litmus-cli 1.4.35 → 1.4.37

package/dist/lib/detection.js

@@ -1,6 +1,7 @@
 /**
- * Claude surface classification — pure functions, unit-testable (watcher.ts
- * is a spawned script, so logic living there can't be imported by tests).
+ * Editor, AI tool and Claude surface detection — pure functions,
+ * unit-testable (watcher.ts is a spawned script, so logic living there can't
+ * be imported by tests).
  *
  * "claude" on a candidate machine is at least three different products, and
  * the old bare-word pattern labeled them all `claude` — which report readers
@@ -10,37 +11,6 @@
  *   claude_web     — claude.ai in a browser tab; no hook can exist
  *   claude         — legacy/unattributable, kept so old readers keep working
  */
-/**
- * Classifies every process-list line containing "claude" into surfaces.
- * `ps` is the lowercased `ps aux` / `tasklist` output from getProcessList().
- * A line matching no surface pattern stays legacy `claude` (unattributable —
- * notably Windows tasklist, where Desktop and Claude Code are both bare
- * `claude.exe` image names, and bystander strings like the VS Code
- * extension's install path in some process's args).
- */
-export function classifyClaudeProcesses(ps) {
-    const found = new Set();
-    for (const line of ps.split("\n")) {
-        if (!/\bclaude\b/.test(line))
-            continue;
-        if (/claude\.app|claude helper/.test(line)) {
-            // macOS Desktop app bundle and its renderer/GPU helpers
-            found.add("claude_desktop");
-        }
-        else if (/claude-code[/\\]cli\.js|[/\\]claude(?:\s|$)/.test(line)) {
-            // The npm entrypoint, or the `claude` binary itself as the executed
-            // path. Path-anchored so the word inside a directory name (the VS Code
-            // extension's install path, a .claude config dir) doesn't count as the
-            // CLI running. Desktop's binary also ends in /claude but its lines
-            // match the app-bundle branch above first.
-            found.add("claude_code");
-        }
-        else {
-            found.add("claude");
-        }
-    }
-    return [...found];
-}
 // Owners that mean "a browser tab". First-token matching: lsof reports
 // multi-word app names ("Google Chrome Helper", "Brave Browser") but the
 // leading token identifies the browser; Safari's network traffic comes from
@@ -77,4 +47,260 @@ export function refineClaudeTool(tool, owner) {
     // drops the surface claim; api traffic keeps its API label.
     return tool === "claude_web" ? "claude" : tool;
 }
+// USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND — the same eleven
+// columns on macOS and procps, none of the first ten containing a space.
+const PS_AUX_ROW = /^(\S+)\s+(\d+)\s+(?:\S+\s+){8}(.*)$/;
+// `tasklist /fo csv /nh`: "Image Name","PID","Session Name","Session#","Mem
+// Usage". CSV, because the default table cuts image names at 25 characters.
+const TASKLIST_ROW = /^"([^"]+)","(\d+)","([^"]*)","(\d+)",/;
+/**
+ * Parses getProcessList() output into rows. Header, separator and
+ * unrecognised lines are dropped — a line that cannot be attributed to a
+ * program is not evidence of one.
+ */
+export function parseProcessRows(ps, platform) {
+    const rows = [];
+    for (const line of ps.split("\n")) {
+        if (platform === "win32") {
+            const m = line.trim().match(TASKLIST_ROW);
+            if (m)
+                rows.push({ owner: m[4], pid: Number(m[2]), command: m[1], imageOnly: true });
+        }
+        else {
+            const m = line.trim().match(PS_AUX_ROW);
+            if (m)
+                rows.push({ owner: m[1], pid: Number(m[2]), command: m[3], imageOnly: false });
+        }
+    }
+    return rows;
+}
+/**
+ * Keeps the rows owned by whoever owns `selfPid` — the watcher itself, which
+ * runs as the candidate. Its own row carries the owner exactly as this
+ * output spells it (procps truncates long user names), so no lookup of the
+ * account name is needed. Without that row ownership cannot be established,
+ * so nothing counts rather than everyone's processes.
+ *
+ * On Windows the owner is the Session#, which another account can share
+ * (a `runas` process in the candidate's session); getProcessList() therefore
+ * asks tasklist for the candidate's own processes only, and this keeps the
+ * session filter on top.
+ */
+export function ownRows(rows, selfPid) {
+    const self = rows.find((r) => r.pid === selfPid);
+    return self ? rows.filter((r) => r.owner === self.owner) : [];
+}
+export const EDITOR_SIGNATURES = {
+    vscode: {
+        names: ["code", "code-insiders", "code - insiders", "code-oss"],
+        bundles: ["visual studio code", "visual studio code - insiders"],
+        paths: ["/.vscode-server/", "/opt/vscode-server-cache/"],
+    },
+    cursor: {
+        names: ["cursor", "cursor-agent"],
+        bundles: ["cursor"],
+        paths: ["/.cursor-server/", "/opt/cursor-server-cache/"],
+    },
+    vim: { names: ["vim", "gvim", "nvim", "mvim"], bundles: ["macvim"] },
+    intellij: { names: ["idea", "idea64"], bundles: ["intellij idea", "intellij idea ce", "intellij idea ultimate"] },
