harnessgap 0.1.0

package/dist/adapter/scrub.js

@@ -0,0 +1,97 @@
+// Pattern-catalog secret scrubber — the privacy backbone for slice-2 persistence.
+// Pure functions, no I/O, no entropy heuristic. Seven rules applied in a fixed
+// order so earlier rules (heredoc blocks) are not partially mangled by later
+// ones (env-var). The same sentinel literal is used everywhere.
+const SENTINEL = '***REDACTED***';
+const MAX_CMD_QUERY = 512;
+const MAX_FILES = 50;
+/**
+ * Apply the full 7-rule pattern catalog to a command/query string. Rules run in
+ * the documented order: heredoc keys → env-vars → auth headers → URL creds →
+ * flag secrets → credential-file paths → known-format tokens.
+ */
+function scrubCatalog(s) {
+    // (1) Heredoc / inline private keys — replace the entire PEM block (BEGIN
+    //     through END, inclusive) with the sentinel.
+    s = s.replace(/-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z0-9 ]*-----/g, SENTINEL);
+    // (2) Env-var assignments — keep KEY= when KEY is UPPERCASE_WITH_UNDERSCORES;
+    //     redact the value. Optional export/set/env prefix is preserved.
+    s = s.replace(/(^|\s)((?:export|set|env)\s+)?([A-Z][A-Z0-9_]*)=(?:"[^"]*"|'[^']*'|\S+)/g, (_m, pre, prefix, key) => `${pre}${prefix ?? ''}${key}=${SENTINEL}`);
+    // (3) Authorization headers and bare Bearer tokens. Case-insensitive: HTTP
+    //     headers are case-insensitive (RFC 7230), so `authorization: bearer`
+    //     must scrub the same as the canonical form.
+    s = s.replace(/Authorization:\s*[^\n'"]*/gi, `Authorization: ${SENTINEL}`);
+    s = s.replace(/Bearer\s+[A-Za-z0-9._+/=-]+/gi, `Bearer ${SENTINEL}`);
+    // (4) URL-embedded credentials — ://user:pass@, ://token@, or ://:pass@
+    //     (empty username, e.g. redis://:s3cr3t@host) → ://***REDACTED***@.
+    //     Host/scheme kept; rejects a bare ://@ with no credential component.
+    s = s.replace(/(:\/\/)(?:[^\s/@:]+(?::[^\s/@]+)?|:[^\s/@]+)@/g, `$1${SENTINEL}@`);
+    // (5) Flag secrets — -p <val>, -u <user:pass>, --password/--secret/--token/
+    //     --api-key/--access-key (case-insensitive). Value redacted, flag kept.
+    s = s.replace(/(^|\s)(--password|--secret|--token|--api-key|--access-key|-p|-u)\s+(\S+)/gi, (_m, pre, flag) => `${pre}${flag} ${SENTINEL}`);
+    s = s.replace(/(^|\s)(--password|--secret|--token|--api-key|--access-key)=("[^"]*"|'[^']*'|\S+)/gi, (_m, pre, flag) => `${pre}${flag}=${SENTINEL}`);
+    // (6) Credential-file path globs — check each whitespace/quote-delimited
+    //     token; if it is a credential-file path, replace with sentinel.
+    s = s.replace(/[^\s'"]+/g, (token) => isCredentialFile(token) ? SENTINEL : token);
+    // (7) Known-format tokens — AWS access-key IDs, GitHub tokens, Slack tokens,
+    //     JWTs.
+    s = s.replace(/AKIA[0-9A-Z]{16}/g, SENTINEL);
+    s = s.replace(/gh[oprs]_[A-Za-z0-9]{36}/g, SENTINEL);
+    s = s.replace(/xox[baprs]-[A-Za-z0-9-]+/g, SENTINEL);
+    s = s.replace(/eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g, SENTINEL);
+    return s;
+}
+/**
+ * Test whether a path matches a credential-file glob from the catalog.
+ * Globs (basename unless a directory suffix is noted): .env, *.pem, *.key,
+ * .aws/credentials (path suffix), .npmrc, id_rsa*, .pgpass, .htpasswd,
+ * service-account*.json, credentials.json.
+ */
+function isCredentialFile(p) {
+    const base = p.split('/').pop() ?? p;
+    if (base === '.env')
+        return true;
+    if (base.endsWith('.pem'))
+        return true;
+    if (base.endsWith('.key'))
+        return true;
+    if (p.endsWith('.aws/credentials'))
+        return true;
+    if (base === '.npmrc')
+        return true;
+    if (base.startsWith('id_rsa'))
+        return true;
+    if (base === '.pgpass')
+        return true;
+    if (base === '.htpasswd')
+        return true;
+    if (/^service-account.*\.json$/.test(base))
+        return true;
+    if (base === 'credentials.json')
+        return true;
+    return false;
+}
+/**
+ * Scrub an exec command string: apply the full catalog, then truncate to 512
+ * chars (no marker). Replacements use the fixed sentinel `***REDACTED***`.
+ */
+export function scrubCmd(cmd) {
+    return scrubCatalog(cmd).slice(0, MAX_CMD_QUERY);
+}
+/**
+ * Scrub a search/query string: same catalog and length cap as `scrubCmd`.
+ */
+export function scrubQuery(q) {
+    return scrubCatalog(q).slice(0, MAX_CMD_QUERY);
+}
+/**
+ * Scrub a list of file paths: replace any path matching a credential-file glob
+ * with the sentinel, leave others unchanged, then drop entries beyond 50 (no
+ * marker). Only the credential-file rule applies here — not the full catalog.
+ */
+export function scrubFiles(files) {
+    return files
+        .map((f) => (isCredentialFile(f) ? SENTINEL : f))
+        .slice(0, MAX_FILES);
+}
+//# sourceMappingURL=scrub.js.map

