harnessgap 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Dmitry Teryaev
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,160 @@
+# harnessgap
+
+A **stateless, detection-only** CLI that reads Claude Code transcript logs and
+produces a *struggle leaderboard* — the areas of a repo where Claude Code
+sessions show the deterministic signals of friction (rereads, failure streaks,
+oscillating edits, abandonment, etc.).
+
+This is **Slice 1**: it writes nothing, installs nothing, persists nothing. It
+only prints a leaderboard to stdout. Diagnosis, synthesis, routing, and
+measurement are deferred to later slices.
+
+> **Full manual:** [docs/CONSUMER_GUIDE.md](docs/CONSUMER_GUIDE.md) — output formats, scoring modes, calibration, FAQ. **Internals:** [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md).
+
+## Install
+
+```
+npx harnessgap
+```
+
+Or build from source:
+
+```
+npm install
+npm run build
+node dist/cli.js scan
+```
+
+Requires Node >= 22.12.
+
+## Usage
+
+```
+harnessgap scan [options]
+```
+
+`scan` is the default command. It walks Claude Code transcripts under
+`~/.claude/projects/`, filters to a repo, runs the detector, and prints a
+leaderboard of struggle areas.
+
+### Flags
+
+| Flag | Description |
+| --- | --- |
+| `--repo <path>` | Filter to sessions whose resolved repo toplevel matches this path. Defaults to the git toplevel of the current working directory. |
+| `--since <dur>` | Only sessions started within this lookback, e.g. `30d`, `12h`, `5m`, `10s`. Default: all sessions. |
+| `--limit <n>` | Cap the number of sessions scanned. Useful for fast iteration. |
+| `--json` | Emit the JSON envelope (for piping) instead of the human-readable leaderboard table. |
+| `--calibrate` | Print per-signal distributions (min / p50 / p90 / max) plus active thresholds and scoring mode. Aggregate statistics only — no per-session detail. |
+| `--bootstrap` | Force bootstrap (absolute-threshold) scoring mode instead of percentile. |
+| `--config <path>` | Path to a `.harnessgap.yml` config file. Default: looks for `.harnessgap.yml` in the cwd. |
+| `--claude-dir <path>` | Claude Code config directory (contains `projects/`). Default: `~/.claude`. |
+| `--version` | Print the harnessgap version and exit. |
+| `--help` | Print help and exit. |
+
+## Configuration (`.harnessgap.yml`)
+
+Optional. `scan` runs with built-in defaults if no file is present. The file is
+a YAML object with two top-level keys — `detector` and `areas`. Anything else is
+rejected. Deep-merged over the defaults (arrays replace, they do not concatenate).
+
+```yaml
+detector:
+  thresholds_as: percentile        # percentile (default) | absolute
+  flag_pct: 90                     # percentile mode: flag the top (100 - flag_pct)% of composites
+  bootstrap_session_floor: 30      # below this session count, bootstrap mode is automatic
+  bootstrap_flag_pct: 70           # bootstrap mode: flag if composite >= this OR >= 2 signals trip
+  reread_threshold: 5              # a file read count at/above this counts as a reread
+  correction_window_ms: 120000     # window after an edit in which a follow-up edit counts as a correction
+  signal_weights:                  # composite weights per signal
+    explore_ratio: 1.0
+    reread: 1.0
+    failure_streak: 1.0
+    corrections: 1.0
+    abandonment: 0.5               # low until task fingerprinting lands
+    oscillation: 1.2
+    wall_clock_per_line: 1.0
+  bootstrap_thresholds:            # conservative absolute priors used in bootstrap mode
+    explore_ratio: 10
+    reread: 5
+    failure_streak: 3
+    corrections: 2
+    abandonment: true
+    oscillation: 2
+    wall_clock_per_line_ms: 300000
+
+areas:
+  ignore: [node_modules, build, target, dist, .git, .next, vendor]  # path prefixes excluded from area clustering
+  min_weight: 0.40                 # minimum cumulative touch weight for an area to appear
+  min_depth: 2                     # minimum path depth for an area key
+  touch_weights: { edit: 3, read: 2, exec: 1 }  # weight of each touch kind
+  tail_fraction: 0.25              # fraction of a session's events that defines the abandonment tail
+  explore_ratio_min: 0.8           # abandonment explore-ratio gate
+  suppress_abandonment_when_no_exec: true
+  test_cmd_patterns: [test, spec, pytest, "npm test", "npm run test", make, "cargo test", "go test", jest, vitest]
+```
+
+Keys not shown here (`docs_dirs`, `synthesizer`, `router`, `tasks`, `repo`) are
+**not** part of Slice 1 and will be rejected.