+    webstorm: { names: ["webstorm", "webstorm64"], bundles: ["webstorm"] },
+    sublime: { names: ["subl", "sublime_text"], bundles: ["sublime text"] },
+    emacs: { names: ["emacs", "runemacs"], bundles: ["emacs"] },
+    zed: { names: ["zed", "zed-editor"], bundles: ["zed", "zed preview"] },
+};
+export const AI_TOOL_SIGNATURES = {
+    aider: { names: ["aider"], modules: ["aider"] },
+    codeium: { names: ["codeium"], paths: ["/codeium.codeium-", "/.codeium/"] },
+    codex: { names: ["codex"], bundles: ["codex"], paths: ["/@openai/codex/"] },
+    copilot: { names: ["copilot", "copilot-language-server"], paths: ["/@github/copilot/", "/github.copilot-"] },
+    gemini: { names: ["gemini"], paths: ["/@google/gemini-cli/"] },
+    windsurf: { names: ["windsurf"], bundles: ["windsurf"] },
+    ollama: { names: ["ollama", "ollama app"], bundles: ["ollama"] },
+    tabnine: { names: ["tabnine", "tabnine-deep-local", "tabnine-deep-cloud"], paths: ["/.tabnine/"] },
+    supermaven: { names: ["supermaven", "sm-agent"], paths: ["/.supermaven/"] },
+    cline: { names: ["cline"] },
+    cody: { names: ["cody-agent", "sourcegraph-cody"], paths: ["/@sourcegraph/cody/"] },
+    "amazon-q": { names: ["amazon-q", "qchat"], bundles: ["amazon q"] },
+    "roo-code": { names: ["roo-code", "roo_code"] },
+    pearai: { names: ["pearai"], bundles: ["pearai"] },
+    ghostwriter: { names: ["ghostwriter"], bundles: ["ghostwriter"] },
+};
+// Programs that run somebody else's program: the tool is the script they
+// were handed (`node /opt/homebrew/bin/codex`, `python3 -m aider`), never
+// the interpreter.
+const INTERPRETER = /^(?:node|nodejs|bun|deno|python[\d.]*|pythonw|sh|bash|dash|zsh)$/;
+const PYTHON = /^python/;
+const SHELL = /^(?:sh|bash|dash|zsh)$/;
+// Interpreter options whose value is the NEXT argument, so it is not the
+// script (`python3 -W ignore -m aider`, `node -r ./hook.js bin/codex`).
+// Lowercase, like the command line they are matched against.
+const VALUE_FLAGS = {
+    python: new Set(["-w", "-x", "--check-hash-based-pycs"]),
+    node: new Set(["-r", "--require", "--import", "--loader", "--experimental-loader", "--conditions", "--inspect-port", "--title", "--env-file"]),
+    shell: new Set(["-o", "+o"]),
+};
+// Options after which the rest is inline code, not a script.
+const CODE_FLAGS = {
+    python: new Set(["-c"]),
+    node: new Set(["-e", "--eval", "-p", "--print"]),
+    shell: new Set(),
+};
+// A Linux editor binary run as node (ELECTRON_RUN_AS_NODE): only its .js
+// script is a program; any other argument is a file or folder it opens.
+const ELECTRON_NODE = /^(?:code|code-insiders|code-oss|cursor)$/;
+// What Electron runs as node is an absolute script path. Anything else among
+// its arguments is a file it opens or a piece of a flag value split at a
+// space (`--user-data-dir=/users/c/library/application support/cursor`).
+const ELECTRON_SCRIPT = /^\/.*\.[cm]?js$/;
+// Only executable suffixes are stripped. A script keeps its source extension,
+// so a candidate's own gemini.py is not the gemini CLI; packaged entrypoints
+// are recognised by their install-path markers instead.
+const EXECUTABLE_EXT = /\.(?:exe|cmd|bat)$/;
+// Outermost bundle of an absolute macOS program path. Only the bundle's own
+// name may hold spaces ("visual studio code - insiders.app"); the directories
+// before it may not, so a `.app/contents/` path in an argument (`codesign
+// --verify /applications/cursor.app/...`, `vim build/cursor.app/...`) is
+// never the program's bundle. The one spaced directory allowed is the macOS
+// per-user install parent "application support" — a deliberate allow-list of
+// known install parents, not a general space allowance, which would let an
+// argument path become the bundle again.
+const BUNDLE = /^\/(?:(?:[^/\s]+|application support)\/)*?([^/]+)\.app\/contents\//;
+// An Electron helper run as node (VS Code / Cursor extension processes):
+// `<...>/x.app/contents/frameworks/x helper (plugin).app/contents/macos/x
+// helper (plugin) <script>`.
+const ELECTRON_HELPER = /^\/(?:(?:[^/\s]+|application support)\/)*?[^/]+\.app\/contents\/frameworks\/([^/]+ helper[^/]*)\.app\/contents\/macos\/\1(?=\s|$)(.*)$/;
+function basename(path) {
+    return path.slice(Math.max(path.lastIndexOf("/"), path.lastIndexOf("\\")) + 1);
+}
+function programName(p) {
+    return p.kind === "exe" ? basename(p.path).replace(EXECUTABLE_EXT, "") : basename(p.path);
+}
+/**
+ * What an interpreter was handed: the first argument that is neither an
+ * option nor an option's value; the module after python's `-m`; the command
+ * after a shell's `-c`. Inline code (`python -c`, `node -e`) is no program.
+ */
+function scriptArg(interpreter, args) {
+    const family = PYTHON.test(interpreter) ? "python" : SHELL.test(interpreter) ? "shell" : "node";
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (family === "python" && a === "-m")
+            return args[i + 1] ? { path: args[i + 1], kind: "module" } : undefined;
+        if (family === "shell" && a === "-c")