package/dist/adapter/scrub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub.js","sourceRoot":"","sources":["../../src/adapter/scrub.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,+EAA+E;AAC/E,6EAA6E;AAC7E,gEAAgE;AAEhE,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAClC,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB;;;;GAIG;AACH,SAAS,YAAY,CAAC,CAAS;IAC7B,0EAA0E;IAC1E,iDAAiD;IACjD,CAAC,GAAG,CAAC,CAAC,OAAO,CACX,wEAAwE,EACxE,QAAQ,CACT,CAAC;IAEF,8EAA8E;IAC9E,qEAAqE;IACrE,CAAC,GAAG,CAAC,CAAC,OAAO,CACX,0EAA0E,EAC1E,CAAC,EAAE,EAAE,GAAW,EAAE,MAA0B,EAAE,GAAW,EAAE,EAAE,CAC3D,GAAG,GAAG,GAAG,MAAM,IAAI,EAAE,GAAG,GAAG,IAAI,QAAQ,EAAE,CAC5C,CAAC;IAEF,2EAA2E;IAC3E,0EAA0E;IAC1E,iDAAiD;IACjD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,6BAA6B,EAAE,kBAAkB,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,+BAA+B,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;IAErE,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gDAAgD,EAAE,KAAK,QAAQ,GAAG,CAAC,CAAC;IAElF,4EAA4E;IAC5E,4EAA4E;IAC5E,CAAC,GAAG,CAAC,CAAC,OAAO,CACX,4EAA4E,EAC5E,CAAC,EAAE,EAAE,GAAW,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,IAAI,IAAI,QAAQ,EAAE,CAC/D,CAAC;IACF,CAAC,GAAG,CAAC,CAAC,OAAO,CACX,oFAAoF,EACpF,CAAC,EAAE,EAAE,GAAW,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,IAAI,IAAI,QAAQ,EAAE,CAC/D,CAAC;IAEF,yEAAyE;IACzE,qEAAqE;IACrE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAa,EAAE,EAAE,CAC3C,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAC3C,CAAC;IAEF,6EAA6E;IAC7E,YAAY;IACZ,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,oDAAoD,EAAE,QAAQ,CAAC,CAAC;IAE9E,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,CAAS;IACjC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAe;IACxC,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAChD,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACzB,CAAC"}

package/dist/adapter/stream.d.ts

@@ -0,0 +1,14 @@
+import type { NormalizedEnvelope, Warnings } from '../types.js';
+type StreamWarnings = Pick<Warnings, 'malformed_lines' | 'oversized_lines' | 'truncated_sessions'>;
+/**
+ * Stream one .jsonl transcript → { envelope, cwd, warnings }. Reads line-by-line
+ * via node:readline (never slurps). Enforces 1 MB line / 5000 event / 50 MB byte
+ * caps. Fail-open: malformed JSON and oversized lines are skipped + counted,
+ * never thrown. Deterministic given the file.
+ */
+export declare function streamSession(filePath: string): Promise<{
+    envelope: NormalizedEnvelope;
+    cwd: string;
+    warnings: StreamWarnings;
+}>;
+export {};