+
+## Success criterion
+
+Slice 1 is validated by a **manual dogfood gate**, not an automated test. On a
+real repo with rich Claude Code session history, the user prepares, in advance:
+
+- **>= 5 areas they recall as struggle**, and
+- **>= 5 areas they recall as non-struggle.**
+
+`harnessgap scan` must then satisfy all three against its leaderboard:
+
+- **Precision** — of the tool's top 5 flagged areas, >= 3 are in the user's
+  struggle set (>= 60%).
+- **Recall** — of the user's >= 5 struggle areas, >= 3 are flagged (>= 60%).
+- **No false positives in the top 5** — none of the user's non-struggle areas
+  appear in the top 5 flagged.
+
+The labeled fixture corpus and snapshot test (see `test/corpus.test.ts`,
+`test/snapshot.test.ts`) serve as the automated regression proxy for this gate.
+
+## Privacy
+
+harnessgap is built to run offline on private transcripts. Five guarantees:
+
+1. **No network.** No `fetch` / `http` / `https` / `net` / `undici` imports and
+   no `fetch()` calls anywhere in `src/`. Transcripts never leave the machine.
+   Enforced by `test/egress.test.ts`, which scans every `src/**/*.ts` file for
+   forbidden network imports and fetch calls, and runs in CI.
+2. **No disk writes.** harnessgap writes nothing to disk. It reads transcripts
+   and prints to stdout. (OS-level page cache/swap are out of scope and common
+   to any process that reads files.)
+3. **Pattern-catalog scrubbing.** Secrets are scrubbed in the adapter, before
+   events enter the pipeline, using a fixed pattern catalog (API keys, bearer
+   tokens, private keys, connection strings, etc.).
+4. **No raw prose in output.** Only derived signal values and integer warning
+   counts are emitted. Raw message text, commands, and transcript line content
+   never appear in any output path (human table, `--json`, `--calibrate`,
+   warnings).
+5. **Sandboxed git.** `git` is invoked via `execFile` with no shell, so no
+   command lands in shell history. Symlinks in transcript directories are
+   rejected.
+
+## Dependency egress audit
+
+Runtime dependencies are exactly two, both no-egress (neither performs network
+I/O):
+
+- [`commander`](https://www.npmjs.com/package/commander) — CLI argument parsing.
+- [`yaml`](https://www.npmjs.com/package/yaml) — `.harnessgap.yml` parsing.
+
+Dev dependencies (`typescript`, `vitest`, `tsx`, `@types/node`) are never shipped
+and excluded from the published `files` set (`["dist"]`).
+
+The audit is locked by `test/packaging.test.ts`, which runs
+`npm ls --all --omit=dev --json` (via `execFile`, no shell) and asserts the
+runtime `dependencies` object has exactly the keys `commander` and `yaml`. The
+`test/egress.test.ts` gate additionally asserts no `src/` file imports a network
+module or calls `fetch()`. Both run in CI.
+
+## Spec
+
+Full design: [`docs/superpowers/specs/active/2026-07-12-harnessgap-detection-slice-design.md`](docs/superpowers/specs/active/2026-07-12-harnessgap-detection-slice-design.md).

package/dist/adapter/correction.d.ts

@@ -0,0 +1,14 @@
+import type { Correction, ToolKind } from '../types.js';
+/**
+ * Detect whether a user message is a course-correction of the immediately
+ * preceding tool call. Returns `{matched, shape}` — never the raw text.
+ *
+ * Shape catalog (first match wins): negation → undo → redirect → retry-different.
+ * Negation is start-anchored (with a word boundary); the other three use
+ * substring `includes`. Messages shorter than 3 chars are not matched.