+            return args[i + 1] ? { path: args[i + 1], kind: "exe" } : undefined;
+        if (CODE_FLAGS[family].has(a))
+            return undefined;
+        if (VALUE_FLAGS[family].has(a)) {
+            i++;
+            continue;
+        }
+        // `bun run x`, `deno run -A x`: the subcommand is not the script.
+        if (a === "run" && (interpreter === "bun" || interpreter === "deno"))
+            continue;
+        if (!a.startsWith("-") && !a.startsWith("+"))
+            return { path: a, kind: "script" };
+    }
+    return undefined;
+}
+/**
+ * What a row runs: the macOS bundle name (if any) and the programs — argv0,
+ * plus the script when argv0 is an interpreter or an Electron binary.
+ */
+export function rowPrograms(row) {
+    const command = row.command.trim().toLowerCase();
+    if (row.imageOnly)
+        return { programs: [{ path: command, kind: "exe" }] };
+    const bundle = command.match(BUNDLE)?.[1];
+    const helper = command.match(ELECTRON_HELPER);
+    if (helper) {
+        const script = scriptArg("node", helper[2].split(/\s+/).filter(Boolean));
+        return { bundle, programs: script && ELECTRON_SCRIPT.test(script.path) ? [script] : [] };
+    }
+    const words = command.split(/\s+/);
+    // macOS per-user installs live under "Library/Application Support".
+    if (words[0].endsWith("/library/application") && words[1]?.startsWith("support/")) {
+        words.splice(0, 2, `${words[0]} ${words[1]}`);
+    }
+    const [argv0 = "", ...args] = words;
+    const programs = [{ path: argv0, kind: "exe" }];
+    const name = basename(argv0).replace(EXECUTABLE_EXT, "");
+    if (INTERPRETER.test(name)) {
+        const script = scriptArg(name, args);
+        if (script)
+            programs.push(script);
+    }
+    else if (ELECTRON_NODE.test(name)) {
+        const script = scriptArg("node", args);
+        if (script && ELECTRON_SCRIPT.test(script.path))
+            programs.push(script);
+    }
+    return { bundle, programs };
+}
+function matchesSignature(sig, bundle, programs) {
+    if (bundle && sig.bundles?.includes(bundle))
+        return true;
+    return programs.some((p) => {
+        // A module name is only a tool where that tool really runs as a module;
+        // a candidate's own `python3 -m codex` is their code, not the Codex CLI.
+        if (p.kind === "module")
+            return (sig.modules ?? []).includes(p.path);
+        return sig.names.includes(programName(p)) || (sig.paths ?? []).some((marker) => p.path.includes(marker));
+    });
+}
+const CLAUDE_CODE_PATH = "/@anthropic-ai/claude-code/";
+/**
+ * Which Claude surface a row runs, from its program only (see the header):
+ *   claude_desktop — the Claude.app bundle and its helpers. Desktop's own
+ *                    binary is also named `claude`, so the bundle wins.
+ *   claude_code    — an executable named `claude` (native install, npm bin,
+ *                    a shell's bare `claude`), or the npm entrypoint.
+ *   claude         — the Windows image `claude.exe`, which Desktop and
+ *                    Claude Code share, so the surface is unattributable.
+ * The word elsewhere in a row (a .claude config dir, an argument, the VS
+ * Code extension's install path) is no program.
+ */
+function claudeSurface(row) {
+    const { bundle, programs } = rowPrograms(row);
+    if (bundle === "claude" || /^claude helper\b/.test(row.command.trim().toLowerCase()))
+        return "claude_desktop";
+    const runsClaude = programs.some((p) => p.kind !== "module" && (programName(p) === "claude" || p.path.includes(CLAUDE_CODE_PATH)));
+    if (!runsClaude)
+        return undefined;
+    return row.imageOnly ? "claude" : "claude_code";
+}
+function claudeSurfaces(rows) {
+    const found = new Set();
+    for (const row of rows) {
+        const surface = claudeSurface(row);
+        if (surface)
+            found.add(surface);
+    }
+    return [...found];
+}
+/**
+ * Claude surfaces running in getProcessList() output, any user's. `ps` is
+ * lowercased `ps aux` / `tasklist /fo csv` text, parsed per row like
+ * detectTools; `platform` is the OS that produced it.
+ */
+export function classifyClaudeProcesses(ps, platform) {
+    return claudeSurfaces(parseProcessRows(ps, platform));
+}
+/**
+ * Editors and AI tools running as the watcher's own user. `ps` is
+ * getProcessList() output; `selfPid` is the watcher's pid (its own row
+ * names the owner to keep). Cursor counts as both an editor and an AI tool.
+ */
+export function detectTools(ps, platform, selfPid) {
+    const rows = ownRows(parseProcessRows(ps, platform), selfPid);
+    const programs = rows.map(rowPrograms);
+    const running = (sigs) => Object.entries(sigs)
+        .filter(([, sig]) => programs.some((p) => matchesSignature(sig, p.bundle, p.programs)))
+        .map(([name]) => name);
+    const editors = running(EDITOR_SIGNATURES);
+    const aiTools = running(AI_TOOL_SIGNATURES);
+    aiTools.push(...claudeSurfaces(rows));
+    if (editors.includes("cursor") && !aiTools.includes("cursor"))
+        aiTools.push("cursor");
+    return { editors, aiTools };
+}
 //# sourceMappingURL=detection.js.map