package/dist/adapter/stream.js

@@ -0,0 +1,207 @@
+// Streaming transcript reader — the only I/O in the adapter. Reads one .jsonl
+// transcript file line-by-line (never slurps the whole file), enforces size
+// caps, calls normalizeRecord per parsed line, threads ctx.prevToolCall through
+// records in order, merges tool_use + tool_result pairs into single tool_call
+// events (see mergeToolCalls), and returns a NormalizedEnvelope + the session's
+// representative cwd + warning counts. Fail-open: never throws on bad input
+// (malformed/oversized/truncated); skips and counts instead.
+//
+// Field paths: `cwd` is a top-level string on most user/assistant records
+// (confirmed from real transcripts; documented in test/parse.test.ts). We read
+// it from the raw parsed record BEFORE normalizeRecord (which does not emit it).
+import { createReadStream } from 'node:fs';
+import * as readline from 'node:readline';
+import * as path from 'node:path';
+import { normalizeRecord } from './parse.js';
+// --- Caps (verbatim from the task brief) ---
+const LINE_CAP = 1_048_576; // 1 MB: lines over this are skipped (oversized_lines++)
+const EVENT_CAP = 5000; // once 5000 events collected, drop the rest (truncated)
+const BYTE_CAP = 52_428_800; // 50 MB: stop reading once cumulative bytes ≥ this (truncated)
+/**
+ * Stream one .jsonl transcript → { envelope, cwd, warnings }. Reads line-by-line
+ * via node:readline (never slurps). Enforces 1 MB line / 5000 event / 50 MB byte
+ * caps. Fail-open: malformed JSON and oversized lines are skipped + counted,
+ * never thrown. Deterministic given the file.
+ */
+export async function streamSession(filePath) {
+    const events = [];
+    let malformed_lines = 0;
+    let oversized_lines = 0;
+    let truncated = false;
+    let cumulativeBytes = 0;
+    let cwd = '';
+    // Session span tracked across ALL parsed records (for envelope.duration_ms /
+    // started_at), regardless of whether they became kept events. Result records'
+    // timestamps are included so the span reflects the full session end-to-end.
+    let firstRecordT = null;
+    let firstRecordTs = null;
+    let lastRecordT = null;
+    const ctx = { prevToolCall: null };
+    // session_id = filename stem (basename without the last extension).
+    const session_id = path.basename(filePath).replace(/\.[^.]+$/, '');
+    try {
+        const rl = readline.createInterface({
+            input: createReadStream(filePath, { encoding: 'utf8' }),
+            crlfDelay: Infinity,
+        });
+        try {
+            for await (const line of rl) {
+                // Bytes read for this line (UTF-8) + 1 for the stripped newline.
+                const lineBytes = Buffer.byteLength(line, 'utf8') + 1;
+                cumulativeBytes += lineBytes;
+                if (lineBytes > LINE_CAP) {
+                    oversized_lines++;
+                }
+                else {
+                    let parsed;
+                    let parseOk = true;
+                    try {
+                        parsed = JSON.parse(line);
+                    }
+                    catch {
+                        parseOk = false;
+                    }
+                    if (parseOk) {
+                        if (parsed !== null && typeof parsed === 'object') {
+                            const rec = parsed;
+                            // Extract cwd from the first record that carries a non-empty one.
+                            if (cwd === '') {
+                                const c = rec.cwd;
+                                if (typeof c === 'string' && c.length > 0)
+                                    cwd = c;
+                            }
+                            // Track session span across ALL parsed records (system records,
+                            // tool_use, tool_result — regardless of whether they became kept
+                            // events), so duration_ms reflects the full session.
+                            const ts = rec.timestamp;
+                            if (typeof ts === 'string') {
+                                const ms = Date.parse(ts);
+                                if (!Number.isNaN(ms)) {
+                                    if (firstRecordT === null) {
+                                        firstRecordT = ms;
+                                        firstRecordTs = ts;
+                                    }
+                                    lastRecordT = ms;
+                                }
+                            }
+                        }
+                        const ev = normalizeRecord(parsed, ctx);
+                        if (ev !== null) {
+                            if (events.length < EVENT_CAP) {
+                                events.push(ev);