+ * `prevToolCall` is part of the interface contract but not used by this
+ * content-based heuristic.
+ */
+export declare function detectCorrection(prevToolCall: {
+    tool: ToolKind;
+} | null, userText: string): Correction;

package/dist/adapter/correction.js

@@ -0,0 +1,68 @@
+// Content-based correction detector — a heuristic priors catalog that
+// classifies whether a user message is a course-correction of the preceding
+// tool call. Pure function: reads userText internally, emits ONLY
+// {matched, shape}. Never returns the raw text. Spec §12.5 open question
+// (whether interrupts are recorded in transcripts); this is the
+// content-based fallback.
+// Negation tokens are start-anchored: checked against the start of the trimmed
+// lowercased message, with a word boundary so "no" does not match "note".
+const NEGATION_TOKENS = [
+    'no',
+    'no,',
+    "don't",
+    'do not',
+    'stop',
+    'wait',
+    'hold on',
+    "that's wrong",
+    'not that',
+];
+// undo / redirect / retry-different use substring includes (case-insensitive).
+const UNDO_TOKENS = ['undo', 'revert', 'roll back', 'put it back'];
+const REDIRECT_TOKENS = ['instead', 'actually', 'rather', 'try the other'];
+const RETRY_DIFFERENT_TOKENS = ['try again', 'differently', 'another approach'];
+const NOT_MATCHED = { matched: false, shape: null };
+function isLetter(code) {
+    return code >= 97 && code <= 122; // a-z (text is already lowercased)
+}
+/**
+ * Test whether `text` starts with `token` followed by a word boundary
+ * (non-letter or end-of-string). Prevents "no" from matching "note".
+ */
+function startsWithToken(text, token) {
+    if (!text.startsWith(token))
+        return false;
+    if (text.length === token.length)
+        return true;
+    return !isLetter(text.charCodeAt(token.length));
+}
+/**
+ * Detect whether a user message is a course-correction of the immediately
+ * preceding tool call. Returns `{matched, shape}` — never the raw text.
+ *
+ * Shape catalog (first match wins): negation → undo → redirect → retry-different.
+ * Negation is start-anchored (with a word boundary); the other three use
+ * substring `includes`. Messages shorter than 3 chars are not matched.
+ * `prevToolCall` is part of the interface contract but not used by this
+ * content-based heuristic.
+ */
+export function detectCorrection(prevToolCall, userText) {
+    void prevToolCall; // interface contract; not used by this heuristic
+    const text = userText.trim().toLowerCase().replace(/’/g, "'");
+    if (text.length < 3)
+        return NOT_MATCHED;
+    if (NEGATION_TOKENS.some((t) => startsWithToken(text, t))) {
+        return { matched: true, shape: 'negation' };
+    }
+    if (UNDO_TOKENS.some((t) => text.includes(t))) {
+        return { matched: true, shape: 'undo' };
+    }
+    if (REDIRECT_TOKENS.some((t) => text.includes(t))) {
+        return { matched: true, shape: 'redirect' };
+    }
+    if (RETRY_DIFFERENT_TOKENS.some((t) => text.includes(t))) {
+        return { matched: true, shape: 'retry-different' };
+    }
+    return NOT_MATCHED;
+}
+//# sourceMappingURL=correction.js.map

package/dist/adapter/correction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction.js","sourceRoot":"","sources":["../../src/adapter/correction.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,4EAA4E;AAC5E,kEAAkE;AAClE,yEAAyE;AACzE,gEAAgE;AAChE,0BAA0B;AAI1B,+EAA+E;AAC/E,0EAA0E;AAC1E,MAAM,eAAe,GAAG;IACtB,IAAI;IACJ,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,SAAS;IACT,cAAc;IACd,UAAU;CACX,CAAC;AAEF,+EAA+E;AAC/E,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;AACnE,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;AAC3E,MAAM,sBAAsB,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC;AAEhF,MAAM,WAAW,GAAe,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAEhE,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,mCAAmC;AACvE,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,YAAuC,EACvC,QAAgB;IAEhB,KAAK,YAAY,CAAC,CAAC,iDAAiD;IACpE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC;IAExC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/adapter/parse.d.ts

@@ -0,0 +1,21 @@
+import type { NormalizedEvent, ToolKind } from '../types.js';
+/**
+ * Convert one parsed Claude Code JSONL record into a NormalizedEvent, or return
+ * null when the record carries no usable event (system entries, ai-title, etc.).