package/dist/lib/detection.js.map

@@ -1 +1 @@
-{"version":3,"file":"detection.js","sourceRoot":"","sources":["../../src/lib/detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAU;IAChD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAQ;QACtC,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,wDAAwD;YACxD,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;QAC7B,CAAC;aAAM,IAAI,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,oEAAoE;YACpE,uEAAuE;YACvE,uEAAuE;YACvE,mEAAmE;YACnE,2CAA2C;YAC3C,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QAC1B,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACrB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAA;AACnB,CAAC;AAED,uEAAuE;AACvE,yEAAyE;AACzE,4EAA4E;AAC5E,+BAA+B;AAC/B,MAAM,gBAAgB,GAAG,4GAA4G,CAAA;AAErI;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAA;IAC/D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA,CAAC,+CAA+C;IACvE,4EAA4E;IAC5E,gCAAgC;IAChC,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IACjD,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAA;IACxD,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,gBAAgB,CAAA;IACpD,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7C,2EAA2E;IAC3E,0EAA0E;IAC1E,4DAA4D;IAC5D,OAAO,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;AAChD,CAAC"}
+{"version":3,"file":"detection.js","sourceRoot":"","sources":["../../src/lib/detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,uEAAuE;AACvE,yEAAyE;AACzE,4EAA4E;AAC5E,+BAA+B;AAC/B,MAAM,gBAAgB,GAAG,4GAA4G,CAAA;AAErI;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAA;IAC/D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA,CAAC,+CAA+C;IACvE,4EAA4E;IAC5E,gCAAgC;IAChC,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IACjD,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAA;IACxD,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,gBAAgB,CAAA;IACpD,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7C,2EAA2E;IAC3E,0EAA0E;IAC1E,4DAA4D;IAC5D,OAAO,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;AAChD,CAAC;AAuBD,4EAA4E;AAC5E,yEAAyE;AACzE,MAAM,UAAU,GAAG,qCAAqC,CAAA;AACxD,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM,YAAY,GAAG,uCAAuC,CAAA;AAE5D;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAU,EAAE,QAAyB;IACpE,MAAM,IAAI,GAAiB,EAAE,CAAA;IAC7B,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;YACzC,IAAI,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACtF,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YACvC,IAAI,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;QACvF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,OAAO,CAAC,IAAkB,EAAE,OAAe;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAA;IAChD,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC/D,CAAC;AAaD,MAAM,CAAC,MAAM,iBAAiB,GAAqC;IACjE,MAAM,EAAE;QACN,KAAK,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,iBAAiB,EAAE,UAAU,CAAC;QAC/D,OAAO,EAAE,CAAC,oBAAoB,EAAE,+BAA+B,CAAC;QAChE,KAAK,EAAE,CAAC,kBAAkB,EAAE,2BAA2B,CAAC;KACzD;IACD,MAAM,EAAE;QACN,KAAK,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC;QACjC,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,KAAK,EAAE,CAAC,kBAAkB,EAAE,2BAA2B,CAAC;KACzD;IACD,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE;IACpE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,eAAe,EAAE,kBAAkB,EAAE,wBAAwB,CAAC,EAAE;IACjH,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE;IACtE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE;IACvE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE;IAC3D,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE;CACvE,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAqC;IAClE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE;IAC/C,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,mBAAmB,EAAE,YAAY,CAAC,EAAE;IAC3E,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,EAAE;IAC3E,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,yBAAyB,CAAC,EAAE,KAAK,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,EAAE;IAC5G,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,sBAAsB,CAAC,EAAE;IAC9D,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE;IACxD,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE;IAChE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,oBAAoB,EAAE,oBAAoB,CAAC,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE;IAClG,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,eAAe,CAAC,EAAE;IAC3E,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE;IAC3B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,EAAE,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,qBAAqB,CAAC,EAAE;IACnF,