
- *
- * `nowMs` is injectable for the stale-lock check in tests; production leaves it
- * unset (the roll date always comes from the file's mtime, never `nowMs`).
- */
-export declare function maybeRotateEventStream(coordRoot: string, nowMs?: number): boolean;
-//# sourceMappingURL=rotate.d.ts.map

package/dist/core/hooks/events/rotate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rotate.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/events/rotate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAyBH;;iFAEiF;AACjF,eAAO,MAAM,cAAc,YAAY,CAAC;AACxC,eAAO,MAAM,cAAc,YAAY,CAAC;AA6BxC;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAmCjF"}

package/dist/core/hooks/events/rotate.js

@@ -1,142 +0,0 @@
-/**
- * Size-triggered rotation for the canonical event stream
- * `.harnery/events.ndjson`.
- *
- * The stream is a deliberately-immutable, append-only ledger. Left unbounded it
- * grows past V8's ~512MB max string length, at which point any code that does a
- * whole-file `readFileSync` throws ("Cannot create a string longer than
- * 0x1fffffe8 characters"). Rather than police every current + future reader,
- * we bound the *active* file: once it crosses a byte cap we rename it to a dated
- * archive (`events-YYYY-MM-DD.ndjson`) and start a fresh active file. Archives
- * are kept — the audit trail is preserved, just spread across files that readers
- * glob newest-first.
- *
- * Both independent append paths (agent-hooks `hooks/events/emit.ts` and
- * agent-coord `agents/events/emit.ts`) call `maybeRotateEventStream` before
- * appending, so a roll is triggered continuously, not only at session
- * boundaries.
- *
- * Concurrency: many short-lived hook processes append at once. The rename itself
- * is atomic — a concurrent appender opening the path by name lands its line in
- * whichever inode the name currently resolves to (old archive or new active
- * file), never nowhere. The only hazard is two processes both renaming (the
- * second would move the fresh empty file to a second archive name), which an
- * `O_EXCL` roll-lock prevents.
- *
- * Design + rationale: harnery ADR 0009; decision docket
- * `should-harnery-adopt-a-retention-2026-07-07-ed07`.
- */
-import { closeSync, existsSync, mkdirSync, openSync, renameSync, statSync, unlinkSync, } from "node:fs";
-import { dirname, join } from "node:path";
-import { coordEnv } from "../../../lib/env.js";
-const STREAM_FILE = ".harnery/events.ndjson";
-const ROLL_LOCK_FILE = ".harnery/events.ndjson.roll.lock";
-/** Default active-file cap: 256 MiB — half of V8's ~512MB string cliff, so even
- * a reader that loads the whole active file whole stays clear of the limit. */
-const DEFAULT_ROLL_BYTES = 256 * 1024 * 1024;
-/** A roll-lock older than this is treated as abandoned (a crashed roller) and
- * stolen. Rolls are sub-millisecond, so 60s is orders of magnitude of slack. */
-const STALE_LOCK_MS = 60_000;
-/** Archive glob prefix. Readers enumerate `events-*.ndjson` newest-first.