+                                // Thread prevToolCall: the most recent assistant tool_use (non-null
+                                // tool) is what the next user_msg sees.
+                                if (ev.kind === 'tool_call' && ev.tool !== null) {
+                                    ctx.prevToolCall = { tool: ev.tool };
+                                }
+                            }
+                            else {
+                                truncated = true;
+                            }
+                        }
+                    }
+                    else {
+                        malformed_lines++;
+                    }
+                }
+                // Stop conditions (checked after each line).
+                if (events.length >= EVENT_CAP) {
+                    truncated = true;
+                    break;
+                }
+                if (cumulativeBytes >= BYTE_CAP) {
+                    truncated = true;
+                    break;
+                }
+            }
+        }
+        finally {
+            rl.close();
+        }
+    }
+    catch {
+        // Stream/read error (missing/unreadable file, etc.) — fail open: return
+        // whatever was collected so far, no throw.
+    }
+    // Merge tool_use + tool_result pairs into single tool_call events so downstream
+    // signals can see tool + ok on the same event (see mergeToolCalls docs).
+    const merged = mergeToolCalls(events);
+    const started_at = firstRecordTs ?? (merged.length > 0 ? merged[0].t : '');
+    const envelope = {
+        schema_version: 1,
+        session_id,
+        agent: 'claude-code',
+        repo: '',
+        started_at,
+        duration_ms: firstRecordT !== null && lastRecordT !== null ? lastRecordT - firstRecordT : 0,
+        events: merged,
+        truncated,
+        event_count: merged.length,
+    };
+    return {
+        envelope,
+        cwd,
+        warnings: {
+            malformed_lines,
+            oversized_lines,
+            truncated_sessions: truncated ? 1 : 0,
+        },
+    };
+}
+/**
+ * Post-process: merge each tool_use + tool_result pair into ONE tool_call event.
+ *
+ * `normalizeRecord` (pure, single-record) emits two events per tool invocation:
+ *   - tool_use    → tool_call (tool !== null, ok=true placeholder, interrupted=false)
+ *   - tool_result → tool_call (tool=null, ok=!is_error, interrupted=result)
+ * Downstream signals need tool + ok on the SAME event (e.g. failure_streak filters
+ * `tool==='exec' && ok===false`). This merge closes that gap.
+ *
+ * Pairing: each tool_result is paired with the most recent unresolved tool_use
+ * (stack — correct for Claude Code's sequential tool_use→result ordering, where
+ * each call is immediately followed by its own result). The result's
+ * ok/interrupted/duration_ms/t are merged onto the tool_use event; the result
+ * event is dropped from the list.
+ *
+ * Orphan results (no preceding unresolved tool_use) → dropped.
+ * Tool_uses with no result (session interrupted before result arrived) → kept
+ * with the placeholder ok=true, interrupted=false.
+ *
+ * Time handling: when paired, the merged event's `t` is set to the RESULT's `t`
+ * (not the tool_use's `t`). This keeps the session span correct for the
+ * wall_clock_per_line signal (which uses `events[last].t − events[0].t`): the
+ * last result's time is preserved on the merged event even though the result
+ * event itself is removed. Without this, dropping result events would shrink the
+ * computed span. When unpaired (no result), `t` stays the tool_use's time.
+ */
+function mergeToolCalls(events) {
+    const result = [];
+    // Stack of indices into `result` pointing at unresolved tool_use events.
+    const unresolved = [];
+    for (const ev of events) {
+        if (ev.kind === 'tool_call' && ev.tool === null) {
+            // tool_result event: merge onto the most recent unresolved tool_use.
+            const idx = unresolved.pop();
+            if (idx === undefined)
+                continue; // orphan result → drop
+            const use = result[idx];
+            result[idx] = {
+                ...use,
+                ok: ev.ok,
+                interrupted: ev.interrupted,
+                duration_ms: ev.duration_ms,
+                t: ev.t, // result time preserves the session span
+            };
+        }
+        else {
+            result.push(ev);
+            if (ev.kind === 'tool_call' && ev.tool !== null) {
+                // tool_use event: track for later merging with its result.
+                unresolved.push(result.length - 1);
+            }
+        }
+    }
+    // Unresolved tool_uses remain with ok=true placeholder, interrupted=false.
+    return result;
+}
+//# sourceMappingURL=stream.js.map