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE;IACnE,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE;IAC/C,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE;IAClD,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE;CAClE,CAAA;AAED,yEAAyE;AACzE,0EAA0E;AAC1E,mBAAmB;AACnB,MAAM,WAAW,GAAG,kEAAkE,CAAA;AACtF,MAAM,MAAM,GAAG,SAAS,CAAA;AACxB,MAAM,KAAK,GAAG,wBAAwB,CAAA;AACtC,yEAAyE;AACzE,wEAAwE;AACxE,6DAA6D;AAC7D,MAAM,WAAW,GAAqD;IACpE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,yBAAyB,CAAC,CAAC;IACxD,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,uBAAuB,EAAE,cAAc,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAC9I,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;CAC7B,CAAA;AACD,6DAA6D;AAC7D,MAAM,UAAU,GAAqD;IACnE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,KAAK,EAAE,IAAI,GAAG,EAAE;CACjB,CAAA;AACD,yEAAyE;AACzE,wEAAwE;AACxE,MAAM,aAAa,GAAG,0CAA0C,CAAA;AAChE,6EAA6E;AAC7E,yEAAyE;AACzE,yEAAyE;AACzE,MAAM,eAAe,GAAG,iBAAiB,CAAA;AACzC,8EAA8E;AAC9E,6EAA6E;AAC7E,wDAAwD;AACxD,MAAM,cAAc,GAAG,oBAAoB,CAAA;AAC3C,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAC1E,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,yCAAyC;AACzC,MAAM,MAAM,GAAG,oEAAoE,CAAA;AACnF,yEAAyE;AACzE,0EAA0E;AAC1E,6BAA6B;AAC7B,MAAM,eAAe,GACnB,wIAAwI,CAAA;AAE1I,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;AAChF,CAAC;AAED,SAAS,WAAW,CAAC,CAAU;IAC7B,OAAO,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAC3F,CAAC;AAWD;;;;GAIG;AACH,SAAS,SAAS,CAAC,WAAmB,EAAE,IAAc;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;IAC/F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAC7G,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QACzG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;QAC/C,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,kEAAkE;QAClE,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,WAAW,KAAK,KAAK,IAAI,WAAW,KAAK,MAAM,CAAC;YAAE,SAAQ;QAC9E,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IAClF,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAe;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAChD,IAAI,GAAG,CAAC,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;IAC7C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;QACxE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IAC1F,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAClC,oEAAoE;IACpE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAClF,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAC/C,CAAC;IACD,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAA;IACnC,MAAM,QAAQ,GAAc,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;IACxD,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACpC,IAAI,MAAM;YAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACnC,CAAC;SAAM,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACtC,IAAI,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAqB,EAAE,MAA0B,EAAE,QAAmB;IAC9F,IAAI,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IACxD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACzB,wEAAwE;QACxE,yEAAyE;QACzE,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACpE,OAAO,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAC1G,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG,6BAA6B,CAAA;AAEtD;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,GAAe;IACpC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC7C,IAAI,MAAM,KAAK,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,gBAAgB,CAAA;IAC7G,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CACjG,CAAA;IACD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAA;IACjC,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAA;AACjD,CAAC;AAED,SAAS,cAAc,CAAC,IAAkB;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,OAAO;YAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACjC,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAA;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAU,EAAE,QAAyB;IAC3E,OAAO,cAAc,CAAC,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAA;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,EAAU,EACV,QAAyB,EACzB,OAAe;IAEf,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAA;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACtC,MAAM,OAAO,GAAG,CAAC,IAAsC,EAAY,EAAE,CACnE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;SACjB,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;SACtF,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;IAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC3C,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAA;IACrC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACrF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;AAC7B,CAAC"}