- * The pre-existing manual `events-legacy.ndjson` matches and is picked up for
- * free. Kept in sync with the reader-side pattern in web/lib/coord-reader.ts. */
-export const ARCHIVE_PREFIX = "events-";
-export const ARCHIVE_SUFFIX = ".ndjson";
-function resolveRollBytes() {
-    const env = coordEnv("EVENTS_ROLL_BYTES");
-    const n = env ? Number(env) : Number.NaN;
-    return Number.isFinite(n) && n > 0 ? n : DEFAULT_ROLL_BYTES;
-}
-/** `YYYY-MM-DD` (UTC) from a millisecond timestamp. Uses the file's own mtime
- * rather than `Date.now()` so it's deterministic and independent of the adapter
- * runtime's clock surface. */
-function utcDateStamp(mtimeMs) {
-    const d = new Date(mtimeMs);
-    const y = d.getUTCFullYear();
-    const mo = String(d.getUTCMonth() + 1).padStart(2, "0");
-    const day = String(d.getUTCDate()).padStart(2, "0");
-    return `${y}-${mo}-${day}`;
-}
-/** First non-colliding `events-<stamp>[.N].ndjson` path under `coordDir`. */
-function archivePathFor(coordDir, stamp) {
-    const base = join(coordDir, `${ARCHIVE_PREFIX}${stamp}${ARCHIVE_SUFFIX}`);
-    if (!existsSync(base))
-        return base;
-    for (let n = 1;; n++) {
-        const cand = join(coordDir, `${ARCHIVE_PREFIX}${stamp}.${n}${ARCHIVE_SUFFIX}`);
-        if (!existsSync(cand))
-            return cand;
-    }
-}
-/**
- * Roll `events.ndjson` to a dated archive when it exceeds the byte cap. Cheap
- * no-op (a single `statSync`) below the cap. Fail-soft: any error is swallowed
- * so a rotation problem can never break the append that triggered it.
- *
- * `nowMs` is injectable for the stale-lock check in tests; production leaves it
- * unset (the roll date always comes from the file's mtime, never `nowMs`).
- */
-export function maybeRotateEventStream(coordRoot, nowMs) {
-    try {
-        const streamPath = join(coordRoot, STREAM_FILE);
-        if (!existsSync(streamPath))
-            return false;
-        const cap = resolveRollBytes();
-        let st = statSync(streamPath);
-        if (st.size < cap)
-            return false;
-        const coordDir = dirname(streamPath);
-        const lockPath = join(coordRoot, ROLL_LOCK_FILE);
-        mkdirSync(coordDir, { recursive: true });
-        if (!acquireRollLock(lockPath, nowMs))
-            return false; // another roller active
-        try {
-            // Re-check under the lock: a concurrent process may have just rolled.
-            if (!existsSync(streamPath))
-                return false;
-            st = statSync(streamPath);
-            if (st.size < cap)
-                return false;
-            const archive = archivePathFor(coordDir, utcDateStamp(st.mtimeMs));
-            renameSync(streamPath, archive);
-            // Recreate an empty active file so the very next append (and any reader's
-            // existsSync) sees a valid, present stream.
-            closeSync(openSync(streamPath, "a"));
-            return true;
-        }
-        finally {
-            try {
-                unlinkSync(lockPath);
-            }
-            catch {
-                /* best-effort */
-            }
-        }
-    }
-    catch {
-        return false; // fail-soft: never break the caller's append
-    }
-}
-/** Create the roll-lock with O_EXCL. Returns true on acquisition. On collision,
- * steals a stale lock (crashed roller) once, else returns false. */
-function acquireRollLock(lockPath, nowMs) {
-    try {
-        closeSync(openSync(lockPath, "wx"));
-        return true;
-    }
-    catch {
-        // Exists: steal if abandoned.
-        try {
-            const age = (nowMs ?? Date.now()) - statSync(lockPath).mtimeMs;
-            if (age > STALE_LOCK_MS) {
-                unlinkSync(lockPath);
-                closeSync(openSync(lockPath, "wx"));
-                return true;
-            }
-        }
-        catch {
-            /* lost the steal race — someone else holds it */
-        }
-        return false;
-    }
-}

package/dist/core/hooks/events/schema.d.ts

@@ -1,312 +0,0 @@
-/**
- * Canonical event schema v1. Inter-module contract between agent-hooks (writer)
- * and agent-coord (consumer + projector).
- *
- * Schema evolution rules:
- *   - Forward-compatible only within a major version. Consumers ignore unknown
- *     fields. Adding an optional field is a minor bump; removing or retyping a
- *     field is a major bump.
- *   - Mixed-version streams are legal during migrations; consumers branch on
- *     `schema_version`.