+ *
+ * Mapping:
+ *   - assistant tool_use      → tool_call (tool + digest from input; ok=true)
+ *   - user-record tool_result → tool_call (tool=null; ok=!is_error; interrupted)
+ *   - user text               → user_msg (correction via detectCorrection; no raw text)
+ *   - assistant text          → assistant_msg
+ *   - anything else           → null
+ *
+ * `ctx.prevToolCall` is passed to detectCorrection for user messages; it is NOT
+ * mutated here (the stream layer updates it between records). No raw prose is
+ * emitted: userText is consumed by detectCorrection and discarded.
+ */
+export declare function normalizeRecord(raw: unknown, ctx: {
+    prevToolCall: {
+        tool: ToolKind;
+    } | null;
+}): NormalizedEvent | null;

package/dist/adapter/parse.js

@@ -0,0 +1,261 @@
+// Claude Code transcript-record normalizer. Pure function: takes one already-
+// parsed JSONL record object and returns a NormalizedEvent (or null when the
+// record carries no usable event). No I/O, no network. Scrubbing, caps, and the
+// correction flag are applied here so downstream stages never see raw prose.
+//
+// Field-name constants below were confirmed by inspecting real transcripts at
+// ~/.claude/projects/-Users-dmitry-Desktop-CursorProjects-harnessgap/*.jsonl
+// (one JSON object per line). Behavioral contract is pinned to the task-5 brief
+// regardless of upstream schema drift.
+import { scrubCmd, scrubFiles, scrubQuery } from './scrub.js';
+import { detectCorrection } from './correction.js';
+import { mapToolKind } from './taxonomy.js';
+// --- Confirmed Claude Code transcript field paths (encoded as constants) ---
+const RECORD_TYPE = {
+    USER: 'user',
+    ASSISTANT: 'assistant',
+};
+const FIELD = {
+    TYPE: 'type',
+    MESSAGE: 'message',
+    CONTENT: 'content',
+    TIMESTAMP: 'timestamp',
+    DURATION_MS: 'duration_ms',
+};
+const CONTENT_TYPE = {
+    TOOL_USE: 'tool_use',
+    TEXT: 'text',
+    TOOL_RESULT: 'tool_result',
+};
+// Tool-use input field names (confirmed: Bash.command, Read.file_path,
+// Edit.{file_path,old_string,new_string}, Write.{file_path,content},
+// Grep/Glob.pattern, LS.path).
+const TOOL_INPUT = {
+    COMMAND: 'command',
+    FILE_PATH: 'file_path',
+    PATH: 'path',
+    FILES: 'files',
+    PATTERN: 'pattern',
+    OLD_STRING: 'old_string',
+    NEW_STRING: 'new_string',
+    CONTENT: 'content',
+};
+// tool_result content-item field names (confirmed: is_error present on real
+// records; interrupted absent in sample but part of the contract — default false).
+const RESULT_FIELD = {
+    IS_ERROR: 'is_error',
+    INTERRUPTED: 'interrupted',
+};
+// --- Helpers (module-private; only normalizeRecord is exported) ---
+function emptyDigest() {
+    return { files: [], cmd: null, query: null, lines_changed: null };
+}
+function findContentItem(content, type) {
+    if (!Array.isArray(content))
+        return null;
+    for (const item of content) {
+        if (item && typeof item === 'object' && item.type === type) {
+            return item;
+        }
+    }
+    return null;
+}
+/** Extract user/assistant prose text from a message content field. */
+function extractText(content) {
+    if (typeof content === 'string')
+        return content;
+    if (Array.isArray(content)) {
+        for (const item of content) {
+            if (typeof item === 'string')
+                return item;
+            if (item && typeof item === 'object') {
+                const ci = item;
+                if (ci.type === CONTENT_TYPE.TEXT && typeof ci.text === 'string')
+                    return ci.text;
+            }
+        }
+    }
+    return null;
+}
+/**
+ * Extract file paths from a tool-use input. If `input.files` is a non-empty
+ * array of strings, use it (multi-file case); otherwise collect the single
+ * `file_path` / `path` fields present.