package/dist/adapter/stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.js","sourceRoot":"","sources":["../../src/adapter/stream.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,4EAA4E;AAC5E,6DAA6D;AAC7D,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,iFAAiF;AAEjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,8CAA8C;AAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,wDAAwD;AACpF,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,wDAAwD;AAChF,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,+DAA+D;AAI5F;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB;IAEhB,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,MAAM,GAAG,GAAgD,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAEhF,oEAAoE;IACpE,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAEnE,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;YAClC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YACvD,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC5B,iEAAiE;gBACjE,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtD,eAAe,IAAI,SAAS,CAAC;gBAE7B,IAAI,SAAS,GAAG,QAAQ,EAAE,CAAC;oBACzB,eAAe,EAAE,CAAC;gBACpB,CAAC;qBAAM,CAAC;oBACN,IAAI,MAAe,CAAC;oBACpB,IAAI,OAAO,GAAG,IAAI,CAAC;oBACnB,IAAI,CAAC;wBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC5B,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,GAAG,KAAK,CAAC;oBAClB,CAAC;oBACD,IAAI,OAAO,EAAE,CAAC;wBACZ,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;4BAClD,MAAM,GAAG,GAAG,MAAgD,CAAC;4BAC7D,kEAAkE;4BAClE,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;gCACf,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC;gCAClB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;oCAAE,GAAG,GAAG,CAAC,CAAC;4BACrD,CAAC;4BACD,gEAAgE;4BAChE,iEAAiE;4BACjE,qDAAqD;4BACrD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC;4BACzB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;gCAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gCAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;oCACtB,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;wCAC1B,YAAY,GAAG,EAAE,CAAC;wCAClB,aAAa,GAAG,EAAE,CAAC;oCACrB,CAAC;oCACD,WAAW,GAAG,EAAE,CAAC;gCACnB,CAAC;4BACH,CAAC;wBACH,CAAC;wBACD,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;wBACxC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;4BAChB,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gCAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gCAChB,oEAAoE;gCACpE,wCAAwC;gCACxC,IAAI,EAAE,CAAC,IAAI,KAAK,WAAW,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;oCAChD,GAAG,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;gCACvC,CAAC;4BACH,CAAC;iCAAM,CAAC;gCACN,SAAS,GAAG,IAAI,CAAC;4BACnB,CAAC;wBACH,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,eAAe,EAAE,CAAC;oBACpB,CAAC;gBACH,CAAC;gBAED,6CAA6C;gBAC7C,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;oBAC/B,SAAS,GAAG,IAAI,CAAC;oBACjB,MAAM;gBACR,CAAC;gBACD,IAAI,eAAe,IAAI,QAAQ,EAAE,CAAC;oBAChC,SAAS,GAAG,IAAI,CAAC;oBACjB,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,2CAA2C;IAC7C,CAAC;IAED,gFAAgF;IAChF,yEAAyE;IACzE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,aAAa,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAuB;QACnC,cAAc,EAAE,CAAC;QACjB,UAAU;QACV,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,EAAE;QACR,UAAU;QACV,WAAW,EACT,YAAY,KAAK,IAAI,IAAI,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,EAAE,MAAM;QACd,SAAS;QACT,WAAW,EAAE,MAAM,CAAC,MAAM;KAC3B,CAAC;IACF,OAAO;QACL,QAAQ;QACR,GAAG;QACH,QAAQ,EAAE;YACR,eAAe;YACf,eAAe;YACf,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACtC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,SAAS,cAAc,CAAC,MAAyB;IAC/C,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,yEAAyE;IACzE,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,IAAI,EAAE,CAAC,IAAI,KAAK,WAAW,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAChD,qEAAqE;YACrE,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YAC7B,IAAI,GAAG,KAAK,SAAS;gBAAE,SAAS,CAAC,uBAAuB;YACxD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,GAAG;gBACZ,GAAG,GAAG;gBACN,EAAE,EAAE,EAAE,CAAC,EAAE;gBACT,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,yCAAyC;aACnD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChB,IAAI,EAAE,CAAC,IAAI,KAAK,WAAW,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAChD,2DAA2D;gBAC3D,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IACD,2EAA2E;IAC3E,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/adapter/taxonomy.d.ts