- */
-export declare const SCHEMA_VERSION: 1;
-/** The adapters harnery ships first-party hook wiring for. The registry's open
- * `AdapterId` covers any adapter a host registers; this is the closed set, and
- * it is declared exactly once. Re-exported by the two event modules that used
- * to keep their own byte-identical copy. */
-export type Adapter = "claude-code" | "cursor" | "codex";
-export type Source = "agent-hooks" | "agent-coord" | "user" | "system";
-/**
- * Common envelope every event carries. Tool events, `user_prompt.submit`, and
- * `turn.stop` MUST carry `turn_id`; CLI/state/council/presence/health/session
- * events MAY carry `turn_id` when agent-coord can bind them to the active turn
- * for that owner.
- */
-export interface EventEnvelope<TType extends string, TData> {
-    schema_version: typeof SCHEMA_VERSION;
-    event_id: string;
-    event_type: TType;
-    ts: string;
-    instance_id: string;
-    session_id: string;
-    parent_session_id?: string;
-    turn_id?: string;
-    parent_turn_id?: string;
-    adapter: Adapter;
-    source: Source;
-    data: TData;
-}
-export type SessionStart = EventEnvelope<"session.start", {
-    started_at: string;
-    cwd: string;
-    model?: string;
-    pid: number;
-    /** Present iff this session is a `workflow run` child: the run id whose
-     * transcript owns it (child env HARNERY_WORKFLOW_RUN_ID). Optional-field
-     * addition per the schema evolution rules (minor bump). */
-    workflow_run_id?: string;
-    /** Which agent row of that run this session is running (`a1`, `a2`, …), from
-     * child env HARNERY_WORKFLOW_AGENT_ID. Lets a dashboard attribute in-flight
-     * child activity to one agent instead of only to the run. */
-    workflow_agent_id?: string;
-}>;
-export type SessionEnd = EventEnvelope<"session.end", {
-    ended_at: string;
-    clean_exit: boolean;
-}>;
-export type SubagentStart = EventEnvelope<"subagent.start", {
-    agent_type: string;
-    prompt_summary?: string;
-}>;
-export type SubagentStop = EventEnvelope<"subagent.stop", {
-    exit_status: "ok" | "error" | "interrupted";
-}>;
-export type UserPromptSubmit = EventEnvelope<"user_prompt.submit", {
-    prompt_text: string;
-    truncated?: boolean;
-}>;
-export type TurnStop = EventEnvelope<"turn.stop", {
-    tool_call_count: number;
-    text_length: number;
-    status_box_present: boolean;
-    /** Strict variant of status_box_present: assistant text blocks only, so a
-     * tool_result carrying the box (the status command's own output) does not
-     * count. Shadow telemetry while the rule-2/3 detector decision is open;
-     * the Stop verdict does not read it yet. */
-    status_box_present_strict?: boolean;
-    /** Whether the session's suggested name is satisfied as of this turn:
-     * either this reply showed it, or an earlier reply did. Present whenever a
-     * suggested name exists, since the Stop verdict reads it per turn. */
-    session_name_present?: boolean;
-    /** Which suggested name `session_name_present` refers to. A projector
-     * rebuild attributes the sighting to this name instead of to whichever
-     * name is current during the replay. */
-    session_name_present_for?: string;
-    /** Shadow telemetry for Windows-hosted Codex workspaces: Markdown link
-     * destinations that still use the Linux coordination root. */
-    wsl_linux_file_link_count?: number;
-    /** Up to three bounded examples for diagnosing the mismatches locally. */
-    wsl_linux_file_link_examples?: string[];
-}>;
-export type CommandStart = EventEnvelope<"command.start", {
-    cmd_id: string;
-    intent?: string;
-    cmd: string;
-}>;
-export type CommandOutput = EventEnvelope<"command.output", {
-    cmd_id: string;
-    stream: "stdout" | "stderr";
-    line: string;
-}>;
-export type CommandEnd = EventEnvelope<"command.end", {
-    cmd_id: string;
-    exit: number;
-    duration_ms: number;
-    signal?: string;
-}>;
-export type Narration = EventEnvelope<"narration", {
-    message: string;
-}>;
-export type ToolPreUse = EventEnvelope<"tool.pre_use", {
-    tool_name: string;
-    tool_input: unknown;
-    intent?: string;
-    truncated?: boolean;
-}>;
-export type ToolPostUse = EventEnvelope<"tool.post_use", {
-    tool_name: string;
-    output_summary: string;
-    exit_status: "ok" | "error";
-    duration_ms: number;
-    truncated?: boolean;
-}>;
-export type ToolPostUseFailure = EventEnvelope<"tool.post_use_failure", {
-    tool_name: string;
-    error: string;
-    duration_ms: number;
-}>;
-export type ToolOutputChunk = EventEnvelope<"tool.output_chunk", {
-    chunk: string;
-    chunk_no: number;
-    stream: "stdout" | "stderr";
-    truncated?: boolean;
-}>;
-/**
- * An image an agent viewed (Read tool) or produced (a Bash command wrote it).