package/dist/lib/hook-logger.cjs

@@ -123,9 +123,7 @@ function isAtOrUnder(child, parent) {
 
 /**
  * Does an explicitly named assessment agree with where the session reports it
- * is? Agreement means either direction of containment: the session sits inside
- * that assessment, or the assessment sits under the session's directory (the
- * editor-opened-at-a-parent shape, ENG-771).
+ * is? Agreement means the session sits inside that assessment.
  *
  * `sessionDirs` are locations the TOOL reported (workspace roots, payload cwd)
  * — deliberately not this process's cwd. A hook runner's cwd is not the
@@ -135,21 +133,13 @@ function isAtOrUnder(child, parent) {
  * the silent Copilot Chat loss ENG-1292 fixed. When the tool reports nothing —
  * exactly the Copilot Chat case the argument exists for — the argument stands.
  *
- * ACCEPTED RESIDUAL — the shared-parent case. If the tool reports a workspace
- * that CONTAINS the named assessment, reverse containment agrees, so a config
- * copied into a sibling project under that same parent still resolves to the
- * original assessment. This is not fixable from a path comparison and not
- * worth narrowing for:
- *
- *  - It is indistinguishable from the legitimate shape. "Editor opened at a
- *    parent of the assessment" is ENG-771, the reason resolution looks
- *    downward at all; when the session reports only the parent, nothing in the
- *    payload says which child the prompt came from.
- *  - Rejecting here changes nothing. Verified: with the assessment registered
- *    (which `litmus init` always does), dropping the explicit path just falls
- *    through to the registry, which returns that same assessment. The only
- *    candidates it would affect are project-scope ones, who have no registry
- *    entry — so tightening this trades zero privacy gain for real capture loss.
+ * A session reporting a PARENT of the named assessment does not agree
+ * (ENG-953). It used to, as the "editor opened at a parent" shape (ENG-771),
+ * which also let a config copied into a sibling project under that parent file
+ * its prompts against the original assessment. Nothing in such a payload says
+ * the prompt came from inside the assessment, and the registry fallback no
+ * longer claims parent-rooted sessions either, so neither route records work
+ * from outside the assessment folder.
  */
 function explicitAgreesWithSession(assessmentDir, sessionDirs) {
   const target = realpathOrNull(assessmentDir)
@@ -161,7 +151,7 @@ function explicitAgreesWithSession(assessmentDir, sessionDirs) {
     if (real && !roots.includes(real)) roots.push(real)
   }
   if (roots.length === 0) return true // tool reported no location — the blind case
-  return roots.some(root => isAtOrUnder(root, target) || isAtOrUnder(target, root))
+  return roots.some(root => isAtOrUnder(root, target))
 }
 
 // A directory only counts as an assessment if it has a config.json — the
@@ -229,21 +219,29 @@ function walkUpForLitmusDir(startDir) {
 }
 
 /**
- * True when `child` sits strictly inside `parent`.
+ * The registered assessment whose tree holds `location`, as a project dir, or
+ * null. When registered assessments nest, the innermost one wins: it is the
+ * assessment the session is actually in.
  *
  * Reuses ENG-1311's `realpathOrNull` + `isAtOrUnder` rather than carrying a
  * second path comparison: realpath is what makes this work at all, since the
  * registry stores the string `litmus init` was given while payloads report the
  * tool's own cwd, and on macOS the same directory routinely differs in form
- * (/tmp vs /private/tmp, symlinked homes). Strict because an assessment is not
- * "inside itself" for the purpose of picking a registry entry — an exact match
- * is already handled by the walk-up above.
+ * (/tmp vs /private/tmp, symlinked homes).
  */
-function isStrictlyInside(parent, child) {
-  const p = realpathOrNull(parent)
-  const c = realpathOrNull(child)
-  if (!p || !c || p === c) return false
-  return isAtOrUnder(c, p)
+function registeredAssessmentHolding(location, registered) {
+  const loc = realpathOrNull(location)
+  if (!loc) return null
+  let best = null
+  let bestReal = ""
+  for (const p of registered) {
+    const real = realpathOrNull(p)
+    if (real && isAtOrUnder(loc, real) && real.length > bestReal.length) {
+      best = p
+      bestReal = real
+    }
+  }
+  return best
 }
 