@@ -0,0 +1,7 @@
+import type { ToolKind } from '../types.js';
+/**
+ * Map a Claude Code tool name to a ToolKind.
+ * Unknown names (Task*, WebSearch, WebFetch, mcp__*, etc.) and empty strings
+ * map to 'other'. Case-sensitive: Claude Code tool names are PascalCase.
+ */
+export declare function mapToolKind(ccToolName: string): ToolKind;

package/dist/adapter/taxonomy.js

@@ -0,0 +1,21 @@
+// Claude Code tool-name → ToolKind map. Pure lookup, no I/O.
+// Pinned to the six ToolKind values in src/types.ts. Unknown / empty → 'other'.
+const TOOL_KIND_MAP = {
+    Read: 'read',
+    Grep: 'search',
+    Glob: 'search',
+    LS: 'list',
+    Edit: 'edit',
+    Write: 'edit',
+    NotebookEdit: 'edit',
+    Bash: 'exec',
+};
+/**
+ * Map a Claude Code tool name to a ToolKind.
+ * Unknown names (Task*, WebSearch, WebFetch, mcp__*, etc.) and empty strings
+ * map to 'other'. Case-sensitive: Claude Code tool names are PascalCase.
+ */
+export function mapToolKind(ccToolName) {
+    return TOOL_KIND_MAP[ccToolName] ?? 'other';
+}
+//# sourceMappingURL=taxonomy.js.map

package/dist/adapter/taxonomy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taxonomy.js","sourceRoot":"","sources":["../../src/adapter/taxonomy.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,gFAAgF;AAIhF,MAAM,aAAa,GAA6B;IAC9C,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,QAAQ;IACd,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,MAAM;IACb,YAAY,EAAE,MAAM;IACpB,IAAI,EAAE,MAAM;CACb,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,UAAkB;IAC5C,OAAO,aAAa,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC;AAC9C,CAAC"}