- * Emitted by agent-hooks as a side-effect of a tool event when the tool
- * references an image path on disk; the bytes are content-addressed into
- * `.harnery/images/<hash>.<ext>` (dedup) and this event records the provenance
- * for the web image feed. Grouped by `hash` downstream → one card per distinct
- * image with a touch timeline.
- */
-export type ImageCaptured = EventEnvelope<"image.captured", {
-    hash: string;
-    ext: string;
-    bytes: number;
-    role: "viewed" | "produced";
-    source_path: string;
-    tool_name: string;
-    tool_use_id?: string;
-    intent?: string;
-    command_head?: string;
-}>;
-export type ContextSampled = EventEnvelope<"context.sampled", {
-    model?: string;
-    used_tokens?: number;
-    window_tokens?: number;
-    used_percent?: number;
-    telemetry_source: "hook" | "native_event" | "result" | "transcript" | "estimate";
-    confidence: "exact" | "reported" | "estimated";
-}>;
-export type ContextCheckpointCreated = EventEnvelope<"context.checkpoint.created", {
-    capsule_id: string;
-    generation: number;
-    path: string;
-    reason: "manual" | "pressure" | "pre_compact" | "session_end";
-    reused: boolean;
-}>;
-export type ContextCompactionStarted = EventEnvelope<"context.compaction.started", {
-    trigger?: string;
-    pre_tokens?: number;
-}>;
-export type ContextCompactionCompleted = EventEnvelope<"context.compaction.completed", {
-    trigger?: string;
-    pre_tokens?: number;
-    post_tokens?: number;
-}>;
-export type ContextRecoveryInjected = EventEnvelope<"context.recovery.injected", {
-    capsule_id: string;
-    generation: number;
-    injection_event: "SessionStart" | "UserPromptSubmit";
-}>;
-export type ClaimAcquire = EventEnvelope<"claim.acquire", {
-    path: string;
-    mode: "read" | "write";
-    finalization?: {
-        disposition: "git" | "output";
-        root: string;
-    };
-}>;
-export type ClaimRelease = EventEnvelope<"claim.release", {
-    path: string;
-    reason: "explicit" | "turn_end" | "session_end" | "heal";
-}>;
-export type ClaimConflict = EventEnvelope<"claim.conflict", {
-    path: string;
-    peer_instance_id: string;
-    reason?: "ordering_violation" | "concurrent_write";
-}>;
-export type StateTaskSet = EventEnvelope<"state.task_set", {
-    task: string;
-    cleared: boolean;
-    /** True exactly when this call produced the session name (first non-empty
-     * declaration of a human-facing session); never true with a null name. */
-    first_of_session?: boolean;
-    /** The name produced by this call, for the Stop-hook naming rule. */
-    suggested_session_name?: string | null;
-}>;
-export type StateStatusChecked = EventEnvelope<"state.status_checked", {
-    format: "box" | "json" | "table";
-    agent_count: number;
-    included_self: boolean;
-}>;
-export type StateJournalAppend = EventEnvelope<"state.journal_append", {
-    category: "note" | "plan" | "decision" | "blocker" | "question" | "done" | "handoff";