 // Find the .litmus directory — walk up from any workspace roots the tool told
@@ -252,24 +250,29 @@ function isStrictlyInside(parent, child) {
 // every tool runs the hook from the workspace (Cursor invokes hooks with
 // cwd = its own config dir and passes the workspace in `workspace_roots`).
 //
-// `sessionDirs` is where the payload says the session lives, and it exists to
-// pick the RIGHT registry entry. The fallback used to take the first valid
-// entry regardless, which silently misfiled capture whenever a session could
-// not be placed by walk-up — verified live: an editor opened at the PARENT of
-// an assessment, and CLI tools launched from $HOME, all had their prompts and
-// responses written into an unrelated assessment that merely happened to be
-// registered first. Walk-up only goes upward, so a parent-rooted session can
-// never find an assessment nested below it, which makes this the common case
-// rather than an edge one.
+// The walk-ups are never gated: a session placed inside an assessment is
+// captured whatever the registry says.
+//
+// The registry fallback is SCOPED (ENG-953). It answers only for a session
+// that is inside a registered assessment's tree, and names that assessment.
+// That is the case walk-up misses while the assessment is live: the in-repo
+// config was deleted mid-session and the shadow mirror carries identity
+// (ENG-1453), or the session sits deeper than the walk-up's ten levels.
+//
+// It used to answer for anything. With no match it returned the first
+// registered assessment, so a prompt typed in an unrelated project on the same
+// machine was written into the assessment and uploaded, and a later version
+// also claimed any session rooted at a PARENT of an assessment ($HOME
+// included). Both captured work outside the assessment folder, which the
+// candidate disclosure says we do not record. A session placed nowhere now
+// captures nothing.
 //
-// So among registered assessments we prefer one that sits INSIDE the declared
-// location, and of those the most recently registered — the assessment the
-// candidate most recently ran `litmus init` for. With a single registered
-// assessment (the normal case) every branch here picks the same directory, so
-// this only changes behavior when there is genuine ambiguity to resolve.
-function findLitmusDir(hintDirs = [], sessionDirs = []) {
-  for (const hint of hintDirs) {
-    if (typeof hint !== "string" || !hint) continue
+// Where the session is: the tool's reported locations (`hintDirs`), or this
+// process's cwd when the tool reported none, since a hook runner's cwd is only
+// a stand-in for the session's.
+function findLitmusDir(hintDirs = []) {
+  const reported = hintDirs.filter(d => typeof d === "string" && d)
+  for (const hint of reported) {
     const found = walkUpForLitmusDir(hint)
     if (found) return found
   }
@@ -282,7 +285,7 @@ function findLitmusDir(hintDirs = [], sessionDirs = []) {
     const list = JSON.parse(fs.readFileSync(registry, "utf8"))
     if (!Array.isArray(list)) return null
     const valid = list.filter(
-      p => typeof p === "string" && (
+      p => typeof p === "string" && p && (
         isAssessmentLitmusDir(path.join(p, ".litmus"))
         // ENG-1453: config wiped but the assessment is alive — the dir still
         // exists and its shadow mirror supplies identity + credentials.
@@ -291,15 +294,11 @@ function findLitmusDir(hintDirs = [], sessionDirs = []) {
     )
     if (!valid.length) return null
 
-    const declared = sessionDirs.filter(d => typeof d === "string" && d)
-    if (declared.length) {
-      const contained = valid.filter(p => declared.some(d => isStrictlyInside(d, p)))
-      // Most recently registered wins; `litmus init` appends.
-      if (contained.length) return path.join(contained[contained.length - 1], ".litmus")
+    const locations = reported.length ? reported : [process.cwd()]
+    for (const location of locations) {
+      const holder = registeredAssessmentHolding(location, valid)
+      if (holder) return path.join(holder, ".litmus")
     }
-    // Nothing placeable — keep the long-standing behavior rather than dropping
-    // the event, so a tool that reports no location at all still captures.
-    return path.join(valid[0], ".litmus")
   } catch { /* no registry — give up silently */ }
   return null
 }
@@ -1676,8 +1675,8 @@ function claimPrompt(generationId) {
  * Where the TOOL says this session is: workspace roots (Cursor) or the
  * payload's own cwd (Claude Code, Codex, Copilot CLI). VS Code Copilot Chat
  * reports neither. Two uses: checking the explicit path (ENG-1311), and
- * picking the RIGHT registry entry when walk-up finds nothing (ENG-1323 — see
- * findLitmusDir).
+ * deciding which registered assessment, if any, holds the session when
+ * walk-up finds nothing (ENG-953, see findLitmusDir).
  *
  * Explicit hint first: it is correct by construction — but only once it
  * agrees with the session's own reported location, since the hook config
@@ -1687,9 +1686,7 @@ function claimPrompt(generationId) {
  * Those merits include every location the tool reported, cwd included. The
  * reported cwd beats this process's cwd (a hook runner's need not be the
  * session's) and is the only pointer left once a copied explicit path has
- * been rejected — without it a rejected Copilot prompt, which carries no
- * workspace roots, would fall through to the registry and be filed against
- * an unrelated assessment.
+ * been rejected.
  */
 function resolveAssessmentDir(parsed, workspaceRoots) {
   const sessionDirs = [
@@ -1701,7 +1698,7 @@ function resolveAssessmentDir(parsed, workspaceRoots) {
   const hintDirs = trustExplicit
     ? [explicitAssessmentDir, ...sessionDirs]
     : sessionDirs
-  return findLitmusDir(hintDirs, sessionDirs)
+  return findLitmusDir(hintDirs)
 }
 