package/dist/aggregate/leaderboard.d.ts

@@ -0,0 +1,26 @@
+import type { AreaRow, Config, StruggleRecord } from '../types.js';
+/**
+ * Aggregate per-session `StruggleRecord`s into per-area `AreaRow`s plus a summary.
+ *
+ * 1. For each record, for each of its `areas`, add the record (weighted by
+ *    `area.weight`) to that area's `sessions_total`; if `flagged`, add to
+ *    `sessions_flagged` (weighted).
+ * 2. `mean_score` = average of `score_pct` over flagged records touching the
+ *    area (0 if none flagged).
+ * 3. `top_signals` (per area, max 3): median raw signal value across the area's
+ *    flagged sessions, top 3 by value desc, `display` formatted per kind.
+ * 4. Sort rows by `sessions_flagged` desc, then `mean_score` desc.
+ * 5. `summary.unlocalized` = count of records with empty `areas`;
+ *    `flagged`/`unflagged` = counts of all records (unlocalized included).
+ *
+ * `cfg` is part of the signature contract but unused in v1 (raw medians; no
+ * weighting knobs read). Reserved for future ranking configuration.
+ */
+export declare function aggregateAreas(records: StruggleRecord[], cfg: Config): {
+    rows: AreaRow[];
+    summary: {
+        flagged: number;
+        unflagged: number;
+        unlocalized: number;
+    };
+};

package/dist/aggregate/leaderboard.js

@@ -0,0 +1,168 @@
+// Pure area aggregation: rolls per-session StruggleRecords up into per-area
+// AreaRows (weighted counting, mean_score, top_signals) plus a summary.
+// No I/O, no mutation of inputs.
+// The seven signals in a fixed canonical order. Ties in the top-signals ranking
+// preserve this order (stable sort), so output is deterministic.
+const SIGNAL_SPECS = [
+    { name: 'explore_ratio', field: 'explore_ratio', kind: 'ratio' },
+    { name: 'reread', field: 'reread', kind: 'count' },
+    { name: 'failure_streak', field: 'failure_streak', kind: 'count' },
+    { name: 'corrections', field: 'corrections', kind: 'count' },
+    { name: 'abandonment', field: 'abandonment', kind: 'boolean' },
+    { name: 'oscillation', field: 'oscillation', kind: 'count' },
+    { name: 'wall_clock_per_line', field: 'wall_clock_per_line_ms', kind: 'duration' },
+];
+/**
+ * Aggregate per-session `StruggleRecord`s into per-area `AreaRow`s plus a summary.
+ *
+ * 1. For each record, for each of its `areas`, add the record (weighted by
+ *    `area.weight`) to that area's `sessions_total`; if `flagged`, add to
+ *    `sessions_flagged` (weighted).
+ * 2. `mean_score` = average of `score_pct` over flagged records touching the
+ *    area (0 if none flagged).
+ * 3. `top_signals` (per area, max 3): median raw signal value across the area's
+ *    flagged sessions, top 3 by value desc, `display` formatted per kind.
+ * 4. Sort rows by `sessions_flagged` desc, then `mean_score` desc.
+ * 5. `summary.unlocalized` = count of records with empty `areas`;
+ *    `flagged`/`unflagged` = counts of all records (unlocalized included).
+ *
+ * `cfg` is part of the signature contract but unused in v1 (raw medians; no
+ * weighting knobs read). Reserved for future ranking configuration.
+ */
+export function aggregateAreas(records, cfg) {
+    void cfg; // reserved; v1 does not read cfg
+    const byArea = new Map();
+    let flagged = 0;
+    let unflagged = 0;
+    let unlocalized = 0;
+    for (const rec of records) {
+        if (rec.flagged)
+            flagged += 1;
+        else
+            unflagged += 1;
+        if (rec.areas.length === 0) {
+            unlocalized += 1;
+            continue;
+        }
+        for (const area of rec.areas) {
+            let acc = byArea.get(area.key);
+            if (acc === undefined) {
+                acc = {
+                    key: area.key,
+                    sessionsTotal: 0,
+                    sessionsFlagged: 0,
+                    flaggedScores: [],
+                    flaggedSignals: [],
+                };
+                byArea.set(area.key, acc);
+            }
+            acc.sessionsTotal += area.weight;
+            if (rec.flagged) {
+                acc.sessionsFlagged += area.weight;
+                acc.flaggedScores.push(rec.score_pct);
+                acc.flaggedSignals.push(rec.signals);
+            }
+        }
+    }
+    const rows = [];
+    for (const acc of byArea.values()) {
+        const meanScore = acc.flaggedScores.length > 0
+            ? acc.flaggedScores.reduce((a, b) => a + b, 0) / acc.flaggedScores.length
+            : 0;
+        rows.push({
+            key: acc.key,
+            sessions_total: acc.sessionsTotal,
+            sessions_flagged: acc.sessionsFlagged,
+            mean_score: meanScore,
+            top_signals: topSignalsForArea(acc.flaggedSignals),
+        });
+    }
+    rows.sort((a, b) => {
+        if (b.sessions_flagged !== a.sessions_flagged) {
+            return b.sessions_flagged - a.sessions_flagged;
+        }
+        return b.mean_score - a.mean_score;
+    });
+    return { rows, summary: { flagged, unflagged, unlocalized } };
+}
+/**
+ * Pick up to 3 top signals for an area from its flagged sessions' signals.
+ *
+ * For each signal spec: compute the median of its raw value across the flagged
+ * sessions (booleans use majority; nullable signals skip when all null). Rank
+ * by median value descending (higher = more struggle; `abandonment: true`
+ * counts as 1). Take the top 3. Ties preserve `SIGNAL_SPECS` order (stable).
+ * An area with no flagged sessions yields `[]`.
+ */
+function topSignalsForArea(flaggedSignals) {
+    if (flaggedSignals.length === 0)
+        return [];
+    const candidates = [];
+    for (const spec of SIGNAL_SPECS) {
+        if (spec.kind === 'boolean') {
+            const values = flaggedSignals.map((s) => s[spec.field]);
+            const med = medianBoolean(values);
+            candidates.push({
+                name: spec.name,
+                value: med,
+                display: formatDisplay(spec, med),
+                sortKey: med ? 1 : 0,
+            });
+            continue;
+        }
+        const values = flaggedSignals
+            .map((s) => s[spec.field])
+            .filter((v) => v !== null);
+        if (values.length === 0)
+            continue; // all null → skip this signal
+        const med = median(values);
+        if (med === null)
+            continue; // unreachable when values.length > 0
+        candidates.push({
+            name: spec.name,
+            value: med,
+            display: formatDisplay(spec, med),
+            sortKey: med,
+        });
+    }
+    candidates.sort((a, b) => b.sortKey - a.sortKey);
+    return candidates.slice(0, 3).map(({ name, value, display }) => ({
+        name,
+        value,
+        display,
+    }));
+}
+/** Median of a non-empty numeric array. Returns null only for empty input. */
+function median(values) {
+    const n = values.length;
+    if (n === 0)
+        return null;
+    const sorted = [...values].sort((a, b) => a - b);
+    const mid = Math.floor(n / 2);
+    if (n % 2 === 1)
+        return sorted[mid];
+    return (sorted[mid - 1] + sorted[mid]) / 2;
+}
+/** Median of booleans as strict majority: more than half true → true. */
+function medianBoolean(values) {
+    const trues = values.filter(Boolean).length;
+    return trues * 2 > values.length;
+}
+/** Format a signal median per its kind for the `display` string. */
+function formatDisplay(spec, value) {
+    switch (spec.kind) {
+        case 'count':
+            return `${spec.name}(${Math.round(value)})`;
+        case 'ratio':
+            return `${spec.name}(${value.toFixed(1)})`;
+        case 'duration': {
+            const ms = value;
+            if (ms >= 1000)
+                return `${spec.name}(${Math.round(ms / 1000)}s)`;
+            return `${spec.name}(${Math.round(ms)}ms)`;
+        }
+        case 'boolean':
+            return `${spec.name}(${value ? 'yes' : 'no'})`;
+    }
+}
+//# sourceMappingURL=leaderboard.js.map