-    body_summary: string;
-}>;
-export type StatePresenceChange = EventEnvelope<"state.presence_change", {
-    from: "mobile" | "office";
-    to: "mobile" | "office";
-    source: "hook" | "cli" | "user";
-}>;
-export type StateHeartbeat = EventEnvelope<"state.heartbeat", Record<string, never>>;
-/** A live session adopted a durable persona/role. The event is authoritative
- * for replay; `.name-history` carries the same binding for heartbeat healing. */
-export type IdentityAssumed = EventEnvelope<"identity.assumed", {
-    name: string;
-    agent_id: string;
-    previous_name?: string;
-    previous_agent_id?: string;
-}>;
-export type CouncilOpen = EventEnvelope<"council.open", {
-    council_id: string;
-    topic: string;
-    members: string[];
-    target_doc?: string;
-}>;
-export type CouncilRoundOpen = EventEnvelope<"council.round_open", {
-    council_id: string;
-    round_no: number;
-}>;
-export type CouncilContribution = EventEnvelope<"council.contribution", {
-    council_id: string;
-    round_no: number;
-    member: string;
-    body_summary: string;
-}>;
-export type CouncilRoundClose = EventEnvelope<"council.round_close", {
-    council_id: string;
-    round_no: number;
-}>;
-export type CouncilClose = EventEnvelope<"council.close", {
-    council_id: string;
-    closed_at: string;
-}>;
-export type CouncilArchive = EventEnvelope<"council.archive", {
-    council_id: string;
-}>;
-export type DecisionBlock = EventEnvelope<"decision.block", {
-    rule: string;
-    reason: string;
-}>;
-export type DecisionWarn = EventEnvelope<"decision.warn", {
-    rule: string;
-    reason: string;
-}>;
-export type DecisionAllow = EventEnvelope<"decision.allow", {
-    rule: string;
-}>;
-export type HealthHeartbeatHeal = EventEnvelope<"health.heartbeat_heal", {
-    reason: string;
-}>;
-export type HealthPidmapHeal = EventEnvelope<"health.pidmap_heal", {
-    reason: string;
-}>;
-/**
- * A heartbeat file was removed by stale-sweep or an operator kill. Symmetric
- * with `health.heartbeat_heal` so the full lifecycle (created → healed →
- * swept) is auditable from the event stream alone. Sweeps were silent before,
- * which made "why did this agent vanish?" un-answerable without guesswork.
- * `reason`: "stale" (last_heartbeat past the freshness cutoff) | "unparseable"
- * (JSON.parse failed AND mtime was old) | "missing_ts" (no last_heartbeat AND
- * mtime was old) | "killed" (operator `kill-heartbeat` / `agents heal --kind
- * kill`). Fresh-mtime files are never auto-swept regardless of content.
- */
-export type HealthHeartbeatSwept = EventEnvelope<"health.heartbeat_swept", {
-    reason: "stale" | "unparseable" | "missing_ts" | "killed";
-    age_secs?: number;
-}>;
-/**
- * fail-open verdict failure mode. Emitted by agent-hooks when
- * `agent-coord verdict` fails to spawn / exits non-zero / returns malformed
- * JSON / times out. Adapter falls through to ALLOW; the event preserves the
- * fail-open for audit.