+ */
+function extractPaths(input) {
+    const filesRaw = input[TOOL_INPUT.FILES];
+    if (Array.isArray(filesRaw)) {
+        const files = filesRaw.filter((f) => typeof f === 'string');
+        if (files.length > 0)
+            return files;
+    }
+    const paths = [];
+    const fp = input[TOOL_INPUT.FILE_PATH];
+    if (typeof fp === 'string')
+        paths.push(fp);
+    const p = input[TOOL_INPUT.PATH];
+    if (typeof p === 'string')
+        paths.push(p);
+    return paths;
+}
+/**
+ * Count lines in the "new content" of an edit, as a proxy for the amount of
+ * code touched (feeds explore_ratio and wall_clock_per_line). For Edit →
+ * new_string; for Write/NotebookEdit → content. Counts `\n`-separated lines;
+ * returns 0 if the field is absent or empty. A consistent "amount of new code"
+ * proxy is what matters downstream.
+ */
+function countNewLines(input) {
+    const ns = input[TOOL_INPUT.NEW_STRING];
+    const s = typeof ns === 'string'
+        ? ns
+        : typeof input[TOOL_INPUT.CONTENT] === 'string'
+            ? input[TOOL_INPUT.CONTENT]
+            : null;
+    if (s === null || s === '')
+        return 0;
+    return s.split('\n').length;
+}
+/** Build the InputDigest for a tool_use event based on its ToolKind. */
+function digestForTool(tool, input) {
+    switch (tool) {
+        case 'exec': {
+            const cmd = input[TOOL_INPUT.COMMAND];
+            return {
+                files: [],
+                cmd: scrubCmd(typeof cmd === 'string' ? cmd : ''),
+                query: null,
+                lines_changed: null,
+            };
+        }
+        case 'read':
+        case 'list':
+            return {
+                files: scrubFiles(extractPaths(input)),
+                cmd: null,
+                query: null,
+                lines_changed: null,
+            };
+        case 'edit':
+            return {
+                files: scrubFiles(extractPaths(input)),
+                cmd: null,
+                query: null,
+                lines_changed: countNewLines(input),
+            };
+        case 'search': {
+            const pattern = input[TOOL_INPUT.PATTERN];
+            return {
+                files: [],
+                cmd: null,
+                query: scrubQuery(typeof pattern === 'string' ? pattern : ''),
+                lines_changed: null,
+            };
+        }
+        case 'other':
+        default:
+            return emptyDigest();
+    }
+}
+function isRecord(raw) {
+    return raw !== null && typeof raw === 'object';
+}
+// --- Public API ---
+/**
+ * Convert one parsed Claude Code JSONL record into a NormalizedEvent, or return
+ * null when the record carries no usable event (system entries, ai-title, etc.).
+ *
+ * Mapping:
+ *   - assistant tool_use      → tool_call (tool + digest from input; ok=true)
+ *   - user-record tool_result → tool_call (tool=null; ok=!is_error; interrupted)
+ *   - user text               → user_msg (correction via detectCorrection; no raw text)
+ *   - assistant text          → assistant_msg
+ *   - anything else           → null
+ *
+ * `ctx.prevToolCall` is passed to detectCorrection for user messages; it is NOT
+ * mutated here (the stream layer updates it between records). No raw prose is
+ * emitted: userText is consumed by detectCorrection and discarded.
+ */
+export function normalizeRecord(raw, ctx) {
+    if (!isRecord(raw))
+        return null;
+    const rec = raw;
+    const t = typeof rec[FIELD.TIMESTAMP] === 'string' ? rec[FIELD.TIMESTAMP] : '';
+    const duration_ms = typeof rec[FIELD.DURATION_MS] === 'number' ? rec[FIELD.DURATION_MS] : 0;
+    const msg = rec[FIELD.MESSAGE];
+    // --- User record: may carry a tool_result (nested) or plain text ---
+    if (rec[FIELD.TYPE] === RECORD_TYPE.USER && msg && typeof msg === 'object') {
+        const content = msg[FIELD.CONTENT];
+        // tool_result nested in a user message → tool_call result event.