package/dist/aggregate/leaderboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leaderboard.js","sourceRoot":"","sources":["../../src/aggregate/leaderboard.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,wEAAwE;AACxE,iCAAiC;AAqBjC,gFAAgF;AAChF,iEAAiE;AACjE,MAAM,YAAY,GAA0B;IAC1C,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE;IAChE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE;IAClD,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;IAClE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5D,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9D,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5D,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,UAAU,EAAE;CACnF,CAAC;AAUF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAyB,EACzB,GAAW;IAEX,KAAK,GAAG,CAAC,CAAC,iCAAiC;IAE3C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,CAAC;;YACzB,SAAS,IAAI,CAAC,CAAC;QACpB,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,WAAW,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,GAAG,GAAG;oBACJ,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,aAAa,EAAE,CAAC;oBAChB,eAAe,EAAE,CAAC;oBAClB,aAAa,EAAE,EAAE;oBACjB,cAAc,EAAE,EAAE;iBACnB,CAAC;gBACF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5B,CAAC;YACD,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC;YACjC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChB,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC;gBACnC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACtC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,MAAM,SAAS,GACb,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YAC1B,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM;YACzE,CAAC,CAAC,CAAC,CAAC;QACR,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,cAAc,EAAE,GAAG,CAAC,aAAa;YACjC,gBAAgB,EAAE,GAAG,CAAC,eAAe;YACrC,UAAU,EAAE,SAAS;YACrB,WAAW,EAAE,iBAAiB,CAAC,GAAG,CAAC,cAAc,CAAC;SACnD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjB,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC9C,OAAO,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC;QACjD,CAAC;QACD,OAAO,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CACxB,cAA8B;IAE9B,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE3C,MAAM,UAAU,GAKX,EAAE,CAAC;IAER,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAY,CAAC,CAAC;YACnE,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YAClC,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,GAAG;gBACV,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC;gBACjC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACrB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,cAAc;aAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAkB,CAAC;aAC1C,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS,CAAC,8BAA8B;QACjE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS,CAAC,qCAAqC;QACjE,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,GAAG;YACV,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC;YACjC,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI;QACJ,KAAK;QACL,OAAO;KACR,CAAC,CAAC,CAAC;AACN,CAAC;AAED,8EAA8E;AAC9E,SAAS,MAAM,CAAC,MAAgB;IAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxB,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,yEAAyE;AACzE,SAAS,aAAa,CAAC,MAAiB;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;AACnC,CAAC;AAED,oEAAoE;AACpE,SAAS,aAAa,CAAC,IAAgB,EAAE,KAAuB;IAC9D,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,OAAO;YACV,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAe,CAAC,GAAG,CAAC;QACxD,KAAK,OAAO;YACV,OAAO,GAAG,IAAI,CAAC,IAAI,IAAK,KAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;QACzD,KAAK,UAAU,EAAE,CAAC;YAChB,MAAM,EAAE,GAAG,KAAe,CAAC;YAC3B,IAAI,EAAE,IAAI,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;YACjE,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC;QAC7C,CAAC;QACD,KAAK,SAAS;YACZ,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IACnD,CAAC;AACH,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+// Stateless CLI bin entry for harnessgap. Parses args with commander, awaits
+// runScan, writes result.output to stdout, and exits with result.exitCode.
+// ConfigError (and any thrown error from runScan) is caught → a SHORT message
+// to stderr (no stack, no transcript paths), exit 1.
+//
+// Constraints (§11 egress): no network imports. Imports limited to commander,
+// ./pipeline.js, ./config.js, node:process, node:fs. The package.json version
+// is read at runtime via fs + URL (no JSON import attribute, no node:path
+// needed). No disk writes beyond what runScan performs (none).
+import { Command } from 'commander';
+import { readFileSync } from 'node:fs';
+import process from 'node:process';
+import { runScan } from './pipeline.js';
+// Resolve package.json relative to this module so the version is correct
+// whether run from dist/cli.js or via the installed bin symlink. URL-based
+// path avoids importing node:path / node:url.
+const pkgUrl = new URL('../package.json', import.meta.url);
+const pkg = JSON.parse(readFileSync(pkgUrl, 'utf8'));
+const program = new Command();
+program
+    .name('harnessgap')
+    .description('Stateless detection-only CLI for harness gaps')
+    .version(pkg.version);
+program
+    .command('scan', { isDefault: true })
+    .description('Scan Claude Code transcripts for harness gaps')
+    .option('--repo <path>', 'filter to a specific repo toplevel')
+    .option('--since <dur>', 'only sessions within this lookback (e.g. 30d, 12h)')
+    .option('--limit <n>', 'cap the number of sessions', (v) => Number.parseInt(v, 10))
+    .option('--json', 'emit the JSON envelope instead of a human table')
+    .option('--calibrate', 'emit the calibrate signal view')
+    .option('--bootstrap', 'force bootstrap scoring mode')
+    .option('--config <path>', 'path to a .harnessgap.yml config file')
+    .option('--claude-dir <path>', 'Claude Code config directory (contains projects/)')
+    .action(async (opts) => {
+    const scanOpts = {
+        repo: opts.repo,
+        since: opts.since,
+        limit: opts.limit,
+        json: opts.json,
+        calibrate: opts.calibrate,
+        bootstrap: opts.bootstrap,
+        configPath: opts.config,
+        claudeDir: opts.claudeDir,
+    };
+    try {
+        const result = await runScan(scanOpts);
+        // Write then exit in the flush callback so piped stdout is never
+        // truncated by process.exit.
+        process.stdout.write(result.output + '\n', () => process.exit(result.exitCode));
+    }
+    catch (e) {
+        // ConfigError carries a clean human message; any other thrown error is
+        // surfaced by message only — never the stack.
+        const msg = e instanceof Error ? e.message : String(e);
+        process.stderr.write(`error: ${msg}\n`, () => process.exit(1));
+    }
+});
+// parseAsync returns a promise; the action handles its own errors + exit, so
+// this .catch is a defensive net for anything commander itself rejects (e.g.
+// unknown options — commander prints its own message and exits non-zero there).
+program.parseAsync(process.argv).catch((e) => {
+    const msg = e instanceof Error ? e.message : String(e);
+    process.stderr.write(`error: ${msg}\n`, () => process.exit(1));
+});
+//# sourceMappingURL=cli.js.map