- */
-export type HealthVerdictFailure = EventEnvelope<"health.verdict_failure", {
-    failure_kind: "spawn_failed" | "nonzero_exit" | "malformed_json" | "timeout";
-    timeout_ms?: number;
-    fallback: "allow";
-}>;
-export type Event = SessionStart | SessionEnd | SubagentStart | SubagentStop | UserPromptSubmit | TurnStop | CommandStart | CommandOutput | CommandEnd | Narration | ToolPreUse | ToolPostUse | ToolPostUseFailure | ToolOutputChunk | ImageCaptured | ContextSampled | ContextCheckpointCreated | ContextCompactionStarted | ContextCompactionCompleted | ContextRecoveryInjected | ClaimAcquire | ClaimRelease | ClaimConflict | StateTaskSet | StateStatusChecked | StateJournalAppend | StatePresenceChange | StateHeartbeat | IdentityAssumed | CouncilOpen | CouncilRoundOpen | CouncilContribution | CouncilRoundClose | CouncilClose | CouncilArchive | DecisionBlock | DecisionWarn | DecisionAllow | HealthHeartbeatHeal | HealthPidmapHeal | HealthHeartbeatSwept | HealthVerdictFailure;
-export type EventType = Event["event_type"];
-/**
- * Redaction marker that may be attached to any `data` payload during emission.
- * Tracked here so the schema documents the convention; the actual
- * shape lives inside `data` so it doesn't widen the envelope.
- */
-export interface RedactionMarker {
-    field: string;
-    kind: "secret_signature" | "env_secret_match" | "length_clamp";
-    count: number;
-}
-//# sourceMappingURL=schema.d.ts.map

package/dist/core/hooks/events/schema.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/events/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,cAAc,EAAG,CAAU,CAAC;AAEzC;;;4CAG4C;AAC5C,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEzD,MAAM,MAAM,MAAM,GAAG,aAAa,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAAC,KAAK,SAAS,MAAM,EAAE,KAAK;IACxD,cAAc,EAAE,OAAO,cAAc,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,KAAK,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,CAAC;CACb;AAKD,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ;;+DAE2D;IAC3D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;iEAE6D;IAC7D,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CACF,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,aAAa,EACb;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,WAAW,EAAE,IAAI,GAAG,OAAO,GAAG,aAAa,CAAC;CAC7C,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,aAAa,CAClC,WAAW,EACX;IACE,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,OAAO,CAAC;IAC5B;;;gDAG4C;IAC5C,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC;;0EAEsE;IACtE,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;4CAEwC;IACxC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;kEAC8D;IAC9D,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,0EAA0E;IAC1E,4BAA4B,CAAC,EAAE,MAAM,EAAE,CAAC;CACzC,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd,CACF,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,aAAa,EACb;IACE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CACF,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,aAAa,CACnC,WAAW,EACX;IACE,OAAO,EAAE,MAAM,CAAC;CACjB,CACF,CAAC;AAGF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,cAAc,EACd;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,aAAa,CACrC,eAAe,EACf;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,IAAI,GAAG,OAAO,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,uBAAuB,EACvB;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,aAAa,CACzC,mBAAmB,EACnB;IACE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CACF,CAAC;AAGF,MAAM,MAAM,cAAc,GAAG,aAAa,CACxC,iBAAiB,EACjB;IACE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,GAAG,cAAc,GAAG,QAAQ,GAAG,YAAY,GAAG,UAAU,CAAC;IACjF,UAAU,EAAE,OAAO,GAAG,UAAU,GAAG,WAAW,CAAC;CAChD,CACF,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,aAAa,CAClD,4BAA4B,EAC5B;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,aAAa,CAAC;IAC9D,MAAM,EAAE,OAAO,CAAC;CACjB,CACF,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,aAAa,CAClD,4BAA4B,EAC5B;IACE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,aAAa,CACpD,8BAA8B,EAC9B;IACE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CACF,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