+        const toolResult = findContentItem(content, CONTENT_TYPE.TOOL_RESULT);
+        if (toolResult) {
+            return {
+                t,
+                kind: 'tool_call',
+                tool: null, // result records carry no tool name
+                input_digest: emptyDigest(),
+                ok: toolResult[RESULT_FIELD.IS_ERROR] !== true,
+                interrupted: toolResult[RESULT_FIELD.INTERRUPTED] === true,
+                duration_ms,
+                correction: null,
+            };
+        }
+        // Plain text → user_msg (run correction detection; discard the text).
+        const userText = extractText(content);
+        if (userText !== null) {
+            const correction = detectCorrection(ctx.prevToolCall, userText);
+            return {
+                t,
+                kind: 'user_msg',
+                tool: null,
+                input_digest: emptyDigest(),
+                ok: true,
+                interrupted: false,
+                duration_ms,
+                correction,
+            };
+        }
+        return null;
+    }
+    // --- Assistant record: tool_use or text ---
+    if (rec[FIELD.TYPE] === RECORD_TYPE.ASSISTANT && msg && typeof msg === 'object') {
+        const content = msg[FIELD.CONTENT];
+        // tool_use → tool_call event with digest extracted from input.
+        const toolUse = findContentItem(content, CONTENT_TYPE.TOOL_USE);
+        if (toolUse) {
+            const name = typeof toolUse.name === 'string' ? toolUse.name : '';
+            const input = toolUse.input && typeof toolUse.input === 'object'
+                ? toolUse.input
+                : {};
+            const tool = mapToolKind(name);
+            return {
+                t,
+                kind: 'tool_call',
+                tool,
+                input_digest: digestForTool(tool, input),
+                ok: true, // ok is determined by the later tool_result, not the call
+                interrupted: false,
+                duration_ms,
+                correction: null,
+            };
+        }
+        // Text only → assistant_msg.
+        const text = extractText(content);
+        if (text !== null) {
+            return {
+                t,
+                kind: 'assistant_msg',
+                tool: null,
+                input_digest: emptyDigest(),
+                ok: true,
+                interrupted: false,
+                duration_ms,
+                correction: null,
+            };
+        }
+        return null;
+    }
+    // Unknown record type (ai-title, summary, system entry, etc.) → skip.
+    return null;
+}
+//# sourceMappingURL=parse.js.map

package/dist/adapter/parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.js","sourceRoot":"","sources":["../../src/adapter/parse.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;AAChF,6EAA6E;AAC7E,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;AAChF,uCAAuC;AAGvC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,8EAA8E;AAE9E,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,WAAW;CACd,CAAC;AAEX,MAAM,KAAK,GAAG;IACZ,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;CAClB,CAAC;AAEX,MAAM,YAAY,GAAG;IACnB,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;CAClB,CAAC;AAEX,uEAAuE;AACvE,qEAAqE;AACrE,+BAA+B;AAC/B,MAAM,UAAU,GAAG;IACjB,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,UAAU,EAAE,YAAY;IACxB,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;CACV,CAAC;AAEX,4EAA4E;AAC5E,mFAAmF;AACnF,MAAM,YAAY,GAAG;IACnB,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,aAAa;CAClB,CAAC;AAyBX,qEAAqE;AAErE,SAAS,WAAW;IAClB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB,EAAE,IAAY;IACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAK,IAAoB,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC5E,OAAO,IAAmB,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC1C,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,MAAM,EAAE,GAAG,IAAmB,CAAC;gBAC/B,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,EAAE,CAAC,IAAI,CAAC;YACnF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,KAA8B;IAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QACzE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACrC,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAA8B;IACnD,MAAM,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,CAAC,GACL,OAAO,EAAE,KAAK,QAAQ;QACpB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,QAAQ;YAC7C,CAAC,CAAE,KAAK,CAAC,UAAU,CAAC,OAAO,CAAY;YACvC,CAAC,CAAC,IAAI,CAAC;IACb,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AAC9B,CAAC;AAED,wEAAwE;AACxE,SAAS,aAAa,CAAC,IAAc,EAAE,KAA8B;IACnE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO;gBACL,KAAK,EAAE,EAAE;gBACT,GAAG,EAAE,QAAQ,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,KAAK,EAAE,IAAI;gBACX,aAAa,EAAE,IAAI;aACpB,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACT,OAAO;gBACL,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACtC,GAAG,EAAE,IAAI;gBACT,KAAK,EAAE,IAAI;gBACX,aAAa,EAAE,IAAI;aACpB,CAAC;QACJ,KAAK,MAAM;YACT,OAAO;gBACL,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACtC,GAAG,EAAE,IAAI;gBACT,KAAK,EAAE,IAAI;gBACX,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC;aACpC,CAAC;QACJ,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC1C,OAAO;gBACL,KAAK,EAAE,EAAE;gBACT,GAAG,EAAE,IAAI;gBACT,KAAK,EAAE,UAAU,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,aAAa,EAAE,IAAI;aACpB,CAAC;QACJ,CAAC;QACD,KAAK,OAAO,CAAC;QACb;YACE,OAAO,WAAW,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC;AACjD,CAAC;AAED,qBAAqB;AAErB;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAY,EACZ,GAAgD;IAEhD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,GAAG,GAAqB,GAAG,CAAC;IAClC,MAAM,CAAC,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,WAAW,GACf,OAAO,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE/B,sEAAsE;IACtE,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC,IAAI,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC3E,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEnC,iEAAiE;QACjE,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,UAAU,EAAE,CAAC;YACf,OAAO;gBACL,CAAC;gBACD,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,IAAI,EAAE,oCAAoC;gBAChD,YAAY,EAAE,WAAW,EAAE;gBAC3B,EAAE,EAAE,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,IAAI;gBAC9C,WAAW,EAAE,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,IAAI;gBAC1D,WAAW;gBACX,UAAU,EAAE,IAAI;aACjB,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAChE,OAAO;gBACL,CAAC;gBACD,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,IAAI;gBACV,YAAY,EAAE,WAAW,EAAE;gBAC3B,EAAE,EAAE,IAAI;gBACR,WAAW,EAAE,KAAK;gBAClB,WAAW;gBACX,UAAU;aACX,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6CAA6C;IAC7C,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC,SAAS,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAChF,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEnC,+DAA+D;QAC/D,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,KAAK,GACT,OAAO,CAAC,KAAK,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;gBAChD,CAAC,CAAE,OAAO,CAAC,KAAiC;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO;gBACL,CAAC;gBACD,IAAI,EAAE,WAAW;gBACjB,IAAI;gBACJ,YAAY,EAAE,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC;gBACxC,EAAE,EAAE,IAAI,EAAE,0DAA0D;gBACpE,WAAW,EAAE,KAAK;gBAClB,WAAW;gBACX,UAAU,EAAE,IAAI;aACjB,CAAC;QACJ,CAAC;QAED,6BAA6B;QAC7B,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO;gBACL,CAAC;gBACD,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,IAAI;gBACV,YAAY,EAAE,WAAW,EAAE;gBAC3B,EAAE,EAAE,IAAI;gBACR,WAAW,EAAE,KAAK;gBAClB,WAAW;gBACX,UAAU,EAAE,IAAI;aACjB,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sEAAsE;IACtE,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/adapter/scrub.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Scrub an exec command string: apply the full catalog, then truncate to 512
+ * chars (no marker). Replacements use the fixed sentinel `***REDACTED***`.
+ */
+export declare function scrubCmd(cmd: string): string;
+/**
+ * Scrub a search/query string: same catalog and length cap as `scrubCmd`.
+ */
+export declare function scrubQuery(q: string): string;
+/**
+ * Scrub a list of file paths: replace any path matching a credential-file glob
+ * with the sentinel, leave others unchanged, then drop entries beyond 50 (no
+ * marker). Only the credential-file rule applies here — not the full catalog.
+ */
+export declare function scrubFiles(files: string[]): string[];