 async function main() {

package/dist/lib/platform.d.ts

@@ -10,15 +10,28 @@
  * a no-op on Unix; tests/unit/windows-hide.test.ts enforces it.
  */
 /**
- * Returns lowercase text listing all running processes.
- * Used for regex matching against editor/AI tool name patterns.
+ * Returns lowercase text listing running processes, one per line.
+ * Tool detection parses it into rows and keeps the watcher's own user's
+ * (detection.ts detectTools); never match a word against the whole text.
  *
- * - macOS/Linux: `ps aux` (full command lines)
- * - Windows: `tasklist` (image names like Code.exe, Cursor.exe)
- *
- * Output is lowercased so patterns like /\bcode\b/ match uniformly.
+ * - macOS/Linux: `ps aux` (full command lines, every user's)
+ * - Windows: `tasklist /fo csv /nh` (full image names like Code.exe,
+ *   Cursor.exe; the default table truncates them at 25 characters), asked for
+ *   the current user's processes only. tasklist rows carry a Session#, not
+ *   an account, and another account can run in the candidate's session
+ *   (`runas`), so the user filter has to happen here, and it never widens:
+ *   see ownTasklist.
  */
 export declare function getProcessList(): string;
+/**
+ * The first user-filtered tasklist that contains this very process (`pid`),
+ * trying each spelling of the account in turn (DOMAIN\user, then user).
+ * When none does, the filter did not match how this machine names the
+ * account, and ownership cannot be established: the result is empty, so
+ * nothing counts. It never falls back to an unfiltered or session-scoped
+ * list, which would badge another account's processes.
+ */
+export declare function ownTasklist(run: (account: string) => string, accounts: string[], pid: number): string;
 /**
  * Lists active network connections asynchronously.
  * Calls cb(err, stdout) with raw connection output.

package/dist/lib/platform.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../src/lib/platform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH;;;;;;;;GAQG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAGvC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAarF;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ;;;;;OAKG;IACH,KAAK,EAAE,MAAM,CAAA;IACb,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAqBtE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,CAkBrF"}
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../src/lib/platform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAavC;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAQrG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAarF;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ;;;;;OAKG;IACH,KAAK,EAAE,MAAM,CAAA;IACb,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAqBtE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,CAkBrF"}

package/dist/lib/platform.js

@@ -9,21 +9,52 @@
  * see terminal windows flash on every detection cycle (ENG-2010). The flag is
  * a no-op on Unix; tests/unit/windows-hide.test.ts enforces it.
  */
-import { execSync, execFile } from "child_process";
+import { execSync, execFile, execFileSync } from "child_process";
+import { userInfo } from "os";
 const isWin = process.platform === "win32";
 const isLinux = process.platform === "linux";
 /**
- * Returns lowercase text listing all running processes.
- * Used for regex matching against editor/AI tool name patterns.
+ * Returns lowercase text listing running processes, one per line.
+ * Tool detection parses it into rows and keeps the watcher's own user's
+ * (detection.ts detectTools); never match a word against the whole text.
  *
- * - macOS/Linux: `ps aux` (full command lines)
- * - Windows: `tasklist` (image names like Code.exe, Cursor.exe)
- *
- * Output is lowercased so patterns like /\bcode\b/ match uniformly.
+ * - macOS/Linux: `ps aux` (full command lines, every user's)
+ * - Windows: `tasklist /fo csv /nh` (full image names like Code.exe,
+ *   Cursor.exe; the default table truncates them at 25 characters), asked for
+ *   the current user's processes only. tasklist rows carry a Session#, not
+ *   an account, and another account can run in the candidate's session
+ *   (`runas`), so the user filter has to happen here, and it never widens:
+ *   see ownTasklist.
  */
 export function getProcessList() {
-    const cmd = isWin ? "tasklist" : "ps aux";
-    return execSync(cmd, { timeout: 5000, encoding: "utf8", windowsHide: true }).toLowerCase();
+    if (!isWin)
+        return execSync("ps aux", { timeout: 5000, encoding: "utf8", windowsHide: true }).toLowerCase();
+    const user = userInfo().username;
+    const domain = process.env.USERDOMAIN;
+    return ownTasklist((account) => execFileSync("tasklist", ["/fo", "csv", "/nh", "/fi", `USERNAME eq ${account}`], {
+        timeout: 5000,
+        encoding: "utf8",
+        windowsHide: true,
+    }), domain ? [`${domain}\\${user}`, user] : [user], process.pid);
+}
+/**
+ * The first user-filtered tasklist that contains this very process (`pid`),
+ * trying each spelling of the account in turn (DOMAIN\user, then user).
+ * When none does, the filter did not match how this machine names the
+ * account, and ownership cannot be established: the result is empty, so
+ * nothing counts. It never falls back to an unfiltered or session-scoped
+ * list, which would badge another account's processes.
+ */
+export function ownTasklist(run, accounts, pid) {
+    for (const account of accounts) {
+        try {
+            const out = run(account).toLowerCase();
+            if (out.includes(`","${pid}","`))
+                return out;
+        }
+        catch { /* try the next spelling */ }
+    }
+    return "";
 }
 /**
  * Lists active network connections asynchronously.