,aAAa,CACjD,2BAA2B,EAC3B;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,cAAc,GAAG,kBAAkB,CAAC;CACtD,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE;QACb,WAAW,EAAE,KAAK,GAAG,QAAQ,CAAC;QAC9B,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,aAAa,GAAG,MAAM,CAAC;CAC1D,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,oBAAoB,GAAG,kBAAkB,CAAC;CACpD,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB;8EAC0E;IAC1E,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,qEAAqE;IACrE,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,sBAAsB,EACtB;IACE,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;CACxB,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,sBAAsB,EACtB;IACE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;IACrF,YAAY,EAAE,MAAM,CAAC;CACtB,CACF,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,uBAAuB,EACvB;IACE,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,EAAE,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;CACjC,CACF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,aAAa,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAErF;iFACiF;AACjF,MAAM,MAAM,eAAe,GAAG,aAAa,CACzC,kBAAkB,EAClB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CACF,CAAC;AAGF,MAAM,MAAM,WAAW,GAAG,aAAa,CACrC,cAAc,EACd;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,CACF,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,sBAAsB,EACtB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,CACF,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,aAAa,CAC3C,qBAAqB,EACrB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,CACF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,aAAa,CACxC,iBAAiB,EACjB;IACE,UAAU,EAAE,MAAM,CAAC;CACpB,CACF,CAAC;AAGF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;CACd,CACF,CAAC;AAGF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,uBAAuB,EACvB;IACE,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAC9C,wBAAwB,EACxB;IACE,MAAM,EAAE,OAAO,GAAG,aAAa,GAAG,YAAY,GAAG,QAAQ,CAAC;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAC9C,wBAAwB,EACxB;IACE,YAAY,EAAE,cAAc,GAAG,cAAc,GAAG,gBAAgB,GAAG,SAAS,CAAC;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;CACnB,CACF,CAAC;AAIF,MAAM,MAAM,KAAK,GACb,YAAY,GACZ,UAAU,GACV,aAAa,GACb,YAAY,GACZ,gBAAgB,GAChB,QAAQ,GACR,YAAY,GACZ,aAAa,GACb,UAAU,GACV,SAAS,GACT,UAAU,GACV,WAAW,GACX,kBAAkB,GAClB,eAAe,GACf,aAAa,GACb,cAAc,GACd,wBAAwB,GACxB,wBAAwB,GACxB,0BAA0B,GAC1B,uBAAuB,GACvB,YAAY,GACZ,YAAY,GACZ,aAAa,GACb,YAAY,GACZ,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,cAAc,GACd,eAAe,GACf,WAAW,GACX,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,GACjB,YAAY,GACZ,cAAc,GACd,aAAa,GACb,YAAY,GACZ,aAAa,GACb,mBAAmB,GACnB,gBAAgB,GAChB,oBAAoB,GACpB,oBAAoB,CAAC;AAEzB,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,cAAc,CAAC;IAC/D,KAAK,EAAE,MAAM,CAAC;CACf"}

package/dist/core/hooks/events/schema.js

@@ -1,12 +0,0 @@
-/**
- * Canonical event schema v1. Inter-module contract between agent-hooks (writer)
- * and agent-coord (consumer + projector).
- *
- * Schema evolution rules:
- *   - Forward-compatible only within a major version. Consumers ignore unknown
- *     fields. Adding an optional field is a minor bump; removing or retyping a
- *     field is a major bump.
- *   - Mixed-version streams are legal during migrations; consumers branch on
- *     `schema_version`.
- */
-export const SCHEMA_VERSION = 1;

package/dist/core/hooks/events/ulid.d.ts

@@ -1,10 +0,0 @@
-/**
- * Tiny ULID generator. Crockford-base32, 10-char timestamp (48-bit ms epoch)
- * + 16-char random (80-bit). 26 chars total, monotonically-sortable.
- *
- * Library-free so the module stays dep-free (no `ulid` package). Quality is
- * sufficient for event_id uniqueness: the kth event in a millisecond uses a
- * fresh 80-bit random, collision probability negligible.
- */
-export declare function ulid(): string;
-//# sourceMappingURL=ulid.d.ts.map

package/dist/core/hooks/events/ulid.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ulid.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/events/ulid.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,wBAAgB,IAAI,IAAI,MAAM,CAI7B"}